$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b005c65-376f-3814-9c4b-33d2d6b1966f.roa File: 9b005c65-376f-3814-9c4b-33d2d6b1966f.roa (raw, json) Hash identifier: DpYXWRe2Mb9BUnsC1FubtzwbKqgZzc5PXA6M+zOnnac= Subject key identifier: F5:80:E8:AD:2E:EE:9A:A6:81:80:A1:1B:12:36:DD:D0:4F:C8:01:34 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F11A1419BA1471C25996FB700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b005c65-376f-3814-9c4b-33d2d6b1966f.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.28.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:41:9b:a1:47:1c:25:99:6f:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=3e1d6da2-cb7f-4d50-a4c0-03d05ba3931a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:66:80:27:4d:53:fc:dd:fc:67:9e:1e:d8:a5: 2d:52:82:b3:5e:95:8d:65:57:94:c5:4a:3b:e2:82: b0:26:e5:62:84:75:35:bd:73:f1:ee:8f:28:22:22: 37:61:84:84:1e:6e:1b:6b:f9:b2:80:bd:43:07:f1: 35:3a:fa:60:f9:2a:f4:69:e7:6a:88:72:5c:11:b9: b1:05:3e:6d:d9:33:bc:34:a7:54:e2:15:74:f9:50: 29:fa:24:2a:ff:16:30:68:d4:c6:21:9a:96:eb:84: e2:87:6b:28:24:31:99:c7:90:cb:dd:2f:22:d9:59: 59:f3:1d:04:8f:19:83:7c:74:10:a4:8e:74:b1:c1: e4:c7:8f:0e:34:26:20:1d:09:e2:73:91:e6:ca:e6: f9:65:1e:4e:64:be:90:32:08:56:23:31:45:0e:77: a1:e5:4c:57:7b:9c:7e:a2:48:42:c9:fd:9f:e3:18: 54:60:3f:53:01:a9:44:61:fc:68:74:62:1a:87:77: e3:0a:1f:19:d2:09:f7:ed:7b:69:a6:96:8d:d2:29: fb:5a:2b:54:8f:1b:4d:ba:7a:f2:33:61:b9:8f:cf: 1d:2f:13:cc:ac:a4:02:bf:1d:c2:17:c8:57:3f:6a: 25:83:33:98:ee:f3:54:2d:c6:8a:ed:9e:36:4c:60: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:80:E8:AD:2E:EE:9A:A6:81:80:A1:1B:12:36:DD:D0:4F:C8:01:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b005c65-376f-3814-9c4b-33d2d6b1966f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e6:cc:f1:13:56:8d:d2:6e:7d:42:f3:f2:35:ed:0d:87:c6: 43:37:ae:49:02:ac:81:32:38:9b:82:02:64:90:82:2e:37:d9: 6b:4f:63:94:b1:6a:58:98:7d:d5:50:e9:43:41:82:c8:91:e5: 5f:98:41:68:aa:0e:08:fa:fb:77:f0:99:29:d3:11:88:0b:2f: 19:54:de:a4:70:45:b7:45:04:80:08:93:13:63:d0:53:aa:1e: db:62:28:e4:de:cc:22:0d:c7:57:81:64:d0:47:fb:ec:0a:af: 9b:84:97:a9:8d:9c:58:e8:3d:39:03:7f:a5:b0:ab:b1:e2:ac: be:df:09:29:b2:f2:3c:8d:c4:14:65:c7:ab:cc:d6:cd:24:1c: 8b:31:05:91:ea:34:61:76:5f:47:94:72:e3:a4:73:08:f4:aa: 6c:0d:ce:6a:1b:aa:7c:9f:5a:6b:d5:f3:8c:fa:dd:4d:8c:8e: 61:d5:26:98:0e:44:c1:46:69:5d:d2:64:f3:9d:6e:18:56:d9: d7:8d:9f:0b:56:11:9c:d8:36:12:cc:e5:db:2c:a3:e0:eb:4f: 6a:e4:67:d6:fa:51:be:e2:14:b1:cb:1d:2a:97:1f:b3:41:6a: d2:f8:a7:d2:ce:6e:63:52:43:0b:1e:78:ba:0e:2c:62:ce:21: 9b:f8:c4:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoUGboUccJZlvtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk M2UxZDZkYTItY2I3Zi00ZDUwLWE0YzAtMDNkMDViYTM5MzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGaAJ01T/N38Z54e2KUtUoKzXpWNZVeUxUo7 4oKwJuVihHU1vXPx7o8oIiI3YYSEHm4ba/mygL1DB/E1Ovpg+Sr0aedqiHJcEbmx BT5t2TO8NKdU4hV0+VAp+iQq/xYwaNTGIZqW64Tih2soJDGZx5DL3S8i2VlZ8x0E jxmDfHQQpI50scHkx48ONCYgHQnic5Hmyub5ZR5OZL6QMghWIzFFDneh5UxXe5x+ okhCyf2f4xhUYD9TAalEYfxodGIah3fjCh8Z0gn37XtpppaN0in7WitUjxtNunry M2G5j88dLxPMrKQCvx3CF8hXP2olgzOY7vNULcaK7Z42TGDHPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWA6K0u7pqmgYChGxI23dBPyAE0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWIwMDVjNjUtMzc2Zi0z ODE0LTljNGItMzNkMmQ2YjE5NjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRx0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7mzPETVo3Sbn1C8/I17Q2HxkM3rkkCrIEyOJuCAmSQgi432WtPY5Sx aliYfdVQ6UNBgsiR5V+YQWiqDgj6+3fwmSnTEYgLLxlU3qRwRbdFBIAIkxNj0FOq HttiKOTezCINx1eBZNBH++wKr5uEl6mNnFjoPTkDf6Wwq7HirL7fCSmy8jyNxBRl x6vM1s0kHIsxBZHqNGF2X0eUcuOkcwj0qmwNzmobqnyfWmvV84z63U2MjmHVJpgO RMFGaV3SZPOdbhhW2deNnwtWEZzYNhLM5dsso+DrT2rkZ9b6Ub7iFLHLHSqXH7NB atL4p9LObmNSQwseeLoOLGLOIZv4xDQ= -----END CERTIFICATE-----Generated at Fri Sep 25 06:47:10 2026 by rpki-client