$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/38185859-f372-3ab1-819f-28a12938243a.roa File: 38185859-f372-3ab1-819f-28a12938243a.roa (raw, json) Hash identifier: h0CdAL7afJruGU1nKJZ1roaJW3ghWSx4GxOoZur0GFA= Subject key identifier: 8D:1B:6E:2A:95:FF:11:95:85:52:12:19:FA:CF:7F:CE:E9:E2:65:B0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497336C4FFCB8AF2FBB2C500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/38185859-f372-3ab1-819f-28a12938243a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.27.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:36:c4:ff:cb:8a:f2:fb:b2:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1bb12947-3d10-40f0-9b85-380150f69def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:87:74:d3:70:5b:ba:23:55:ee:9a:34:0a:87: df:56:6e:24:45:58:1f:e9:af:92:c0:3e:7d:38:a9: a1:14:d9:c4:0b:ad:4f:b9:8b:cb:26:ff:87:c4:c7: 6e:d3:9c:be:07:b2:92:e5:c6:cb:7c:06:36:f1:ad: 6a:14:6a:f3:25:55:00:e2:a1:49:fa:b4:1c:d6:63: b1:96:b0:49:0e:13:64:6f:18:fb:89:f9:08:21:30: a2:fa:0b:1b:66:f1:48:18:48:96:e9:d8:63:f6:fc: 6c:17:b7:43:5e:56:8e:6e:df:a0:9c:18:27:46:a8: 75:41:6c:0f:85:08:d8:b9:e5:ce:9b:db:fd:41:81: 98:fb:0f:49:c3:68:48:05:a4:a9:e0:c6:b5:5c:e6: 9d:c6:89:f4:3a:72:9b:1c:fd:be:21:61:03:20:1c: f6:03:67:2d:32:2e:6b:c9:6a:e5:53:7f:c9:76:ba: 78:6b:55:08:e0:16:b1:1c:98:50:38:ce:ed:63:73: 0c:18:22:56:8f:99:06:68:c7:5a:90:9a:2c:74:70: 96:0a:f5:d3:19:2b:f4:3b:81:61:18:80:2c:9c:91: b1:7a:df:aa:4d:1c:56:c2:26:8a:92:11:ec:9b:24: e3:5d:05:01:e0:1c:e2:fa:55:e4:87:15:bb:ce:5b: 8a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1B:6E:2A:95:FF:11:95:85:52:12:19:FA:CF:7F:CE:E9:E2:65:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/38185859-f372-3ab1-819f-28a12938243a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ed:d2:fb:5a:1f:bf:4e:a7:e6:7f:fb:09:62:da:a0:b2:c8: 99:61:ff:45:24:ac:de:9a:50:6c:61:5f:f2:ba:d0:4c:cc:8a: bc:b1:3c:31:59:e6:66:e7:9d:b2:ca:45:08:2b:fc:6d:e4:2a: 8a:e7:4e:54:64:7f:e9:3b:12:10:8a:30:2c:bf:83:67:e1:84: 0c:54:32:5f:f7:8d:21:93:07:a7:95:f9:04:35:df:35:5f:9e: 3c:4d:ba:03:df:ae:1c:52:35:f1:2b:52:40:cc:6e:c4:de:90: 0a:28:38:f9:a2:dd:d7:d0:db:42:0a:5b:25:0c:81:78:c5:1b: c6:a5:6f:39:0f:8c:ca:72:26:84:04:b0:a2:8d:cd:84:d2:53: e3:32:24:86:86:ed:10:70:88:cd:eb:b9:b8:60:e8:46:84:71: eb:fa:f3:c5:e5:8d:9c:9f:47:dc:1f:8e:2a:f7:ff:96:dc:23: 8f:bc:aa:d1:7e:1f:ab:e0:df:64:22:b6:3e:cb:d5:6a:43:5d: fb:b1:32:6f:39:d6:58:ee:0c:5a:9c:11:27:3a:16:3b:c8:dc: 52:f5:b7:25:2d:57:8c:b9:14:f7:c4:5d:85:53:05:a5:3a:ea: b5:57:c1:3c:9d:c4:34:1f:14:22:ac:86:ae:4d:3d:72:3a:fe: 02:a0:3a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczbE/8uK8vuyxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWJiMTI5NDctM2QxMC00MGYwLTliODUtMzgwMTUwZjY5ZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkod003BbuiNV7po0CoffVm4kRVgf6a+SwD59 OKmhFNnEC61PuYvLJv+HxMdu05y+B7KS5cbLfAY28a1qFGrzJVUA4qFJ+rQc1mOx lrBJDhNkbxj7ifkIITCi+gsbZvFIGEiW6dhj9vxsF7dDXlaObt+gnBgnRqh1QWwP hQjYueXOm9v9QYGY+w9Jw2hIBaSp4Ma1XOadxon0OnKbHP2+IWEDIBz2A2ctMi5r yWrlU3/Jdrp4a1UI4BaxHJhQOM7tY3MMGCJWj5kGaMdakJosdHCWCvXTGSv0O4Fh GIAsnJGxet+qTRxWwiaKkhHsmyTjXQUB4Bzi+lXkhxW7zluKowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0bbiqV/xGVhVISGfrPf87p4mWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzgxODU4NTktZjM3Mi0z YWIxLTgxOWYtMjhhMTI5MzgyNDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/t0vtaH79Op+Z/+wli2qCyyJlh/0UkrN6aUGxhX/K60EzMiryxPDFZ 5mbnnbLKRQgr/G3kKornTlRkf+k7EhCKMCy/g2fhhAxUMl/3jSGTB6eV+QQ13zVf njxNugPfrhxSNfErUkDMbsTekAooOPmi3dfQ20IKWyUMgXjFG8albzkPjMpyJoQE sKKNzYTSU+MyJIaG7RBwiM3rubhg6EaEcev688XljZyfR9wfjir3/5bcI4+8qtF+ H6vg32Qitj7L1WpDXfuxMm851ljuDFqcESc6FjvI3FL1tyUtV4y5FPfEXYVTBaU6 6rVXwTydxDQfFCKshq5NPXI6/gKgOvE= -----END CERTIFICATE-----Generated at Thu Oct 8 16:55:58 2026 by rpki-client