$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c089dee-03bd-3da6-941c-b85b2c8db654.roa File: 2c089dee-03bd-3da6-941c-b85b2c8db654.roa (raw, json) Hash identifier: yVcfu7JNp99ZvKna37JU9cVWdty5DKBDi9IwPyOZq0M= Subject key identifier: 0E:49:E2:75:D4:49:74:C9:9A:5E:37:24:54:4B:DF:D0:4A:DC:62:55 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49730D611B84660406768BC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c089dee-03bd-3da6-941c-b85b2c8db654.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.19.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:0d:61:1b:84:66:04:06:76:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8032b606-89fc-4c6b-8bd4-fd3094d60a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:73:00:f4:68:29:46:fb:d1:24:49:27:a0: 9d:ae:34:0a:fa:b3:80:42:f7:7a:be:24:96:60:d7: a2:5f:22:e4:5f:69:bd:2d:7b:69:b2:84:65:9a:3f: 86:2b:03:39:1e:a3:91:9a:fa:78:94:3e:47:84:29: 43:ef:20:08:c7:e5:3a:f7:cf:9b:00:da:c1:c1:ed: f3:29:a7:cd:b1:7c:9e:f3:05:de:f1:1b:39:27:b1: c5:4c:3a:f4:17:2e:37:48:5e:6e:1b:8a:19:aa:68: 60:40:01:4f:47:de:9f:3f:48:b7:e6:48:85:8a:28: 6e:3f:a9:71:f0:57:34:17:2a:42:1d:f0:1a:8d:24: 5b:12:ba:f2:c5:9d:5e:9a:77:27:b0:5b:94:2e:47: 9a:b1:54:73:48:f2:15:24:e3:a6:35:8f:d7:29:89: 2b:bc:44:8b:f1:a7:17:21:b8:16:8d:6e:de:2b:cf: 81:ba:6a:e0:09:75:9f:64:86:d1:56:ec:d6:76:90: fb:4b:73:22:62:45:18:6a:e0:ad:15:3b:ba:79:44: 4b:27:02:2b:df:23:37:0a:cc:96:52:99:46:1f:e0: e3:2c:6e:b0:c9:6c:ec:1c:9e:05:9a:8a:f3:8d:4e: 05:22:17:a1:15:a4:57:b1:81:ad:a6:a3:04:7d:af: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:49:E2:75:D4:49:74:C9:9A:5E:37:24:54:4B:DF:D0:4A:DC:62:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2c089dee-03bd-3da6-941c-b85b2c8db654.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:fa:5b:bf:1c:3f:63:9e:4a:83:53:e2:a1:6b:e8:30:40:b6: 49:9d:6d:23:85:fe:de:33:ce:66:49:15:b0:fc:6e:0f:0b:d2: 7b:1b:ef:f7:f6:67:ec:84:86:f1:eb:c4:32:2d:34:14:ba:67: 23:b7:0e:2f:b2:38:9a:75:93:13:f8:1c:7e:78:f4:f1:23:00: d0:cf:1f:df:13:6a:be:6f:66:59:39:d2:16:87:8d:fd:6a:33: 25:52:ff:0a:06:50:88:9d:36:6e:6c:3d:1f:e7:a1:31:cf:a0: 02:5c:41:72:ae:26:31:95:69:67:71:a1:af:19:b9:18:cf:18: ce:29:2c:8b:71:eb:f3:e9:78:3d:91:6d:46:00:f5:43:00:c2: 86:b3:cc:da:05:c4:ae:e2:4a:ac:93:68:63:7f:c0:95:7e:27: b9:20:1c:85:95:02:3d:fd:19:7d:27:11:eb:e7:92:bf:85:43: 0e:83:7e:c1:7e:61:38:ec:86:b6:95:b5:58:8d:05:4f:8f:5f: ab:0c:5f:4e:dc:ae:5c:eb:a8:4e:63:5d:36:8d:50:ef:39:07: 02:47:4a:4f:27:ca:e9:51:99:3d:d5:8c:aa:fa:b1:10:68:b8: d2:e5:bf:cb:61:c0:f4:19:5b:a7:8c:08:5e:34:4d:64:02:3e: 05:39:56:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcw1hG4RmBAZ2i8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODAzMmI2MDYtODlmYy00YzZiLThiZDQtZmQzMDk0ZDYwYTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXBzAPRoKUb70SRJJ6CdrjQK+rOAQvd6viSW YNeiXyLkX2m9LXtpsoRlmj+GKwM5HqORmvp4lD5HhClD7yAIx+U698+bANrBwe3z KafNsXye8wXe8Rs5J7HFTDr0Fy43SF5uG4oZqmhgQAFPR96fP0i35kiFiihuP6lx 8Fc0FypCHfAajSRbErryxZ1emncnsFuULkeasVRzSPIVJOOmNY/XKYkrvESL8acX IbgWjW7eK8+BumrgCXWfZIbRVuzWdpD7S3MiYkUYauCtFTu6eURLJwIr3yM3CsyW UplGH+DjLG6wyWzsHJ4FmorzjU4FIhehFaRXsYGtpqMEfa/2ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5J4nXUSXTJml43JFRL39BK3GJVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmMwODlkZWUtMDNiZC0z ZGE2LTk0MWMtYjg1YjJjOGRiNjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/6W78cP2OeSoNT4qFr6DBAtkmdbSOF/t4zzmZJFbD8bg8L0nsb7/f2 Z+yEhvHrxDItNBS6ZyO3Di+yOJp1kxP4HH549PEjANDPH98Tar5vZlk50haHjf1q MyVS/woGUIidNm5sPR/noTHPoAJcQXKuJjGVaWdxoa8ZuRjPGM4pLItx6/PpeD2R bUYA9UMAwoazzNoFxK7iSqyTaGN/wJV+J7kgHIWVAj39GX0nEevnkr+FQw6DfsF+ YTjshraVtViNBU+PX6sMX07crlzrqE5jXTaNUO85BwJHSk8nyulRmT3VjKr6sRBo uNLlv8thwPQZW6eMCF40TWQCPgU5VsQ= -----END CERTIFICATE-----Generated at Sat Sep 26 01:53:45 2026 by rpki-client