$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9986df4e-ac1b-304a-8b9a-03214d36b075.roa File: 9986df4e-ac1b-304a-8b9a-03214d36b075.roa (raw, json) Hash identifier: AM/Co67mi7yAoYzIYSqpNw888/2R/wpuFrxNzPzM1V0= Subject key identifier: 64:C0:42:80:BC:B1:72:F5:95:4E:16:CE:26:DD:A8:01:BF:B3:E9:1E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F480D61ECB13B2A2609013C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9986df4e-ac1b-304a-8b9a-03214d36b075.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.28.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:61:ec:b1:3b:2a:26:09:01:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=acaef303-f9d7-498a-ae9e-71aa471315cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:78:f0:36:53:28:ed:59:a8:ba:df:45:82:55: f6:a1:3d:d5:bc:0b:f1:b9:56:1f:f4:66:9f:5b:22: 86:99:0e:76:b9:75:fb:b4:fd:9c:d9:29:9b:a0:e5: c5:e5:a1:11:6e:c3:e6:34:84:7e:46:27:48:c3:a8: b2:ca:cc:af:fe:9c:0c:a1:e6:63:72:98:2b:5f:c8: 00:24:c8:91:b5:62:ea:79:0c:b8:58:af:bc:e1:90: e4:97:4e:c5:7e:69:cd:4b:97:07:05:f7:7d:36:4b: 53:b5:ed:b9:83:3d:75:b5:96:fa:78:b1:76:a9:6e: b1:3d:d9:95:ef:a6:7f:ec:8d:9b:6b:ab:42:fc:77: eb:7f:43:c6:81:43:db:4c:63:77:95:25:6f:79:7a: c5:89:97:cf:b3:0b:fc:e9:fb:06:38:ce:5d:a4:c1: 91:60:22:7a:8a:bc:ff:9a:7f:06:31:43:36:27:38: 59:2f:b0:e1:af:15:3b:76:08:17:36:7a:11:96:d0: ce:08:10:74:88:27:e1:3f:e4:60:9a:cd:4e:2d:cc: 0a:18:67:e2:78:57:79:07:7e:69:5d:cb:bd:57:7e: 92:f7:40:db:b2:d9:a7:46:7b:21:35:75:0d:43:e1: 5c:c6:9a:04:bb:58:f6:33:f2:2b:3a:e3:f7:bd:17: 87:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C0:42:80:BC:B1:72:F5:95:4E:16:CE:26:DD:A8:01:BF:B3:E9:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9986df4e-ac1b-304a-8b9a-03214d36b075.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:cc:19:8d:22:df:1b:1e:40:28:a8:0f:f1:75:01:fd:cc:05: 0d:a8:28:ee:95:aa:27:23:cd:cc:f0:b9:ab:ea:f4:9c:15:c6: 37:34:02:23:cc:8f:14:3f:62:94:0d:42:12:51:c5:a9:3c:71: b2:3f:41:53:4c:c3:8d:c3:59:fe:2d:fe:7f:23:6f:ca:ca:23: 47:05:e4:61:b2:46:b0:df:d1:1e:ed:58:a0:f9:62:50:2c:38: ed:cb:5b:57:55:12:bf:f5:59:0f:cd:6c:d2:76:07:c7:24:79: 6b:a5:01:4e:81:b9:a5:93:e9:74:18:04:7e:f9:b3:ec:a7:6e: c8:9d:48:64:84:20:3f:c0:7a:7f:0c:e8:9e:3c:44:43:74:b1: 4d:49:f7:81:25:97:98:e2:ec:3b:0a:55:e7:d5:33:7f:c4:f8: 2b:19:c8:1b:ce:a5:93:14:a8:c9:34:97:96:42:b9:26:9a:b3: 04:07:b4:22:5b:4d:04:97:d0:a0:0b:fe:f7:6f:1a:f9:0f:b6: c5:a2:9b:d3:21:c6:90:bf:3f:12:a2:5a:7d:50:77:d9:b2:ca: ce:9b:bf:c4:0a:f7:f4:1b:ba:3c:4f:f2:13:4e:80:c1:19:7e: 61:6d:f1:b7:46:fb:06:b0:96:42:45:8b:b9:b5:11:49:66:8c: 78:b1:c9:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWHssTsqJgkBPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk YWNhZWYzMDMtZjlkNy00OThhLWFlOWUtNzFhYTQ3MTMxNWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13jwNlMo7Vmout9FglX2oT3VvAvxuVYf9Gaf WyKGmQ52uXX7tP2c2SmboOXF5aERbsPmNIR+RidIw6iyysyv/pwMoeZjcpgrX8gA JMiRtWLqeQy4WK+84ZDkl07FfmnNS5cHBfd9NktTte25gz11tZb6eLF2qW6xPdmV 76Z/7I2ba6tC/Hfrf0PGgUPbTGN3lSVveXrFiZfPswv86fsGOM5dpMGRYCJ6irz/ mn8GMUM2JzhZL7DhrxU7dggXNnoRltDOCBB0iCfhP+Rgms1OLcwKGGfieFd5B35p Xcu9V36S90DbstmnRnshNXUNQ+FcxpoEu1j2M/IrOuP3vReHbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTAQoC8sXL1lU4WzibdqAG/s+keMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTk4NmRmNGUtYWMxYi0z MDRhLThiOWEtMDMyMTRkMzZiMDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTMGY0i3xseQCioD/F1Af3MBQ2oKO6Vqicjzczwuavq9JwVxjc0AiPM jxQ/YpQNQhJRxak8cbI/QVNMw43DWf4t/n8jb8rKI0cF5GGyRrDf0R7tWKD5YlAs OO3LW1dVEr/1WQ/NbNJ2B8ckeWulAU6BuaWT6XQYBH75s+ynbsidSGSEID/Aen8M 6J48REN0sU1J94Ell5ji7DsKVefVM3/E+CsZyBvOpZMUqMk0l5ZCuSaaswQHtCJb TQSX0KAL/vdvGvkPtsWim9MhxpC/PxKiWn1Qd9myys6bv8QK9/QbujxP8hNOgMEZ fmFt8bdG+wawlkJFi7m1EUlmjHixyWE= -----END CERTIFICATE-----Generated at Sat Sep 26 10:04:02 2026 by rpki-client