$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82494b0b-0866-30b6-a1dd-983b305b7283.roa File: 82494b0b-0866-30b6-a1dd-983b305b7283.roa (raw, json) Hash identifier: NaFH0kEZtlAUJ7mPWn6bEGmF6zWXGMudeJo858iC4R4= Subject key identifier: 10:9A:B3:2A:B8:FC:A3:F7:66:EA:93:32:3F:18:8D:F0:A9:70:7D:B2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4987D58118F9CF47FA6CEB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82494b0b-0866-30b6-a1dd-983b305b7283.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.29.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:d5:81:18:f9:cf:47:fa:6c:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8821e684-d19c-4380-a0c3-82009edc8cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:59:ec:c8:50:08:1d:e2:ef:85:5f:98:eb:ea: bc:5e:ec:76:ee:a4:b1:4f:0a:b5:e3:76:b9:47:70: ba:b4:c7:91:05:cd:fa:d1:ef:ab:3f:43:a9:01:59: 07:17:8e:70:28:82:ad:ae:79:f9:a3:8b:25:36:62: be:f1:bd:c3:2d:60:31:2a:32:65:6e:fc:bc:0f:ab: 6c:d2:3a:f8:9a:c4:ee:b9:c3:76:db:22:67:96:09: 28:47:0c:b9:9d:14:1e:65:bd:7f:9a:68:7e:2b:15: 0b:34:72:20:16:57:78:5b:e1:0a:7f:41:d4:03:45: c2:75:92:3a:c9:03:55:f0:b4:be:70:8f:40:dc:0b: ce:d0:1a:61:88:fd:cc:9e:a4:6a:3a:4e:5c:16:93: 36:b8:d7:fa:ef:e7:a9:e7:c7:d3:d8:eb:3c:67:ea: a4:54:3d:eb:80:1e:50:14:67:7b:b6:54:0b:b6:07: f5:8d:fe:52:c1:e3:bd:58:cb:09:04:dd:73:0b:aa: 1b:cf:74:03:a3:dc:2b:57:5c:3c:1e:37:94:36:43: be:31:4b:af:d7:4b:0d:79:58:5f:26:29:94:d9:16: 06:15:58:b0:67:90:ce:30:b0:da:db:b5:c9:16:dd: 09:23:0a:10:de:ef:96:a8:58:1e:3c:d0:72:98:34: 9d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9A:B3:2A:B8:FC:A3:F7:66:EA:93:32:3F:18:8D:F0:A9:70:7D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82494b0b-0866-30b6-a1dd-983b305b7283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:df:4b:aa:53:2e:3b:02:7e:5f:74:c5:ff:6f:c3:15:27:fa: b4:6a:d6:81:44:9c:3f:de:d5:56:6a:08:68:b1:af:1f:e7:28: 66:74:76:ce:7a:48:2a:98:63:da:ed:dd:6f:a7:8d:92:dc:97: 5f:e2:57:3f:29:2c:17:e5:76:6f:1e:4f:c4:a4:02:38:25:7e: 25:82:af:b3:fb:78:af:ec:5b:9d:f9:1d:6f:12:c0:28:3b:26: 51:a6:4b:75:db:61:f2:a4:8c:65:6c:e0:8d:70:23:ad:7a:6f: 56:ab:27:f1:92:6f:68:fd:7f:31:0e:03:3d:ab:e1:02:d3:e2: 9d:d0:90:26:c0:eb:40:8a:37:cc:b2:d2:23:9d:17:4e:b3:67: 99:0f:63:86:00:91:fc:dc:dc:e8:c9:46:13:cd:c2:f4:98:72: b7:0a:b0:9b:a2:2f:3b:68:9f:d6:bc:51:59:b9:c2:62:df:59: 67:ca:8d:59:f0:ac:f2:84:40:ab:f2:25:fe:71:10:a7:3e:fe: 03:52:e2:d1:c4:70:56:67:28:22:57:36:16:f8:fb:c9:44:74: 9a:aa:23:a9:f6:38:d7:a6:15:6d:0c:db:d4:2d:0c:56:54:5e: dc:7f:be:44:c2:09:03:7e:e4:80:a1:86:8a:51:2e:2a:b9:22: 75:14:df:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh9WBGPnPR/ps64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODgyMWU2ODQtZDE5Yy00MzgwLWEwYzMtODIwMDllZGM4Y2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVnsyFAIHeLvhV+Y6+q8Xux27qSxTwq143a5 R3C6tMeRBc360e+rP0OpAVkHF45wKIKtrnn5o4slNmK+8b3DLWAxKjJlbvy8D6ts 0jr4msTuucN22yJnlgkoRwy5nRQeZb1/mmh+KxULNHIgFld4W+EKf0HUA0XCdZI6 yQNV8LS+cI9A3AvO0BphiP3MnqRqOk5cFpM2uNf67+ep58fT2Os8Z+qkVD3rgB5Q FGd7tlQLtgf1jf5SweO9WMsJBN1zC6obz3QDo9wrV1w8HjeUNkO+MUuv10sNeVhf JimU2RYGFViwZ5DOMLDa27XJFt0JIwoQ3u+WqFgePNBymDSdiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCasyq4/KP3ZuqTMj8YjfCpcH2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODI0OTRiMGItMDg2Ni0z MGI2LWExZGQtOTgzYjMwNWI3MjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALfS6pTLjsCfl90xf9vwxUn+rRq1oFEnD/e1VZqCGixrx/nKGZ0ds56 SCqYY9rt3W+njZLcl1/iVz8pLBfldm8eT8SkAjglfiWCr7P7eK/sW535HW8SwCg7 JlGmS3XbYfKkjGVs4I1wI616b1arJ/GSb2j9fzEOAz2r4QLT4p3QkCbA60CKN8yy 0iOdF06zZ5kPY4YAkfzc3OjJRhPNwvSYcrcKsJuiLzton9a8UVm5wmLfWWfKjVnw rPKEQKvyJf5xEKc+/gNS4tHEcFZnKCJXNhb4+8lEdJqqI6n2ONemFW0M29QtDFZU Xtx/vkTCCQN+5IChhopRLiq5InUU3xM= -----END CERTIFICATE-----Generated at Tue Sep 29 01:53:07 2026 by rpki-client