$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35d93c4a-0501-3baf-b877-149435f20d06.roa File: 35d93c4a-0501-3baf-b877-149435f20d06.roa (raw, json) Hash identifier: nkviYcmRNF+ijhttoVDjCyImgKIxmPtXg2kimnt9o6M= Subject key identifier: 3C:93:CD:22:F2:CD:D6:ED:20:E3:27:CC:EF:33:B1:F5:70:47:13:78 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4973934A7F7DCE0A378FAF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35d93c4a-0501-3baf-b877-149435f20d06.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.25.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:93:4a:7f:7d:ce:0a:37:8f:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8473c09e-8212-45be-a456-f52ee252015f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:02:74:76:9b:12:43:8a:88:f6:9a:8b:76:a2: ec:63:92:2f:45:6f:9f:5f:96:36:e6:66:c9:41:f4: ee:e0:f4:5e:38:22:9d:fd:74:72:5e:eb:19:e1:96: db:ff:28:7d:e4:9c:56:b1:3a:6e:ae:9c:55:a5:3a: 25:a6:08:38:7a:d3:c7:a1:91:54:7f:7a:8e:1b:1a: 2e:df:24:e1:be:b8:2c:82:dc:a6:8d:68:33:ca:92: bb:8c:c8:43:a1:e3:22:31:d2:28:f1:ab:7f:ce:f3: 26:fd:98:47:fe:44:14:b2:a5:b3:da:6f:8c:a0:da: 62:84:99:e9:dc:ac:a2:64:8f:87:5e:6d:5d:7f:8b: f0:fd:cd:e1:75:ef:f4:7c:70:46:82:4e:8c:44:ac: 65:ff:b5:73:fa:92:db:95:9e:e9:37:11:a7:90:84: e4:41:d0:03:01:d2:a0:c0:cf:f2:f9:79:57:02:68: 9f:b5:7a:1b:0e:59:ba:f5:96:93:1b:11:27:ce:66: e7:06:6f:fc:92:e0:ea:36:af:d3:cc:0f:ed:8e:59: a2:14:d8:8d:59:8e:56:53:d3:04:5b:a1:43:f0:40: 19:78:f4:e6:fb:03:65:55:84:db:f6:43:5a:9e:c4: e9:ab:dc:05:e2:be:34:5b:07:ad:f4:b0:ae:b5:13: e8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:93:CD:22:F2:CD:D6:ED:20:E3:27:CC:EF:33:B1:F5:70:47:13:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35d93c4a-0501-3baf-b877-149435f20d06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:29:d7:26:0e:ac:07:58:e2:e1:f4:a1:28:32:cc:7c:3a:e7: 98:63:e5:77:6f:41:ee:22:a2:f3:f1:fe:42:21:76:3a:e2:53: 4d:30:18:c2:5c:87:93:33:58:ca:ac:4d:d0:98:e6:99:12:db: 2c:ee:9b:f8:6e:fe:50:2f:37:ca:af:8d:98:aa:af:dc:15:e0: b3:a4:75:26:38:4c:ca:7c:aa:df:67:1b:34:8e:42:87:6e:4b: cb:24:08:af:2d:8e:f5:e4:0c:8d:e0:f8:83:99:b2:ca:07:d7: c2:cb:dd:7c:43:66:a2:da:67:08:7b:bf:82:a8:66:9f:e9:fe: 7f:5c:ca:fa:d4:66:c7:d7:33:8b:b2:14:49:69:58:ef:eb:9a: 92:a1:70:d5:a2:bc:a0:be:19:fc:42:77:f4:ff:06:8e:6c:9c: 1e:b2:45:25:79:20:d0:97:bb:12:25:50:a4:56:5e:ed:8d:c7: b9:eb:b5:a9:cb:f8:bb:9b:52:10:38:a7:11:2a:7e:fc:60:4f: 28:ff:6e:9f:5c:2f:f9:ca:f2:6e:31:68:b7:73:19:3e:26:90: 0b:db:f5:d8:72:0d:b1:78:6b:5f:4e:ea:db:dd:ec:eb:c7:95: 29:4b:7b:64:0d:a4:0c:1d:1d:6f:15:e2:1a:6a:46:c2:61:f0: e2:e6:d9:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5NKf33OCjePrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODQ3M2MwOWUtODIxMi00NWJlLWE0NTYtZjUyZWUyNTIwMTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigJ0dpsSQ4qI9pqLdqLsY5IvRW+fX5Y25mbJ QfTu4PReOCKd/XRyXusZ4Zbb/yh95JxWsTpurpxVpTolpgg4etPHoZFUf3qOGxou 3yThvrgsgtymjWgzypK7jMhDoeMiMdIo8at/zvMm/ZhH/kQUsqWz2m+MoNpihJnp 3KyiZI+HXm1df4vw/c3hde/0fHBGgk6MRKxl/7Vz+pLblZ7pNxGnkITkQdADAdKg wM/y+XlXAmiftXobDlm69ZaTGxEnzmbnBm/8kuDqNq/TzA/tjlmiFNiNWY5WU9ME W6FD8EAZePTm+wNlVYTb9kNansTpq9wF4r40Wwet9LCutRPoIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyTzSLyzdbtIOMnzO8zsfVwRxN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzVkOTNjNGEtMDUwMS0z YmFmLWI4NzctMTQ5NDM1ZjIwZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwp1yYOrAdY4uH0oSgyzHw655hj5XdvQe4iovPx/kIhdjriU00wGMJc h5MzWMqsTdCY5pkS2yzum/hu/lAvN8qvjZiqr9wV4LOkdSY4TMp8qt9nGzSOQodu S8skCK8tjvXkDI3g+IOZssoH18LL3XxDZqLaZwh7v4KoZp/p/n9cyvrUZsfXM4uy FElpWO/rmpKhcNWivKC+GfxCd/T/Bo5snB6yRSV5INCXuxIlUKRWXu2Nx7nrtanL +LubUhA4pxEqfvxgTyj/bp9cL/nK8m4xaLdzGT4mkAvb9dhyDbF4a19O6tvd7OvH lSlLe2QNpAwdHW8V4hpqRsJh8OLm2Sc= -----END CERTIFICATE-----Generated at Fri Oct 2 15:15:38 2026 by rpki-client