$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/60200b1d-a94c-37cb-9f69-43882684300b.roa File: 60200b1d-a94c-37cb-9f69-43882684300b.roa (raw, json) Hash identifier: Jdfx3Z1kMbXVlVJ94HfSRIcp1eFSNa9rAJvzQZq0+8Q= Subject key identifier: 3F:29:EC:E9:F3:D3:0C:A3:FE:57:57:46:30:A6:54:2B:9E:E7:62:9D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974EDF91D7320E8C2B12580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/60200b1d-a94c-37cb-9f69-43882684300b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.28.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:ed:f9:1d:73:20:e8:c2:b1:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b4c22242-25fc-4ea2-83ed-69939b93fb60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0a:9c:5c:e5:ba:2e:e4:8b:1a:1c:07:8c:16: d2:0a:0a:67:e5:58:88:09:42:af:c7:e8:8f:4c:f7: bb:80:f0:a7:48:dc:46:1b:b9:87:89:34:a8:45:b3: 63:87:38:0d:ff:b5:0d:7f:f9:ce:35:3d:42:8d:e3: 94:a6:a9:31:73:20:4d:6b:0b:c5:ed:68:e7:e3:0e: cb:73:ca:00:53:22:62:8e:05:97:c9:a8:21:b3:b8: e9:64:79:b6:51:6b:b1:8b:77:a1:b0:8e:c7:92:21: d0:85:71:b8:64:b0:83:b8:0e:62:5e:3a:a0:3f:d7: c7:10:61:d8:6f:3c:aa:c4:95:84:bf:18:94:61:63: ab:c0:ce:ba:dd:a2:02:13:9b:ec:dc:43:bc:22:65: a5:00:d6:c3:7f:66:17:44:85:10:01:36:50:65:cd: 02:11:20:b1:fd:e9:75:b9:23:83:a8:aa:2a:f7:49: 3d:50:80:3d:36:04:2f:de:e8:9c:09:80:0b:7b:35: db:86:fd:3b:79:68:db:24:f6:26:a7:fb:52:23:f8: 18:a7:97:f9:dc:5c:0c:4d:d6:75:ec:0f:54:05:ff: 75:ee:2f:b5:63:73:70:7c:4b:e2:7b:ad:23:f6:ca: 05:92:fa:48:c0:6d:31:35:f2:36:8d:fc:0f:c2:23: ce:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:29:EC:E9:F3:D3:0C:A3:FE:57:57:46:30:A6:54:2B:9E:E7:62:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/60200b1d-a94c-37cb-9f69-43882684300b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a3:8b:d3:a5:6a:ed:3f:a4:8e:ff:2e:7a:e7:61:17:5c:86: bf:69:81:dc:58:9c:05:5c:eb:11:9a:e4:cd:5b:a2:46:77:c3: a1:6b:5d:9c:52:ea:39:9d:82:53:94:2f:e3:8c:90:ff:d9:f6: 68:44:e1:ff:05:b7:5f:a2:f5:fe:b3:2a:8a:4c:9e:7b:f3:cb: 3e:d5:fb:40:02:7b:ee:d0:fe:aa:ed:e2:80:2f:d0:07:b0:2e: fa:6a:05:c6:c6:6f:27:64:46:f9:ea:ba:e5:c4:3d:93:fa:a2: bc:29:ab:a9:73:ba:52:a5:d4:30:59:0f:4a:a0:f1:7f:e0:0b: a6:5a:81:fe:ee:d2:d0:4a:2f:ca:ed:c4:9e:13:23:2b:cb:09: b3:6d:3c:e9:82:93:7e:20:72:35:bf:ba:92:ce:41:ab:76:e6: 8f:c9:fe:46:04:10:b6:b1:18:06:9a:e5:49:f0:b4:b7:32:f9: 05:a6:3f:3e:00:20:5d:3d:6e:67:b7:db:46:ea:fd:96:52:b5: fd:10:db:bf:4e:d3:78:ff:8f:81:dd:b2:6e:ba:90:e9:62:b3: 63:43:dd:d9:55:a8:a6:7a:7c:17:32:3e:a1:6e:46:0c:ff:18: 92:9a:c7:39:62:b0:82:60:d7:e7:e9:8c:cc:80:dc:50:d3:de: 0b:78:29:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdO35HXMg6MKxJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjRjMjIyNDItMjVmYy00ZWEyLTgzZWQtNjk5MzliOTNmYjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQqcXOW6LuSLGhwHjBbSCgpn5ViICUKvx+iP TPe7gPCnSNxGG7mHiTSoRbNjhzgN/7UNf/nONT1CjeOUpqkxcyBNawvF7Wjn4w7L c8oAUyJijgWXyaghs7jpZHm2UWuxi3ehsI7HkiHQhXG4ZLCDuA5iXjqgP9fHEGHY bzyqxJWEvxiUYWOrwM663aICE5vs3EO8ImWlANbDf2YXRIUQATZQZc0CESCx/el1 uSODqKoq90k9UIA9NgQv3uicCYALezXbhv07eWjbJPYmp/tSI/gYp5f53FwMTdZ1 7A9UBf917i+1Y3NwfEvie60j9soFkvpIwG0xNfI2jfwPwiPO4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8p7Onz0wyj/ldXRjCmVCue52KdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjAyMDBiMWQtYTk0Yy0z N2NiLTlmNjktNDM4ODI2ODQzMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOji9Olau0/pI7/LnrnYRdchr9pgdxYnAVc6xGa5M1bokZ3w6FrXZxS 6jmdglOUL+OMkP/Z9mhE4f8Ft1+i9f6zKopMnnvzyz7V+0ACe+7Q/qrt4oAv0Aew LvpqBcbGbydkRvnquuXEPZP6orwpq6lzulKl1DBZD0qg8X/gC6Zagf7u0tBKL8rt xJ4TIyvLCbNtPOmCk34gcjW/upLOQat25o/J/kYEELaxGAaa5UnwtLcy+QWmPz4A IF09bme320bq/ZZStf0Q279O03j/j4Hdsm66kOlis2ND3dlVqKZ6fBcyPqFuRgz/ GJKaxzlisIJg1+fpjMyA3FDT3gt4Kas= -----END CERTIFICATE-----Generated at Sun Oct 4 21:52:21 2026 by rpki-client