$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/593a28e3-2743-3c3d-97c6-028e99548094.roa File: 593a28e3-2743-3c3d-97c6-028e99548094.roa (raw, json) Hash identifier: Ybs5q7tmG/C9zRBXfrO63ERC6jwqdPXFZfC7eaYffj8= Subject key identifier: 5E:9E:66:D2:69:79:04:D3:87:C6:C6:43:4E:49:38:13:AC:51:F4:BB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974EE3AB0C4835DB5322700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/593a28e3-2743-3c3d-97c6-028e99548094.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.28.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:ee:3a:b0:c4:83:5d:b5:32:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=68a9060b-6b52-44e3-a14f-a8e0bea69a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:2c:64:b1:b3:fa:af:d4:de:b9:fc:60:ca: 65:38:bd:c8:e4:06:0b:93:69:2c:53:d1:68:e5:a4: ab:f2:e5:80:53:3b:eb:b8:e3:ca:09:51:7f:e5:c0: 34:0e:8d:27:74:b3:86:18:40:9e:ee:e9:b1:2e:40: 13:94:15:aa:a0:92:ba:09:71:1e:d5:5a:6f:73:f6: 57:8d:28:d8:95:6c:bc:d9:5c:fe:c0:d0:48:9d:78: d9:58:a3:37:29:e9:e4:58:2d:36:01:3a:2c:23:2b: 5a:2f:c1:cb:6a:4d:72:8e:ba:a4:df:ad:a2:85:76: 9f:5c:d4:a9:1d:e6:8b:b9:05:1d:1e:d3:43:bb:f0: 76:76:ea:67:ca:82:ae:35:64:05:2d:ec:71:5e:5e: 8b:07:c9:1f:a1:9a:1b:32:e5:26:b6:a8:7e:fd:04: 37:ec:df:cf:42:01:65:7c:68:3f:e0:0f:70:02:f2: 3b:51:6b:bc:0f:0b:4a:1f:ec:a9:c5:82:7c:5e:c7: c2:bd:b6:6f:60:b8:05:14:94:39:65:c5:93:73:e3: 48:27:dc:9e:05:bf:11:0d:7e:db:5a:9c:ec:04:2e: fa:ab:3d:72:3a:c9:78:40:16:8a:8b:67:5d:29:09: 2f:a5:60:2c:60:36:91:cb:e4:1d:24:e9:7c:ab:86: 3f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9E:66:D2:69:79:04:D3:87:C6:C6:43:4E:49:38:13:AC:51:F4:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/593a28e3-2743-3c3d-97c6-028e99548094.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:be:45:76:f6:b7:67:c7:f3:ab:30:fa:c5:87:5a:60:38:ff: 28:19:f6:9a:8e:1b:db:b9:99:e9:de:a1:14:cb:9e:56:61:75: 8d:04:de:8d:3f:85:a7:d2:d2:6f:ab:f7:2c:20:51:37:da:51: 36:2d:ff:d6:94:05:ab:ac:ca:f7:13:bd:19:10:98:25:ef:75: eb:7f:3e:7b:cd:ab:8a:31:77:fb:b8:d1:95:a4:be:14:f8:20: f0:e6:03:a3:f7:d0:b0:5b:35:35:4d:df:70:48:04:04:94:46: 2b:8c:34:0e:64:2c:3c:46:b7:65:44:25:5a:93:dd:12:a3:72: 59:33:97:e9:a4:7a:bc:bd:6d:4f:08:a1:6b:d6:66:c8:95:ba: 2b:a0:68:ae:a1:75:18:45:8d:dd:5a:16:1e:25:08:a5:7b:82: 53:d7:c7:c8:86:90:fb:4d:cf:20:a3:d2:62:2d:69:29:cb:55: 45:3d:03:a9:51:40:cf:ea:fa:ab:4b:c0:4a:10:db:02:6c:ea: 3b:d2:af:24:b6:22:70:21:e2:f0:10:1d:c5:a2:65:1e:36:3d: 89:ae:60:88:1e:17:55:ec:80:19:65:a3:e1:d1:37:cf:48:bf: d3:b0:aa:78:b9:da:63:6b:c7:fb:57:d6:21:82:7a:70:72:9b: 7e:a9:67:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdO46sMSDXbUyJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjhhOTA2MGItNmI1Mi00NGUzLWExNGYtYThlMGJlYTY5YTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4csZLGz+q/U3rn8YMplOL3I5AYLk2ksU9Fo 5aSr8uWAUzvruOPKCVF/5cA0Do0ndLOGGECe7umxLkATlBWqoJK6CXEe1Vpvc/ZX jSjYlWy82Vz+wNBInXjZWKM3KenkWC02ATosIytaL8HLak1yjrqk362ihXafXNSp HeaLuQUdHtNDu/B2dupnyoKuNWQFLexxXl6LB8kfoZobMuUmtqh+/QQ37N/PQgFl fGg/4A9wAvI7UWu8DwtKH+ypxYJ8XsfCvbZvYLgFFJQ5ZcWTc+NIJ9yeBb8RDX7b WpzsBC76qz1yOsl4QBaKi2ddKQkvpWAsYDaRy+QdJOl8q4Y/owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6eZtJpeQTTh8bGQ05JOBOsUfS7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTkzYTI4ZTMtMjc0My0z YzNkLTk3YzYtMDI4ZTk5NTQ4MDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHe+RXb2t2fH86sw+sWHWmA4/ygZ9pqOG9u5meneoRTLnlZhdY0E3o0/ hafS0m+r9ywgUTfaUTYt/9aUBausyvcTvRkQmCXvdet/PnvNq4oxd/u40ZWkvhT4 IPDmA6P30LBbNTVN33BIBASURiuMNA5kLDxGt2VEJVqT3RKjclkzl+mkery9bU8I oWvWZsiVuiugaK6hdRhFjd1aFh4lCKV7glPXx8iGkPtNzyCj0mItaSnLVUU9A6lR QM/q+qtLwEoQ2wJs6jvSryS2InAh4vAQHcWiZR42PYmuYIgeF1XsgBllo+HRN89I v9Owqni52mNrx/tX1iGCenBym36pZ/0= -----END CERTIFICATE-----Generated at Sat Sep 26 18:58:25 2026 by rpki-client