$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/969878da-bed4-396c-a9aa-8380a6b47039.roa File: 969878da-bed4-396c-a9aa-8380a6b47039.roa (raw, json) Hash identifier: ToOH9iAEV1hDLBypt4c+l6lyCLgjIdgBV5uHWbqMwcw= Subject key identifier: 19:7C:2A:58:AE:E5:46:48:C4:6A:8C:AC:00:BC:2F:F9:4C:51:22:99 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4987505001F8CA53915B41F0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/969878da-bed4-396c-a9aa-8380a6b47039.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.25.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:50:50:01:f8:ca:53:91:5b:41:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a39330ad-055b-4301-90d8-df6f83ca1699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c8:69:ee:22:8a:7d:3f:1b:ec:ca:45:26:13: 37:65:1b:f1:59:5b:35:04:b3:64:a0:59:bd:a7:4c: 2a:69:86:d0:36:53:fb:83:23:5b:7c:bd:41:33:6e: 35:32:dc:b5:56:98:eb:71:c8:93:d6:1e:99:e4:d8: 17:af:f1:76:24:c4:7c:55:c1:a9:81:80:f0:9c:a5: df:aa:19:b2:09:a3:f4:60:4c:3b:6d:53:dc:e4:ec: 49:03:39:dd:ba:18:d9:2f:ed:1d:37:fe:ad:9d:4d: c2:88:2d:fe:69:54:b7:33:50:30:87:b6:46:9c:b4: 3c:e3:b6:4e:33:f2:5d:9b:f9:f8:d1:13:cf:21:6c: aa:a4:57:e3:a6:38:2a:24:22:14:f8:19:20:50:87: 5f:2c:8d:db:f2:cd:c9:79:27:cc:ad:da:d3:7a:2d: b8:fd:f6:d5:a6:51:05:16:76:62:14:c9:fa:8a:cb: 67:b6:67:b0:31:4b:73:7b:77:62:cd:c8:fb:ef:67: a0:43:a6:64:2e:6f:63:d2:93:df:18:c4:08:08:48: ac:5f:ab:3d:73:13:7b:b0:6f:70:78:ce:26:dd:c1: 6c:7f:55:42:ba:08:bf:7a:2f:2a:80:8e:4c:9a:58: db:3a:69:30:7d:18:fe:2a:a1:17:08:ba:77:12:d8: 0d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7C:2A:58:AE:E5:46:48:C4:6A:8C:AC:00:BC:2F:F9:4C:51:22:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/969878da-bed4-396c-a9aa-8380a6b47039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:15:6d:0c:f0:46:e5:5f:b6:88:4c:7c:87:23:17:6b:48:7b: 38:37:9b:a4:01:9e:6d:bb:af:65:a6:ed:a0:1c:d8:cb:56:e4: 29:0d:5d:f9:df:9e:ca:ed:ed:02:8b:1f:d5:16:d5:8a:31:e4: 7b:07:8f:c8:79:2c:31:34:57:3b:c5:b3:83:0c:07:8b:6f:53: 4f:78:64:39:90:d6:79:86:79:ed:aa:14:60:c6:5d:cd:c4:4e: 52:bb:16:c9:69:b0:89:8d:89:d9:ca:1a:79:8f:69:bc:d7:02: ed:65:de:b6:b3:56:9a:45:ec:92:df:d9:80:04:9f:26:6a:3b: e3:04:ac:02:83:21:00:95:0e:28:73:16:9b:b2:1b:6e:3b:97: 97:c7:ac:bc:3c:f0:d4:25:27:4c:77:6b:18:db:bb:60:be:40: 91:ed:99:84:28:c3:1b:cf:5a:ea:77:4f:23:08:87:7c:ec:60: 38:4e:b3:20:8a:c7:d1:cb:c9:0e:84:ee:e4:28:b4:44:91:ed: 27:31:94:18:02:2e:1b:8e:e1:e7:77:a8:c2:a7:d5:7d:24:1e: 8a:9a:a0:99:bc:5b:56:99:58:91:04:19:5d:49:fd:a2:5a:d2: c1:8c:ad:f0:70:01:dc:c7:0e:45:38:e9:71:31:86:b2:4d:20: ae:92:6b:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh1BQAfjKU5FbQfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTM5MzMwYWQtMDU1Yi00MzAxLTkwZDgtZGY2ZjgzY2ExNjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0chp7iKKfT8b7MpFJhM3ZRvxWVs1BLNkoFm9 p0wqaYbQNlP7gyNbfL1BM241Mty1VpjrcciT1h6Z5NgXr/F2JMR8VcGpgYDwnKXf qhmyCaP0YEw7bVPc5OxJAznduhjZL+0dN/6tnU3CiC3+aVS3M1Awh7ZGnLQ847ZO M/Jdm/n40RPPIWyqpFfjpjgqJCIU+BkgUIdfLI3b8s3JeSfMrdrTei24/fbVplEF FnZiFMn6istntmewMUtze3dizcj772egQ6ZkLm9j0pPfGMQICEisX6s9cxN7sG9w eM4m3cFsf1VCugi/ei8qgI5MmljbOmkwfRj+KqEXCLp3EtgNvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBl8Kliu5UZIxGqMrAC8L/lMUSKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTY5ODc4ZGEtYmVkNC0z OTZjLWE5YWEtODM4MGE2YjQ3MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQVbQzwRuVftohMfIcjF2tIezg3m6QBnm27r2Wm7aAc2MtW5CkNXfnf nsrt7QKLH9UW1Yox5HsHj8h5LDE0VzvFs4MMB4tvU094ZDmQ1nmGee2qFGDGXc3E TlK7FslpsImNidnKGnmPabzXAu1l3razVppF7JLf2YAEnyZqO+MErAKDIQCVDihz FpuyG247l5fHrLw88NQlJ0x3axjbu2C+QJHtmYQowxvPWup3TyMIh3zsYDhOsyCK x9HLyQ6E7uQotESR7ScxlBgCLhuO4ed3qMKn1X0kHoqaoJm8W1aZWJEEGV1J/aJa 0sGMrfBwAdzHDkU46XExhrJNIK6Sa7E= -----END CERTIFICATE-----Generated at Mon Oct 5 16:23:21 2026 by rpki-client