$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa File: 2d526aab-3817-3369-8704-f5e3258bccd6.roa (raw, json) Hash identifier: CN0RyFSjAhhx82i/yw1/hAgUUOAItgTqSVTqhR83kIY= Subject key identifier: BC:8C:DF:CE:D3:D5:35:3C:D2:61:CD:DD:AC:60:22:7A:D6:EF:BE:6E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D6830D9A3940F9DAB2580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.28.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:68:30:d9:a3:94:0f:9d:ab:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=ebc9ecdf-a5fc-42f8-bd78-b6eb5fc8140b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e7:07:23:58:14:60:ab:26:89:ae:fb:71:93: 60:22:b9:28:9d:61:bb:ec:2b:95:b5:cd:8e:4f:78: f5:58:d7:43:7f:67:81:85:a0:1f:8a:94:ce:2d:ca: 59:9c:31:bc:e1:85:03:6d:41:47:94:52:90:96:e8: 5b:3b:73:41:a8:d9:51:f9:64:b5:0e:78:9f:dc:5a: ce:22:37:3a:29:26:69:1e:2d:ce:99:cf:33:ba:ec: 56:bb:15:15:76:df:c8:52:15:c9:67:7e:71:f9:79: ac:e8:c5:0f:90:c4:c0:a9:53:e7:4e:3c:d0:49:d2: b2:56:98:09:f7:7d:54:b8:92:e0:77:6d:30:e7:24: cf:97:d6:7f:7a:60:25:35:0d:8c:35:ea:be:24:9a: 74:a4:ed:04:5f:d4:64:8d:bf:b8:ab:33:1f:32:06: a6:d1:35:b1:95:89:bf:e0:84:69:41:23:e6:59:1e: ec:cb:08:9a:c1:62:82:be:3e:ee:2a:37:11:94:df: 39:54:aa:90:b4:65:e7:5c:a2:41:21:bf:85:96:3c: 93:69:09:89:73:2c:85:18:93:da:41:60:0c:a9:1c: 64:d8:b8:df:aa:3c:98:83:9d:fe:ff:15:c5:4a:90: c6:17:58:9e:cf:36:bc:41:c7:4a:d0:e6:bd:59:b2: 22:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8C:DF:CE:D3:D5:35:3C:D2:61:CD:DD:AC:60:22:7A:D6:EF:BE:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:7a:0b:c5:ac:16:90:ec:8d:38:d9:65:c9:b7:b7:71:b0:12: 87:93:93:ea:8b:a3:db:7e:cc:d7:b1:32:83:8b:93:52:f9:a6: 8b:ca:17:49:c7:a4:25:15:b7:fc:4a:3f:77:19:16:95:e3:11: e6:dd:1b:d4:10:80:cb:5d:4e:b4:39:48:c9:45:69:9f:75:36: 56:eb:31:62:57:ee:d8:09:4b:78:d2:31:f9:f0:a4:1a:74:7f: 52:a9:c1:e4:70:e3:60:a2:8f:a0:4e:7f:dd:a7:64:8a:e7:7e: 23:c3:51:44:79:46:1c:96:50:ed:a3:0e:ec:90:84:63:44:22: 43:01:be:3a:39:cc:10:bf:37:82:3d:92:f0:e5:9f:de:82:7e: 99:f4:81:01:63:d8:aa:0f:ca:0a:2d:9f:6b:a3:89:c9:9f:7c: 98:40:02:64:02:18:ec:08:b6:bc:d7:53:52:6e:ac:23:46:45: b8:e9:0f:86:0c:78:f9:d8:c4:af:44:23:0f:70:04:50:2b:43: a4:84:f7:a4:aa:38:fa:54:df:c9:8c:17:f1:ab:06:e9:28:33: ba:f3:07:56:04:54:7d:95:fd:c7:0a:57:45:22:01:6b:8f:70: c0:6b:bf:c8:38:b3:7f:33:c6:69:15:2b:cd:f4:04:ce:30:6e: ac:b2:af:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWgw2aOUD52rJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZWJjOWVjZGYtYTVmYy00MmY4LWJkNzgtYjZlYjVmYzgxNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+cHI1gUYKsmia77cZNgIrkonWG77CuVtc2O T3j1WNdDf2eBhaAfipTOLcpZnDG84YUDbUFHlFKQluhbO3NBqNlR+WS1Dnif3FrO Ijc6KSZpHi3Omc8zuuxWuxUVdt/IUhXJZ35x+Xms6MUPkMTAqVPnTjzQSdKyVpgJ 931UuJLgd20w5yTPl9Z/emAlNQ2MNeq+JJp0pO0EX9Rkjb+4qzMfMgam0TWxlYm/ 4IRpQSPmWR7sywiawWKCvj7uKjcRlN85VKqQtGXnXKJBIb+FljyTaQmJcyyFGJPa QWAMqRxk2LjfqjyYg53+/xXFSpDGF1iezza8QcdK0Oa9WbIitwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyM387T1TU80mHN3axgInrW775uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmQ1MjZhYWItMzgxNy0z MzY5LTg3MDQtZjVlMzI1OGJjY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR6C8WsFpDsjTjZZcm3t3GwEoeTk+qLo9t+zNexMoOLk1L5povKF0nH pCUVt/xKP3cZFpXjEebdG9QQgMtdTrQ5SMlFaZ91NlbrMWJX7tgJS3jSMfnwpBp0 f1KpweRw42Cij6BOf92nZIrnfiPDUUR5RhyWUO2jDuyQhGNEIkMBvjo5zBC/N4I9 kvDln96Cfpn0gQFj2KoPygotn2ujicmffJhAAmQCGOwItrzXU1JurCNGRbjpD4YM ePnYxK9EIw9wBFArQ6SE96SqOPpU38mMF/GrBukoM7rzB1YEVH2V/ccKV0UiAWuP cMBrv8g4s38zxmkVK830BM4wbqyyr2w= -----END CERTIFICATE-----Generated at Thu Oct 8 16:17:24 2026 by rpki-client