$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3567bc3f-98c6-34f6-9200-80fe14e390e0.roa File: 3567bc3f-98c6-34f6-9200-80fe14e390e0.roa (raw, json) Hash identifier: iQzTvLZqlkqQ7F3/gYkoyCUwf9zB97O3RCIXKyf6DCg= Subject key identifier: 88:65:AF:A1:7E:7F:A9:A8:E0:FA:36:68:88:38:50:C1:F3:9E:F2:B9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497326952BCED92CF66B1870 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3567bc3f-98c6-34f6-9200-80fe14e390e0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.29.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:26:95:2b:ce:d9:2c:f6:6b:18:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a8c696ee-b3cc-4b1e-8126-95cdb14ac517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:b8:ac:31:4e:d2:3b:e1:57:3a:d6:8c:55: c4:38:0c:0f:9a:50:06:c8:3e:81:7d:9c:7f:f1:3f: d0:f8:99:66:d8:9a:31:3c:98:eb:81:af:c6:26:55: 2c:cf:af:79:1c:41:0b:c9:2c:c2:d5:a9:a2:7f:15: 89:7d:a4:e6:ee:38:ab:70:f5:b5:8c:05:87:4f:a6: b9:47:4b:8d:55:f0:67:6d:ce:8d:57:60:ae:e4:5d: 9b:4e:81:8e:de:03:2d:1a:01:b9:e5:a9:e6:9f:d1: ea:f7:9d:7b:36:d9:67:ef:33:66:9c:04:0a:e1:ed: 71:ca:60:cf:23:4c:14:e0:fd:e7:7f:29:74:0f:86: 35:8c:42:ec:69:65:46:41:75:44:09:5e:ec:92:80: 36:04:06:4c:8a:e6:3c:13:c3:8a:5c:cb:d4:2f:e3: 76:cc:f9:44:5b:c8:ee:e3:c0:df:d5:93:d6:6e:fa: 9e:24:a1:65:b7:c6:2d:23:17:4f:d8:d2:27:ab:f1: 26:21:d3:b0:e6:a8:ef:5d:12:27:0a:cc:e3:2f:ba: 48:a7:63:ee:00:08:01:ae:5e:d2:0d:2f:8f:d1:af: d0:f8:a4:df:cd:92:7a:c3:1f:da:a6:05:25:28:f8: b3:84:8c:34:98:56:de:67:7c:20:fb:ba:2d:3f:76: 78:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:65:AF:A1:7E:7F:A9:A8:E0:FA:36:68:88:38:50:C1:F3:9E:F2:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3567bc3f-98c6-34f6-9200-80fe14e390e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e6:6a:11:da:40:2c:af:52:d5:4f:ff:1e:7f:2f:67:12:52: ce:ad:42:02:d3:43:7a:3e:d4:18:a9:81:cc:d2:60:65:e0:19: d6:f4:1d:2b:f2:a2:08:2c:20:a0:af:16:78:66:65:a8:78:3a: 4d:73:f8:bd:3b:b1:aa:55:e3:81:37:c1:54:cd:88:f2:04:d6: 0e:30:a9:fe:1c:40:aa:89:eb:df:53:f4:8a:d7:4b:f5:ac:ff: 5a:8e:72:e1:2f:73:3c:09:2b:0e:37:99:6b:4e:8b:4b:86:3e: 0d:b3:71:e5:b3:bc:c9:7d:c3:b6:45:0e:87:5a:aa:78:b4:23: 1b:66:d4:17:6c:60:7c:6c:13:ab:69:be:12:3f:dd:69:66:6f: 4c:c0:1a:a1:f5:0f:f9:ff:bd:60:c4:51:ce:c0:6b:ce:a1:a9: a5:74:06:1e:c1:0a:3b:cb:6a:b7:cc:5f:de:8f:c3:f6:23:1d: 8f:91:f1:1a:3d:ec:29:9c:0a:5f:c4:63:44:9a:23:fc:21:26: 2f:12:b3:00:8b:f9:ca:4d:e2:22:98:a9:2d:b5:d4:bb:ad:ec: de:e7:70:9b:6b:b7:a6:29:80:50:be:cd:ea:91:8d:48:6b:3f: f1:1e:f2:b9:31:91:03:27:0f:ca:de:ab:1d:f5:25:22:c0:20: 83:a9:e9:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcyaVK87ZLPZrGHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YThjNjk2ZWUtYjNjYy00YjFlLTgxMjYtOTVjZGIxNGFjNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/+4rDFO0jvhVzrWjFXEOAwPmlAGyD6BfZx/ 8T/Q+Jlm2JoxPJjrga/GJlUsz695HEELySzC1amifxWJfaTm7jircPW1jAWHT6a5 R0uNVfBnbc6NV2Cu5F2bToGO3gMtGgG55anmn9Hq9517Ntln7zNmnAQK4e1xymDP I0wU4P3nfyl0D4Y1jELsaWVGQXVECV7skoA2BAZMiuY8E8OKXMvUL+N2zPlEW8ju 48Df1ZPWbvqeJKFlt8YtIxdP2NInq/EmIdOw5qjvXRInCszjL7pIp2PuAAgBrl7S DS+P0a/Q+KTfzZJ6wx/apgUlKPizhIw0mFbeZ3wg+7otP3Z4kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhlr6F+f6mo4Po2aIg4UMHznvK5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzU2N2JjM2YtOThjNi0z NGY2LTkyMDAtODBmZTE0ZTM5MGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDmahHaQCyvUtVP/x5/L2cSUs6tQgLTQ3o+1BipgczSYGXgGdb0HSvy oggsIKCvFnhmZah4Ok1z+L07sapV44E3wVTNiPIE1g4wqf4cQKqJ699T9IrXS/Ws /1qOcuEvczwJKw43mWtOi0uGPg2zceWzvMl9w7ZFDodaqni0Ixtm1BdsYHxsE6tp vhI/3Wlmb0zAGqH1D/n/vWDEUc7Aa86hqaV0Bh7BCjvLarfMX96Pw/YjHY+R8Ro9 7CmcCl/EY0SaI/whJi8SswCL+cpN4iKYqS211Lut7N7ncJtrt6YpgFC+zeqRjUhr P/Ee8rkxkQMnD8reqx31JSLAIIOp6VI= -----END CERTIFICATE-----Generated at Wed Sep 30 09:48:45 2026 by rpki-client