$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a66e457-9702-3b54-b4dd-dc18e3258958.roa File: 3a66e457-9702-3b54-b4dd-dc18e3258958.roa (raw, json) Hash identifier: UZmz5GgQxpP9ErQUasf348vm/CUlwPJxCC8gUQ1QZ6A= Subject key identifier: 91:20:3F:0B:A8:2D:D5:CF:DA:8C:AC:24:0E:59:7B:5E:59:A3:F4:47 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49739925F01F61906F75C200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a66e457-9702-3b54-b4dd-dc18e3258958.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.28.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:99:25:f0:1f:61:90:6f:75:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=29f9c3b0-eb51-4230-b81a-bec29bbc65b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:66:10:16:91:1d:4c:35:0c:5a:76:58:fb:9a: 80:55:d2:d9:55:46:66:42:b0:6d:e3:9e:52:85:1e: 32:8c:0a:9a:fb:08:c8:a6:06:97:d8:7c:a8:39:77: da:e7:fa:1d:55:44:cb:21:aa:b6:09:70:d1:7f:87: c0:b1:38:34:ee:4d:56:95:31:06:7f:38:53:3b:8a: cc:06:75:63:9a:44:77:82:15:cc:3b:71:45:04:78: 95:b8:0d:a2:13:6d:b6:e0:ae:5e:be:7b:9b:94:b3: e2:2d:f5:af:dd:6e:4a:7b:80:b2:b4:af:25:38:17: 5d:ae:c1:96:03:48:48:30:50:60:a0:43:97:4e:f1: b4:6d:0c:c4:f6:2c:10:ef:21:bf:2d:ff:af:71:6c: 53:39:84:45:7b:32:2a:47:a0:bb:fc:3f:91:17:9e: 97:f1:00:fd:be:a1:58:25:ad:8f:59:29:94:12:a5: 82:d3:42:ba:27:2a:79:5b:d1:08:77:96:30:d6:ec: bc:18:30:8b:27:54:a1:a5:dc:77:90:59:43:4a:31: 62:50:f7:28:db:b7:b3:a8:7d:b7:fd:54:7a:2f:b1: ed:00:55:b4:f8:4f:81:bf:c0:9b:33:cd:e2:96:46: ef:c7:99:44:77:1e:6c:65:b6:25:45:4f:4f:c4:2d: c7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:20:3F:0B:A8:2D:D5:CF:DA:8C:AC:24:0E:59:7B:5E:59:A3:F4:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a66e457-9702-3b54-b4dd-dc18e3258958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:2f:e9:b6:f6:f8:e0:54:72:bf:7e:75:0a:e3:53:ed:95:d7: 03:5c:22:95:ce:23:31:dd:f7:bc:45:bf:f3:e2:8d:a0:f8:c5: c8:60:ed:b1:f1:49:68:ed:a0:9c:d9:fb:83:4a:3d:a6:37:21: 9d:f9:26:e7:05:eb:04:e4:26:63:3d:08:50:dc:ea:70:f8:69: 42:ac:04:72:ef:a7:41:37:b7:1e:49:20:1b:c4:6b:dd:d6:29: 9c:5f:03:be:14:bd:d5:e1:91:1f:6d:73:82:96:2b:0f:ce:26: 7c:69:73:d4:ec:0f:bb:11:ab:72:58:a1:b9:6f:73:66:72:7b: 72:5d:20:d7:aa:f0:dc:b2:5d:bb:c0:74:db:f2:46:d0:a5:24: 34:7e:30:95:b1:07:e1:b2:b9:28:03:7f:11:b4:75:2b:35:a8: 85:03:a4:92:92:06:9f:23:d1:7d:f2:df:1c:cd:e5:ba:25:ec: 45:cb:32:ea:e0:ea:a7:3f:54:de:31:d8:09:a5:77:8a:fe:02: 1b:a8:70:e3:d1:a8:c8:7d:84:88:67:c7:bc:5b:70:1c:85:b0: fa:bb:b8:bc:87:54:28:0c:cd:c6:70:8b:be:34:05:66:47:14: 8a:b4:f3:4f:c2:52:0d:4a:8f:d7:9e:03:50:d6:00:3a:2e:c1: 9a:81:54:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5kl8B9hkG91wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjlmOWMzYjAtZWI1MS00MjMwLWI4MWEtYmVjMjliYmM2NWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWYQFpEdTDUMWnZY+5qAVdLZVUZmQrBt455S hR4yjAqa+wjIpgaX2HyoOXfa5/odVUTLIaq2CXDRf4fAsTg07k1WlTEGfzhTO4rM BnVjmkR3ghXMO3FFBHiVuA2iE2224K5evnublLPiLfWv3W5Ke4CytK8lOBddrsGW A0hIMFBgoEOXTvG0bQzE9iwQ7yG/Lf+vcWxTOYRFezIqR6C7/D+RF56X8QD9vqFY Ja2PWSmUEqWC00K6Jyp5W9EId5Yw1uy8GDCLJ1Shpdx3kFlDSjFiUPco27ezqH23 /VR6L7HtAFW0+E+Bv8CbM83ilkbvx5lEdx5sZbYlRU9PxC3HYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEgPwuoLdXP2oysJA5Ze15Zo/RHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2E2NmU0NTctOTcwMi0z YjU0LWI0ZGQtZGMxOGUzMjU4OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgv6bb2+OBUcr9+dQrjU+2V1wNcIpXOIzHd97xFv/PijaD4xchg7bHx SWjtoJzZ+4NKPaY3IZ35JucF6wTkJmM9CFDc6nD4aUKsBHLvp0E3tx5JIBvEa93W KZxfA74UvdXhkR9tc4KWKw/OJnxpc9TsD7sRq3JYoblvc2Zye3JdINeq8NyyXbvA dNvyRtClJDR+MJWxB+GyuSgDfxG0dSs1qIUDpJKSBp8j0X3y3xzN5bol7EXLMurg 6qc/VN4x2Amld4r+AhuocOPRqMh9hIhnx7xbcByFsPq7uLyHVCgMzcZwi740BWZH FIq080/CUg1Kj9eeA1DWADouwZqBVH4= -----END CERTIFICATE-----Generated at Tue Sep 29 17:53:43 2026 by rpki-client