$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f999442-0fed-336d-ae34-f221e67c1a3a.roa File: 4f999442-0fed-336d-ae34-f221e67c1a3a.roa (raw, json) Hash identifier: s012OksfUIbWXlSoldUBGKPxioRaE0WcHnbBqv8QkWg= Subject key identifier: 2B:59:CA:6D:43:A9:CF:14:02:7A:79:6C:17:3A:5A:63:1E:62:07:E9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EF87CE21CBC693D8962CBD660 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f999442-0fed-336d-ae34-f221e67c1a3a.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.25.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:e2:1c:bc:69:3d:89:62:cb:d6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=a53b18f2-c24e-4813-8b8e-1f505b35f47a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:34:5c:20:2a:1b:6f:be:44:7c:f9:24:22: 9d:73:04:38:14:e5:b1:fc:34:5c:a4:6d:8c:cb:3d: 99:04:66:d9:14:13:ca:18:52:84:27:e4:e8:f4:5e: 00:02:7e:41:06:2f:fd:9d:f1:0e:e5:75:1b:d0:48: 12:ac:45:ed:f2:e6:d9:25:83:69:62:74:9d:b6:f4: 8d:63:1b:5b:64:69:71:5a:73:be:cc:d5:62:8a:04: 39:80:03:77:4f:7b:3d:ee:d2:b2:a7:1f:6a:73:68: ec:8e:9e:63:c7:2c:93:f0:90:a7:39:26:a3:0a:22: 18:eb:8c:4f:db:dd:bc:00:62:06:91:68:9c:89:6c: 5e:3a:4f:a1:d8:57:9b:90:73:f0:0c:84:25:f7:1c: 4a:cf:6a:cc:c2:b4:7c:55:13:c4:3d:fc:95:f2:3b: 21:66:72:d1:23:28:9f:59:dd:9a:77:3c:de:fe:93: 57:1a:2c:35:0c:c6:db:1b:ce:0f:cd:1f:e7:87:b9: 3a:c8:ff:ca:54:e1:64:f9:e3:d3:e9:28:23:39:67: 62:46:8f:14:14:2a:ca:68:d9:fe:c0:d6:5e:c0:8d: 70:3b:ca:7a:71:87:30:34:4b:9c:30:9e:9a:ce:e9: 9c:d7:28:a7:cf:3c:5d:19:83:4a:ee:35:65:5a:3d: b4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:59:CA:6D:43:A9:CF:14:02:7A:79:6C:17:3A:5A:63:1E:62:07:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f999442-0fed-336d-ae34-f221e67c1a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a1:f9:58:e1:03:51:c8:17:d8:66:c9:a6:f8:4b:3e:45:cf: cd:45:40:9a:b4:25:94:5f:b7:d5:60:7d:2c:cf:78:45:38:d6: b2:a6:11:f5:74:4f:26:b5:f9:5c:9f:f0:a2:4d:d7:4c:94:15: a1:5d:9e:b3:59:4f:0c:83:5b:44:fb:18:d4:9f:a1:b3:a6:da: b4:91:1b:e1:98:c8:67:d3:62:b9:02:81:05:89:5b:af:be:ec: 32:32:68:49:f4:83:85:ba:4a:13:67:23:fa:06:ec:39:54:60: 01:83:7d:e2:87:84:4f:64:bd:fd:d0:25:69:ea:ad:2d:84:12: de:ab:1e:d7:25:7c:47:6a:70:ff:4e:21:e4:3a:5a:d2:2c:10: a1:3b:0e:ea:1b:d8:72:44:e7:0d:4b:06:0a:e8:90:bd:54:7f: ca:10:17:5d:b3:07:75:ed:15:dc:70:98:f7:2c:ee:8a:90:b1: 95:81:48:24:5b:c4:14:bf:e7:d8:41:71:33:f6:11:45:93:24: 0f:17:12:1a:7c:52:d9:a8:a3:c6:f6:12:34:98:14:d3:b0:19: ab:9f:50:57:23:54:6c:fe:7f:ac:09:27:b5:ee:ab:b7:0b:d2: ce:22:c9:a4:23:0e:15:1d:24:13:07:3d:d5:f9:3b:25:29:5c: de:76:33:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fOIcvGk9iWLL1mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk YTUzYjE4ZjItYzI0ZS00ODEzLThiOGUtMWY1MDViMzVmNDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi40XCAqG2++RHz5JCKdcwQ4FOWx/DRcpG2M yz2ZBGbZFBPKGFKEJ+To9F4AAn5BBi/9nfEO5XUb0EgSrEXt8ubZJYNpYnSdtvSN YxtbZGlxWnO+zNViigQ5gAN3T3s97tKypx9qc2jsjp5jxyyT8JCnOSajCiIY64xP 2928AGIGkWiciWxeOk+h2FebkHPwDIQl9xxKz2rMwrR8VRPEPfyV8jshZnLRIyif Wd2adzze/pNXGiw1DMbbG84PzR/nh7k6yP/KVOFk+ePT6SgjOWdiRo8UFCrKaNn+ wNZewI1wO8p6cYcwNEucMJ6azumc1yinzzxdGYNK7jVlWj20tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtZym1Dqc8UAnp5bBc6WmMeYgfpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY5OTk0NDItMGZlZC0z MzZkLWFlMzQtZjIyMWU2N2MxYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmh+VjhA1HIF9hmyab4Sz5Fz81FQJq0JZRft9VgfSzPeEU41rKmEfV0 Tya1+Vyf8KJN10yUFaFdnrNZTwyDW0T7GNSfobOm2rSRG+GYyGfTYrkCgQWJW6++ 7DIyaEn0g4W6ShNnI/oG7DlUYAGDfeKHhE9kvf3QJWnqrS2EEt6rHtclfEdqcP9O IeQ6WtIsEKE7Duob2HJE5w1LBgrokL1Uf8oQF12zB3XtFdxwmPcs7oqQsZWBSCRb xBS/59hBcTP2EUWTJA8XEhp8Utmoo8b2EjSYFNOwGaufUFcjVGz+f6wJJ7Xuq7cL 0s4iyaQjDhUdJBMHPdX5OyUpXN52M5A= -----END CERTIFICATE-----Generated at Sun Oct 4 22:36:45 2026 by rpki-client