$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91d20d06-e986-3d78-960e-a77ca4bde93c.roa File: 91d20d06-e986-3d78-960e-a77ca4bde93c.roa (raw, json) Hash identifier: GCABOnVTVYIRa5s3QuhQxcmKXuLVdOQ1mPYn8VQfsPM= Subject key identifier: C0:19:BA:C3:2A:64:DA:38:90:AC:66:CE:AB:9A:0D:7F:0F:7D:47:CD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584FD52696B8DA60950E551BD300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91d20d06-e986-3d78-960e-a77ca4bde93c.roa Signing time: Sat 14 Nov 2026 02:00:13 +0000 ROA not before: Sat 14 Nov 2026 02:00:13 +0000 ROA not after: Fri 12 Feb 2027 02:00:13 +0000 asID: 19905 IP address blocks: 173.25.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d5:26:96:b8:da:60:95:0e:55:1b:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 14 02:00:13 2026 GMT Not After : Feb 12 02:00:13 2027 GMT Subject: CN=81280ca4-cd90-4210-adf1-9f0bcc0773e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3a:c5:45:f4:d4:0a:96:d5:1d:66:4d:69:71: f7:73:4f:6a:69:f2:0c:45:be:33:13:7f:ef:b4:e7: 51:70:8a:9e:ba:56:4f:8e:1f:51:a0:6a:03:68:b6: f7:4b:54:17:07:80:14:5b:f8:b5:73:a0:a3:fe:de: 9a:6e:9c:9b:56:c8:b1:ec:b2:7c:24:e1:d7:3f:b8: 9b:ef:bd:b1:5d:cf:e7:fd:1e:97:d5:4d:3d:f3:40: af:7b:83:b6:c3:e8:b0:4b:7a:23:e4:f7:6c:41:c2: a0:c4:c9:0a:37:43:44:67:24:e9:bf:29:ef:a5:33: f1:8c:55:53:23:39:b1:7a:84:38:54:9b:40:a5:e9: a6:8d:5d:e2:51:29:3d:8d:b6:f6:f9:1a:a4:77:28: 7f:df:6d:e4:20:a3:f8:73:b6:8f:e3:32:e7:01:9b: c3:18:16:06:92:d9:34:a2:ea:70:bb:ce:aa:c5:ed: eb:92:ff:19:5a:e2:86:32:12:32:12:be:eb:87:16: aa:1a:b6:f5:6d:06:4e:f3:96:23:7b:51:cf:47:de: 3c:4f:86:7c:16:58:97:66:6b:60:da:d4:7d:c7:f2: be:b4:b0:6e:97:c6:cd:78:1d:f4:70:29:58:55:5f: 8b:d2:10:18:fa:8b:2e:31:4d:d3:91:26:57:53:6f: 55:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:19:BA:C3:2A:64:DA:38:90:AC:66:CE:AB:9A:0D:7F:0F:7D:47:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91d20d06-e986-3d78-960e-a77ca4bde93c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:28:53:2e:25:e1:e5:ef:cf:50:8f:1a:94:14:1e:23:ad:8a: 62:26:d6:39:9b:95:55:33:55:41:54:b8:e1:d1:a9:9e:38:6a: 39:8d:70:65:e2:43:91:ba:02:55:64:09:62:b5:5b:5a:0d:9f: 11:42:14:63:f6:af:32:39:01:7a:a1:65:37:3b:46:af:4d:fd: 27:87:64:27:ec:30:44:84:f9:5e:d7:9f:9c:69:66:a5:06:60: b5:fe:9d:4b:b6:a1:1e:36:b4:4e:bf:d4:86:53:a3:4b:10:7d: 6c:2b:17:1c:3a:6c:7b:99:cb:d8:a2:10:b9:12:bd:5f:e9:fb: a9:97:49:9a:0d:09:e0:7c:00:46:d7:55:a2:11:9c:69:ad:1e: 03:e1:b9:04:7c:99:11:88:55:f7:c8:64:88:49:b1:2b:7a:7c: 48:4c:96:18:e8:df:d2:7a:27:a5:37:3c:d2:ff:7c:4f:ed:9d: df:86:73:ca:65:a8:80:97:2c:41:f0:d6:27:e9:9f:3e:b4:29: 6a:29:d9:a8:58:5d:2d:fc:81:e7:d8:d5:09:3b:4e:48:a2:1f: 6a:13:c8:79:d6:8f:2a:8d:04:84:db:fb:45:3a:05:88:ef:fb: 35:be:a2:06:e3:d4:ba:88:7c:2b:3b:9b:c4:9a:ed:26:0e:56: 0a:ab:57:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/VJpa42mCVDlUb0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTExNDAyMDAxM1oXDTI3MDIxMjAyMDAxM1owLzEtMCsGA1UEAxMk ODEyODBjYTQtY2Q5MC00MjEwLWFkZjEtOWYwYmNjMDc3M2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzrFRfTUCpbVHWZNaXH3c09qafIMRb4zE3/v tOdRcIqeulZPjh9RoGoDaLb3S1QXB4AUW/i1c6Cj/t6abpybVsix7LJ8JOHXP7ib 772xXc/n/R6X1U0980Cve4O2w+iwS3oj5PdsQcKgxMkKN0NEZyTpvynvpTPxjFVT IzmxeoQ4VJtApemmjV3iUSk9jbb2+Rqkdyh/323kIKP4c7aP4zLnAZvDGBYGktk0 oupwu86qxe3rkv8ZWuKGMhIyEr7rhxaqGrb1bQZO85Yje1HPR948T4Z8FliXZmtg 2tR9x/K+tLBul8bNeB30cClYVV+L0hAY+osuMU3TkSZXU29V8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAZusMqZNo4kKxmzquaDX8PfUfNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTFkMjBkMDYtZTk4Ni0z ZDc4LTk2MGUtYTc3Y2E0YmRlOTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRmMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUoUy4l4eXvz1CPGpQUHiOtimIm1jmblVUzVUFUuOHRqZ44ajmNcGXi Q5G6AlVkCWK1W1oNnxFCFGP2rzI5AXqhZTc7Rq9N/SeHZCfsMESE+V7Xn5xpZqUG YLX+nUu2oR42tE6/1IZTo0sQfWwrFxw6bHuZy9iiELkSvV/p+6mXSZoNCeB8AEbX VaIRnGmtHgPhuQR8mRGIVffIZIhJsSt6fEhMlhjo39J6J6U3PNL/fE/tnd+Gc8pl qICXLEHw1ifpnz60KWop2ahYXS38gefY1Qk7TkiiH2oTyHnWjyqNBITb+0U6BYjv +zW+ogbj1LqIfCs7m8Sa7SYOVgqrV3I= -----END CERTIFICATE-----Generated at Sun Nov 15 14:47:09 2026 by rpki-client