$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89014442-49fb-37f7-8025-f1b2ce9c7d37.roa File: 89014442-49fb-37f7-8025-f1b2ce9c7d37.roa (raw, json) Hash identifier: QyDd5QU2Qxx5lJYFmJpxUzavms9jWI5wGqwMhs4OMRo= Subject key identifier: FC:1B:40:7E:ED:FF:AC:58:F5:55:FA:1A:5E:13:66:28:4B:F6:17:5F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974F5416A1CBD072D560000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89014442-49fb-37f7-8025-f1b2ce9c7d37.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.28.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:f5:41:6a:1c:bd:07:2d:56:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a7dd0373-9e6a-46ea-baa1-e15380ebc924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:96:cd:89:36:7b:54:2d:ab:02:aa:d4:84:ff: 7d:a3:3c:f2:c4:6d:b7:5d:e4:e6:86:8a:60:98:7f: 88:79:f0:46:9d:86:4c:77:fa:73:1b:d3:d2:96:fc: 90:73:f1:5c:2c:23:65:bb:fd:9b:2d:34:d4:c5:86: 7b:f0:d8:53:9d:cd:99:40:b9:89:fc:e1:b7:83:c9: b3:de:09:e5:08:31:d9:32:1c:10:09:34:d7:b9:2b: 38:67:bb:ac:14:6c:f3:77:7e:ba:26:56:c3:0a:50: c1:a5:d6:70:3e:45:d8:95:70:61:c3:34:f7:86:5b: cf:72:dd:19:34:3d:91:5f:a1:32:e1:e6:2f:6b:51: df:5f:4d:f5:81:ee:3c:75:eb:37:27:f9:26:0e:5c: 52:bf:8f:29:c5:01:54:10:d9:18:23:0e:83:dc:dc: 01:d2:a4:40:40:ab:17:d2:26:c1:d3:64:44:be:8e: ca:c5:27:7b:f6:a2:ab:99:fb:f8:37:50:ea:4c:3f: 5d:b5:cf:b9:1c:aa:1a:68:2f:e2:a2:fd:52:40:0a: 8c:97:6e:95:53:60:f8:13:46:86:be:f3:9c:95:16: a2:46:ba:d6:cb:fc:6a:cf:41:08:61:c6:09:84:34: 12:2a:b7:e4:e0:c7:bc:c8:b2:f0:9b:7a:34:64:46: 64:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1B:40:7E:ED:FF:AC:58:F5:55:FA:1A:5E:13:66:28:4B:F6:17:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89014442-49fb-37f7-8025-f1b2ce9c7d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e0:3d:af:9d:6b:00:40:dd:50:22:f3:7f:80:8f:1f:57:62: ec:1b:78:94:93:93:ff:94:59:0c:58:df:a8:4f:99:0f:70:50: 5f:6f:d1:bb:32:dd:b6:a1:da:ec:80:18:ca:df:10:2d:f5:73: e3:48:0a:58:12:79:22:dc:8f:a3:e4:85:b4:6e:ef:78:58:2f: 29:4e:cb:16:5b:57:98:3a:d4:48:79:2c:12:5a:16:23:3b:4d: dc:10:ac:a0:0a:ae:a1:e8:66:ac:0d:2c:88:82:42:64:37:3d: 46:4e:49:90:47:04:dd:47:6f:12:78:3d:4b:e0:9b:fb:4d:41: 1e:a8:08:ba:19:f1:51:84:51:5e:1f:f2:2e:6f:c0:31:14:8b: 6d:28:4e:c0:44:d0:74:65:ce:4c:c9:f8:52:82:c0:69:47:70: 3e:ca:47:dd:1d:c9:80:7d:ae:90:30:96:66:8d:9b:65:d3:7c: 41:5d:dd:4b:89:fa:32:29:fe:88:3e:bc:d8:2b:21:be:8f:01: ea:40:62:c3:0f:aa:20:50:e3:0d:66:a6:8a:ff:41:44:5e:a9: c8:46:d0:57:de:c8:cd:b6:c3:94:91:6c:8d:cb:5d:71:cf:c2: ef:44:3a:76:98:ed:a5:3e:4b:77:a7:08:88:63:06:93:b9:9d: 30:f7:1b:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdPVBahy9By1WAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTdkZDAzNzMtOWU2YS00NmVhLWJhYTEtZTE1MzgwZWJjOTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5bNiTZ7VC2rAqrUhP99ozzyxG23XeTmhopg mH+IefBGnYZMd/pzG9PSlvyQc/FcLCNlu/2bLTTUxYZ78NhTnc2ZQLmJ/OG3g8mz 3gnlCDHZMhwQCTTXuSs4Z7usFGzzd366JlbDClDBpdZwPkXYlXBhwzT3hlvPct0Z ND2RX6Ey4eYva1HfX031ge48des3J/kmDlxSv48pxQFUENkYIw6D3NwB0qRAQKsX 0ibB02REvo7KxSd79qKrmfv4N1DqTD9dtc+5HKoaaC/iov1SQAqMl26VU2D4E0aG vvOclRaiRrrWy/xqz0EIYcYJhDQSKrfk4Me8yLLwm3o0ZEZkswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwbQH7t/6xY9VX6Gl4TZihL9hdfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODkwMTQ0NDItNDlmYi0z N2Y3LTgwMjUtZjFiMmNlOWM3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7gPa+dawBA3VAi83+Ajx9XYuwbeJSTk/+UWQxY36hPmQ9wUF9v0bsy 3bah2uyAGMrfEC31c+NIClgSeSLcj6PkhbRu73hYLylOyxZbV5g61Eh5LBJaFiM7 TdwQrKAKrqHoZqwNLIiCQmQ3PUZOSZBHBN1HbxJ4PUvgm/tNQR6oCLoZ8VGEUV4f 8i5vwDEUi20oTsBE0HRlzkzJ+FKCwGlHcD7KR90dyYB9rpAwlmaNm2XTfEFd3UuJ +jIp/og+vNgrIb6PAepAYsMPqiBQ4w1mpor/QUReqchG0FfeyM22w5SRbI3LXXHP wu9EOnaY7aU+S3enCIhjBpO5nTD3G0g= -----END CERTIFICATE-----Generated at Sun Sep 27 05:58:37 2026 by rpki-client