$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/94b76c04-841e-3278-b45c-572290b4c7b8.roa File: 94b76c04-841e-3278-b45c-572290b4c7b8.roa (raw, json) Hash identifier: l8nQJ2z3Aoaejg7x8tn20bu97fnDQirR5Gt5tGhDUd4= Subject key identifier: 11:5C:BD:20:C9:91:7D:90:A8:5D:A4:27:21:E2:49:A6:09:64:99:7A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498B66EE02B10F516C80B048 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/94b76c04-841e-3278-b45c-572290b4c7b8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.28.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:66:ee:02:b1:0f:51:6c:80:b0:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=64e59ba9-e763-43d5-bd04-6238b13546a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:8b:2f:07:f6:9e:97:16:6f:2f:85:42:ec: f8:f3:8c:26:24:d7:69:75:37:63:5e:0d:ee:94:e4: 29:a1:09:be:26:6e:4d:29:1e:26:fd:76:38:08:54: 54:3b:00:4c:5f:ec:9c:74:8b:1a:5e:c5:87:5d:eb: a7:1e:26:cb:2d:da:d0:10:8a:6b:0d:0c:19:e7:6f: df:0f:35:ad:2b:46:33:d5:70:41:d3:fa:dc:39:18: af:d0:16:31:37:b9:36:d6:ea:59:28:56:06:5a:07: ca:b7:bd:0a:a6:1e:39:8a:d6:6a:bf:4d:36:af:91: 4c:d8:10:b9:f2:bc:ea:69:c5:a7:6d:94:78:d2:54: e9:b3:26:73:72:2d:bb:4a:a4:80:fb:8b:90:65:b5: 9e:6a:1e:e5:38:e9:4d:67:36:31:b0:99:10:a6:fa: 49:53:d7:5d:e9:98:7c:15:88:68:d3:aa:90:68:1d: 26:d5:92:14:b0:a1:fd:5e:bb:89:c5:bc:d8:42:e1: 32:27:c4:2d:ac:7d:0e:e4:7c:ac:68:4d:52:17:26: 40:ef:88:a5:6c:bc:09:54:da:2a:77:78:d4:b4:cc: e5:f4:d5:48:59:c1:d0:d5:a6:bf:b2:c7:bb:8e:07: 54:22:35:e4:de:2d:84:ee:73:be:ba:46:7e:89:e8: 20:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5C:BD:20:C9:91:7D:90:A8:5D:A4:27:21:E2:49:A6:09:64:99:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/94b76c04-841e-3278-b45c-572290b4c7b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f4:ba:c3:0e:09:ec:48:e7:15:fc:22:c3:aa:c2:0d:bc:db: 83:aa:2d:2b:37:a1:98:63:3e:0e:b2:6c:3c:e2:d0:c4:de:bd: 19:ea:8f:79:0c:1d:2d:7e:bc:eb:64:b9:57:a4:20:ac:38:8d: 2b:13:2a:4f:79:52:7e:49:3d:2e:2f:63:51:2f:d2:82:62:da: 06:be:a6:ea:81:56:b7:18:47:f5:98:b3:4e:4c:22:38:e2:d8: 1d:6f:30:34:92:f8:68:6a:2a:e7:ff:df:fe:5f:9d:bd:b2:27: c1:53:bf:58:12:93:f8:3f:da:17:54:55:32:c8:28:2b:88:43: 98:ac:04:29:9d:64:f6:bd:f9:c5:18:41:73:35:50:78:bc:bd: a9:d4:0e:da:6c:e7:eb:62:30:ff:f1:6a:a0:b7:8c:e1:45:3b: 71:b4:80:3e:9d:b9:e8:bd:38:95:2b:98:e9:40:f9:b2:62:6a: ff:c2:ee:67:ae:a7:be:d3:1c:65:9c:d4:60:3b:d4:26:8c:36: 70:55:bc:e6:4a:ca:98:c8:14:e8:74:56:b6:87:cc:ff:d7:ef: 3c:03:2b:c9:4f:82:bf:a6:be:eb:0d:f0:4a:67:b7:36:5e:63: c8:a8:ec:46:2a:ba:7a:4e:97:eb:8b:f1:c9:87:0d:81:15:d9: 56:74:a0:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji2buArEPUWyAsEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjRlNTliYTktZTc2My00M2Q1LWJkMDQtNjIzOGIxMzU0NmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6mLLwf2npcWby+FQuz484wmJNdpdTdjXg3u lOQpoQm+Jm5NKR4m/XY4CFRUOwBMX+ycdIsaXsWHXeunHibLLdrQEIprDQwZ52/f DzWtK0Yz1XBB0/rcORiv0BYxN7k21upZKFYGWgfKt70Kph45itZqv002r5FM2BC5 8rzqacWnbZR40lTpsyZzci27SqSA+4uQZbWeah7lOOlNZzYxsJkQpvpJU9dd6Zh8 FYho06qQaB0m1ZIUsKH9XruJxbzYQuEyJ8QtrH0O5HysaE1SFyZA74ilbLwJVNoq d3jUtMzl9NVIWcHQ1aa/sse7jgdUIjXk3i2E7nO+ukZ+iegg8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFcvSDJkX2QqF2kJyHiSaYJZJl6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTRiNzZjMDQtODQxZS0z Mjc4LWI0NWMtNTcyMjkwYjRjN2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRxsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf0usMOCexI5xX8IsOqwg2824OqLSs3oZhjPg6ybDzi0MTevRnqj3kM HS1+vOtkuVekIKw4jSsTKk95Un5JPS4vY1Ev0oJi2ga+puqBVrcYR/WYs05MIjji 2B1vMDSS+GhqKuf/3/5fnb2yJ8FTv1gSk/g/2hdUVTLIKCuIQ5isBCmdZPa9+cUY QXM1UHi8vanUDtps5+tiMP/xaqC3jOFFO3G0gD6duei9OJUrmOlA+bJiav/C7meu p77THGWc1GA71CaMNnBVvOZKypjIFOh0VraHzP/X7zwDK8lPgr+mvusN8EpntzZe Y8io7EYqunpOl+uL8cmHDYEV2VZ0oDk= -----END CERTIFICATE-----Generated at Mon Sep 28 18:09:41 2026 by rpki-client