$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa File: 85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa (raw, json) Hash identifier: o1jL4RWISZSr1qbA3I0dwbmHciRv7J8sRH0GnOcd6Y4= Subject key identifier: BE:15:B0:50:69:D1:D3:33:41:18:27:9C:1D:BE:12:A8:C1:0E:B6:E9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49746B3181C8E81CE57EEA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.25.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:6b:31:81:c8:e8:1c:e5:7e:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dc3fe0aa-4f17-42cd-9df9-427bce3ead22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ab:f7:db:de:40:4a:4e:9e:a6:05:a3:aa:c2: 1b:d8:f4:5b:c2:c2:a8:4d:33:61:b0:de:8e:20:a1: 3c:85:39:30:28:0c:ff:8a:95:64:7f:86:ab:de:bb: ba:1e:4f:45:0a:94:fd:40:1c:a4:bb:28:91:76:06: d5:1a:b5:9f:b1:85:6a:6c:ae:9e:da:da:0e:6b:82: 06:53:94:3c:d6:92:fd:07:b2:25:a0:c7:be:c8:44: eb:3c:b9:8f:1c:cf:4b:b6:6c:43:d2:90:87:df:00: 66:0e:10:20:64:b2:5b:7f:47:76:f8:13:62:a5:c7: 88:c3:3b:7e:a3:57:40:30:9e:a6:29:be:ff:bf:a4: 0a:da:17:17:ef:d2:71:73:d5:f9:9a:c5:22:3a:5c: 49:39:6a:e7:d6:c6:71:34:22:9b:b5:09:11:0f:c6: 9f:41:8d:6d:94:7b:cb:c5:9c:35:52:f6:16:4a:2a: 21:27:7c:b1:2d:b3:1c:7b:d3:cf:86:25:e3:76:35: 14:3a:36:5b:af:06:b2:dc:f9:7c:e7:15:e4:00:cc: 8c:dd:08:7e:67:75:e5:12:73:a8:82:29:73:49:85: 29:6f:04:37:89:d8:48:0a:59:68:59:4b:1c:f0:da: 57:d2:b6:bd:86:c6:41:47:90:b6:b9:d1:fc:29:61: 96:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:15:B0:50:69:D1:D3:33:41:18:27:9C:1D:BE:12:A8:C1:0E:B6:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:2d:86:86:9b:dc:e4:45:04:24:df:03:05:cb:9c:ff:60:2d: 88:cf:e1:cc:ae:9c:18:cc:8e:00:1a:81:d8:75:c5:4e:c4:f5: 42:86:82:8b:eb:73:f3:cf:e9:22:a8:6b:39:46:e0:7d:c5:be: da:de:b0:e1:3c:9b:58:6d:27:69:34:8b:0b:59:9a:41:26:36: ae:23:34:32:61:43:b3:4e:24:87:56:a1:b5:36:56:10:aa:42: be:a1:4f:d5:08:65:ff:fd:42:db:3d:95:14:61:09:61:b2:37: 8a:68:25:dd:c3:91:f6:9f:45:c2:8c:fb:13:c8:a1:53:1e:34: f2:b8:f3:ba:b1:d1:cb:a8:20:db:9f:4f:a8:fc:97:6d:b4:03: b4:7d:c8:b3:bd:cf:ac:8e:38:a7:37:31:d9:f6:56:5b:1e:7b: 37:3a:40:bd:be:c7:e9:eb:05:74:2e:5b:b1:fe:fe:d0:66:eb: 29:b3:c0:2f:a4:0a:fb:fe:60:a5:b6:b7:22:43:67:80:02:a8: da:8b:e6:49:48:46:1f:b1:86:df:51:4b:9b:80:f5:ec:eb:01: 71:6e:11:51:9b:a4:e8:13:d6:28:a9:60:cc:9d:d9:ea:0e:d5: cb:ea:4f:37:f4:af:6e:ae:8f:4b:80:a7:22:8e:cd:1f:3a:5f: b6:c8:21:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGsxgcjoHOV+6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGMzZmUwYWEtNGYxNy00MmNkLTlkZjktNDI3YmNlM2VhZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06v3295ASk6epgWjqsIb2PRbwsKoTTNhsN6O IKE8hTkwKAz/ipVkf4ar3ru6Hk9FCpT9QBykuyiRdgbVGrWfsYVqbK6e2toOa4IG U5Q81pL9B7IloMe+yETrPLmPHM9LtmxD0pCH3wBmDhAgZLJbf0d2+BNipceIwzt+ o1dAMJ6mKb7/v6QK2hcX79Jxc9X5msUiOlxJOWrn1sZxNCKbtQkRD8afQY1tlHvL xZw1UvYWSiohJ3yxLbMce9PPhiXjdjUUOjZbrway3Pl85xXkAMyM3Qh+Z3XlEnOo gilzSYUpbwQ3idhIClloWUsc8NpX0ra9hsZBR5C2udH8KWGWCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4VsFBp0dMzQRgnnB2+EqjBDrbpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVmYjI5ZGMtMTdlMi0z OGY3LTlhYTgtNmFkZmExMDk0YjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYthoab3ORFBCTfAwXLnP9gLYjP4cyunBjMjgAagdh1xU7E9UKGgovr c/PP6SKoazlG4H3FvtresOE8m1htJ2k0iwtZmkEmNq4jNDJhQ7NOJIdWobU2VhCq Qr6hT9UIZf/9Qts9lRRhCWGyN4poJd3DkfafRcKM+xPIoVMeNPK487qx0cuoINuf T6j8l220A7R9yLO9z6yOOKc3Mdn2Vlseezc6QL2+x+nrBXQuW7H+/tBm6ymzwC+k Cvv+YKW2tyJDZ4ACqNqL5klIRh+xht9RS5uA9ezrAXFuEVGbpOgT1iipYMyd2eoO 1cvqTzf0r26uj0uApyKOzR86X7bIIQw= -----END CERTIFICATE-----Generated at Fri Sep 25 08:37:53 2026 by rpki-client