$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f116545-bb5f-3517-a869-d409800d80ac.roa File: 7f116545-bb5f-3517-a869-d409800d80ac.roa (raw, json) Hash identifier: 8Izh/2RZ8lVeCI2K0EkzbA0bKuK17TsDsp/OZdr3gjI= Subject key identifier: 45:43:FF:56:50:FB:87:74:38:E2:F0:4D:6B:E6:68:A7:49:31:2F:E2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497330FFCB83CF5E2C604080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f116545-bb5f-3517-a869-d409800d80ac.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.25.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:30:ff:cb:83:cf:5e:2c:60:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2dcd3b3a-5279-4462-83e3-50f0c9928717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:10:18:d0:18:d4:99:04:bb:3f:57:66:63:51: 1c:76:e2:97:b1:7f:86:4b:8e:21:83:14:24:f1:94: 33:00:b9:9a:e5:83:ee:b4:52:1b:da:3b:c4:a1:ba: 8f:56:d6:a6:ad:d5:2e:5c:5d:1e:2a:1e:55:5c:6d: f4:1c:6c:28:cb:49:0c:4a:a1:d2:14:35:93:9c:6d: 14:bc:60:ce:e1:09:25:a1:21:6d:47:92:6b:40:14: b7:42:40:51:cd:92:04:56:7a:a8:b9:96:59:bd:ad: 9b:2c:c7:b4:0f:7f:8a:7c:35:46:06:32:78:54:54: 40:29:93:8f:27:99:23:2b:0a:46:ae:1c:1b:af:3d: 81:00:20:22:9f:b5:f0:4f:60:2b:dc:27:8e:98:95: 7e:58:cb:3a:82:c6:02:00:84:4a:87:64:b6:bb:08: 2a:4c:94:41:59:88:6c:f0:87:df:a7:29:af:6e:e4: e9:3f:f1:12:5e:be:6b:4c:2d:db:89:5d:48:a1:52: 65:5a:b4:d5:3e:b8:10:ec:f1:64:79:b7:df:94:f2: 39:ca:47:a9:bb:b9:bb:60:58:84:8f:55:02:ba:fb: c5:f6:e5:b7:08:a3:7f:b3:92:69:37:29:8b:fd:c0: 92:23:f7:20:0b:17:a2:b4:25:56:eb:2c:01:96:99: 0d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:43:FF:56:50:FB:87:74:38:E2:F0:4D:6B:E6:68:A7:49:31:2F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f116545-bb5f-3517-a869-d409800d80ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f4:aa:cb:08:bb:33:ff:4c:47:0a:a2:f3:87:84:46:fb:e6: e1:a7:8d:57:cd:35:d3:ba:70:89:d9:ce:a2:16:38:86:42:1d: 2f:c0:f0:f5:0c:ac:c2:24:ee:ad:53:13:36:39:25:3b:15:f7: 35:9e:3d:cf:ee:45:3b:cf:68:22:68:a6:b9:1f:5b:07:53:ce: f9:1a:34:95:bc:8d:c4:03:ea:32:8f:a1:3c:b0:d3:b5:ec:b8: eb:5a:75:ed:ea:68:e7:f6:bf:8a:e3:74:f2:a6:1b:82:87:34: 64:b1:ce:35:c5:56:43:ed:bd:af:84:d9:50:da:77:bb:58:06: e7:fa:4a:ba:2c:2f:0f:67:e6:5f:09:b9:7d:88:d9:11:87:07: b6:0b:c1:61:64:31:b4:6f:85:a5:c2:4d:98:cc:55:d2:7b:a5: f3:8f:1c:5f:a9:0a:25:63:c4:1f:d0:7e:00:af:e5:1d:a5:75: c8:9c:44:db:97:49:5c:a8:6d:f7:d8:0b:d5:3f:94:17:b4:4f: 24:87:b6:40:e9:6f:e5:eb:21:9d:d7:5e:f4:ff:a1:f2:6a:a5: 00:8c:63:bd:f8:e6:df:3e:f3:31:36:ed:00:bf:29:40:eb:cf: a4:76:4e:09:2d:c3:83:0a:64:92:42:17:5b:db:e8:dd:12:0c: 69:e4:e4:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczD/y4PPXixgQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmRjZDNiM2EtNTI3OS00NDYyLTgzZTMtNTBmMGM5OTI4NzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRAY0BjUmQS7P1dmY1EcduKXsX+GS44hgxQk 8ZQzALma5YPutFIb2jvEobqPVtamrdUuXF0eKh5VXG30HGwoy0kMSqHSFDWTnG0U vGDO4QkloSFtR5JrQBS3QkBRzZIEVnqouZZZva2bLMe0D3+KfDVGBjJ4VFRAKZOP J5kjKwpGrhwbrz2BACAin7XwT2Ar3CeOmJV+WMs6gsYCAIRKh2S2uwgqTJRBWYhs 8IffpymvbuTpP/ESXr5rTC3biV1IoVJlWrTVPrgQ7PFkebfflPI5ykepu7m7YFiE j1UCuvvF9uW3CKN/s5JpNymL/cCSI/cgCxeitCVW6ywBlpkN+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVD/1ZQ+4d0OOLwTWvmaKdJMS/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2YxMTY1NDUtYmI1Zi0z NTE3LWE4NjktZDQwOTgwMGQ4MGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz0qssIuzP/TEcKovOHhEb75uGnjVfNNdO6cInZzqIWOIZCHS/A8PUM rMIk7q1TEzY5JTsV9zWePc/uRTvPaCJoprkfWwdTzvkaNJW8jcQD6jKPoTyw07Xs uOtade3qaOf2v4rjdPKmG4KHNGSxzjXFVkPtva+E2VDad7tYBuf6SrosLw9n5l8J uX2I2RGHB7YLwWFkMbRvhaXCTZjMVdJ7pfOPHF+pCiVjxB/QfgCv5R2ldcicRNuX SVyobffYC9U/lBe0TySHtkDpb+XrIZ3XXvT/ofJqpQCMY7345t8+8zE27QC/KUDr z6R2Tgktw4MKZJJCF1vb6N0SDGnk5Fk= -----END CERTIFICATE-----Generated at Sat Sep 26 14:32:06 2026 by rpki-client