$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b9fae5-463a-3488-ad50-00b232211f44.roa File: 76b9fae5-463a-3488-ad50-00b232211f44.roa (raw, json) Hash identifier: wYYLOJv8eT2LIPSTI/WuvKp63Cl7B5kWZAq8RoRVgK0= Subject key identifier: 01:F0:17:45:DD:44:B5:28:39:0D:2A:50:B6:7C:1B:9A:1A:B8:7B:49 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4972ABA46FB3239CF38B3780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b9fae5-463a-3488-ad50-00b232211f44.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.28.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ab:a4:6f:b3:23:9c:f3:8b:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9abca87f-3d2a-48a6-a2b9-ee905a10708b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:90:b9:d0:2a:64:84:55:8a:d1:0b:2c:73:28: 7e:87:4b:e5:a4:68:f3:5b:ac:2b:38:48:31:c2:65: 60:9c:d7:1f:b0:62:73:8c:b0:eb:c7:58:3a:b5:9c: e2:59:63:1a:bb:02:d1:01:61:3d:c4:fe:4f:77:ec: ac:ee:18:01:0f:3c:26:14:6a:97:5f:10:5b:dc:c0: 51:ee:0d:a7:41:66:56:38:df:fc:e4:a8:ad:a3:d6: 2c:0b:04:b5:a5:ea:02:fe:98:2e:c2:87:d4:f4:7e: 1e:4c:49:f1:81:48:be:16:9b:1a:45:48:6d:f1:0c: b7:1f:5d:5f:db:e1:10:b7:4d:4e:7f:56:16:85:0a: 8a:93:55:08:ca:0a:00:31:b7:cf:8a:7c:4b:8d:01: a0:7e:43:fb:77:8e:99:8c:5d:d7:a4:bf:06:c6:96: 8b:9b:e7:ee:b3:01:de:b0:e6:44:a5:0e:49:f8:99: f9:e0:95:95:24:18:b8:77:69:3f:76:07:97:72:35: 08:bc:0e:59:13:80:6d:43:ee:d7:c3:f8:68:50:45: e4:7d:32:1a:ae:68:98:e4:c6:c9:96:3c:c2:35:dc: fe:46:11:2b:a1:57:de:96:26:8e:1c:f5:0e:88:22: ab:83:f2:c5:f5:95:a2:e9:67:67:b0:57:cf:14:98: f8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F0:17:45:DD:44:B5:28:39:0D:2A:50:B6:7C:1B:9A:1A:B8:7B:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/76b9fae5-463a-3488-ad50-00b232211f44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:7b:22:0b:15:9c:ea:7b:42:15:78:85:e1:dd:aa:70:61:43: 87:2c:88:7f:21:9e:fa:60:a6:37:cd:88:1f:10:31:bd:6f:84: 56:eb:5d:60:22:c0:9a:51:15:4c:23:0a:6b:33:b7:bf:df:84: c9:9e:a3:d4:a1:38:96:12:2d:73:0d:01:36:dc:2a:dc:4a:31: d2:50:41:c6:b3:cf:80:dd:0c:4c:7e:5b:80:29:85:22:20:b9: 93:1f:1d:b6:82:72:c4:ce:16:f3:fd:e5:49:9e:a8:82:52:25: b7:db:2e:13:36:da:da:79:cf:22:0b:d2:00:44:13:50:4d:83: c7:c0:f0:02:ad:6b:09:3e:90:21:a0:95:06:c1:61:81:0d:9a: 55:4f:5b:ae:10:73:dc:6a:78:4a:0f:df:3a:b9:1e:a1:1f:26: c4:0e:53:5b:aa:5e:28:bf:24:7d:d3:c3:fe:86:53:18:33:17: 53:8e:ea:c0:49:3b:81:21:5b:f6:43:32:04:a6:94:b1:21:46: 89:b4:89:67:c8:7e:4f:df:22:b4:8d:c5:52:84:1d:cc:04:47: 44:17:22:45:76:17:fb:1b:25:c0:6e:04:80:d3:38:0a:bd:da: 86:ef:ff:7d:ce:01:b9:05:5c:17:8d:18:55:ca:8c:3b:4c:ef: bd:84:2a:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcqukb7MjnPOLN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWFiY2E4N2YtM2QyYS00OGE2LWEyYjktZWU5MDVhMTA3MDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5C50CpkhFWK0Qsscyh+h0vlpGjzW6wrOEgx wmVgnNcfsGJzjLDrx1g6tZziWWMauwLRAWE9xP5Pd+ys7hgBDzwmFGqXXxBb3MBR 7g2nQWZWON/85Kito9YsCwS1peoC/pguwofU9H4eTEnxgUi+FpsaRUht8Qy3H11f 2+EQt01Of1YWhQqKk1UIygoAMbfPinxLjQGgfkP7d46ZjF3XpL8GxpaLm+fuswHe sOZEpQ5J+Jn54JWVJBi4d2k/dgeXcjUIvA5ZE4BtQ+7Xw/hoUEXkfTIarmiY5MbJ ljzCNdz+RhEroVfeliaOHPUOiCKrg/LF9ZWi6WdnsFfPFJj4/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHwF0XdRLUoOQ0qULZ8G5oauHtJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzZiOWZhZTUtNDYzYS0z NDg4LWFkNTAtMDBiMjMyMjExZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh7IgsVnOp7QhV4heHdqnBhQ4csiH8hnvpgpjfNiB8QMb1vhFbrXWAi wJpRFUwjCmszt7/fhMmeo9ShOJYSLXMNATbcKtxKMdJQQcazz4DdDEx+W4AphSIg uZMfHbaCcsTOFvP95UmeqIJSJbfbLhM22tp5zyIL0gBEE1BNg8fA8AKtawk+kCGg lQbBYYENmlVPW64Qc9xqeEoP3zq5HqEfJsQOU1uqXii/JH3Tw/6GUxgzF1OO6sBJ O4EhW/ZDMgSmlLEhRom0iWfIfk/fIrSNxVKEHcwER0QXIkV2F/sbJcBuBIDTOAq9 2obv/33OAbkFXBeNGFXKjDtM772EKqE= -----END CERTIFICATE-----Generated at Thu Oct 8 12:52:34 2026 by rpki-client