$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b9ea3a7-6f63-3644-8b34-022f5ed87455.roa File: 9b9ea3a7-6f63-3644-8b34-022f5ed87455.roa (raw, json) Hash identifier: xZz3fYdJo1GQbKO+m4SJ+SJiJ1KoNZN/yK/03k2m/fs= Subject key identifier: 29:B0:00:B6:36:35:59:AF:58:D3:A5:39:34:C4:C3:06:94:9B:F6:CB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498C156F7ABF83B9CDB88140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b9ea3a7-6f63-3644-8b34-022f5ed87455.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.25.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:15:6f:7a:bf:83:b9:cd:b8:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3db2f228-ab36-4a1d-ac54-dff2b7ce92cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:45:a1:2d:10:a7:80:84:c8:30:75:2b:89:74: a1:0a:94:a6:f8:39:94:45:31:11:b1:96:b2:66:8e: 5a:f3:a0:e2:98:77:85:64:a8:3b:08:24:dc:25:3f: 36:b7:cc:f6:08:3f:88:2b:88:fc:b1:de:14:bc:38: 8b:5b:e4:2d:9d:20:b3:27:df:97:e9:bf:18:3c:e6: ab:43:2c:eb:a2:d1:9e:a2:1d:be:3f:65:f2:07:ae: 6d:79:b3:57:a4:9f:af:0b:1f:01:af:95:0e:4d:62: 9f:5a:ee:fb:12:5e:cc:15:26:e9:ec:ad:d7:1d:40: 75:0d:5c:d6:5a:57:56:71:e6:a0:a1:c1:b2:3b:1c: a2:cf:63:dd:40:30:db:35:fb:dd:a0:12:a0:65:c7: 76:26:36:3c:4a:9a:88:56:9d:aa:4b:12:e1:64:73: 34:62:54:85:6c:05:45:a9:16:e7:ed:08:40:34:60: 73:e2:5f:49:1a:78:6d:20:04:24:4f:5b:38:d8:54: b5:dd:df:85:6b:fc:e8:08:b2:f6:92:c5:55:f8:8f: 0a:1c:d9:c9:0a:04:0d:ae:42:83:06:67:ac:70:4d: 55:27:92:59:12:61:8a:43:93:e0:7e:62:3a:43:6f: 46:bf:28:e6:b0:c6:47:f6:c1:4b:89:2a:a8:10:aa: 54:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B0:00:B6:36:35:59:AF:58:D3:A5:39:34:C4:C3:06:94:9B:F6:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b9ea3a7-6f63-3644-8b34-022f5ed87455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9e:89:f5:40:45:f4:57:e0:98:f0:60:1d:e2:d6:b2:37:57: df:2b:3b:23:f7:27:81:2e:68:ee:dd:6f:bb:21:57:83:fe:0a: c4:a8:62:fd:a4:46:c7:fe:2f:0b:16:3c:33:b8:38:81:08:cc: 5f:b2:bf:94:13:a8:8d:91:c7:0d:0c:f8:e2:95:ed:91:27:f8: b7:17:74:ca:24:1a:bc:e7:82:10:d6:36:44:b2:f3:ad:68:92: 56:90:40:6b:2f:e7:4d:21:07:78:e9:67:30:64:1a:d2:68:96: 29:2b:94:b2:99:66:7f:68:0c:85:c1:07:d1:85:09:39:c5:68: 40:4b:d4:3c:45:a7:b0:fe:fe:95:1d:12:ca:c2:85:88:ae:76: 4a:8c:aa:d8:ed:f7:53:b1:92:67:ba:e7:30:54:bf:b2:17:37: d9:0b:81:18:fb:16:b7:56:2e:e6:03:38:0d:cd:b8:aa:2d:fc: d9:78:cb:de:a4:52:33:3a:54:b2:4f:b6:6b:99:b9:84:d4:14: f0:d6:3a:f3:1a:af:cb:2a:19:af:ff:d3:92:3e:c1:bd:fd:ce: aa:d8:5a:5e:4e:1a:b6:7b:ac:bf:f1:42:7d:b3:ff:c1:b5:f6: c9:25:ac:ad:5e:2e:18:3d:83:0f:20:b0:00:ac:6b:9c:98:4a: d1:fc:52:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjBVver+Duc24gUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2RiMmYyMjgtYWIzNi00YTFkLWFjNTQtZGZmMmI3Y2U5MmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0WhLRCngITIMHUriXShCpSm+DmURTERsZay Zo5a86DimHeFZKg7CCTcJT82t8z2CD+IK4j8sd4UvDiLW+QtnSCzJ9+X6b8YPOar QyzrotGeoh2+P2XyB65tebNXpJ+vCx8Br5UOTWKfWu77El7MFSbp7K3XHUB1DVzW WldWceagocGyOxyiz2PdQDDbNfvdoBKgZcd2JjY8SpqIVp2qSxLhZHM0YlSFbAVF qRbn7QhANGBz4l9JGnhtIAQkT1s42FS13d+Fa/zoCLL2ksVV+I8KHNnJCgQNrkKD BmescE1VJ5JZEmGKQ5PgfmI6Q29GvyjmsMZH9sFLiSqoEKpUnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmwALY2NVmvWNOlOTTEwwaUm/bLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWI5ZWEzYTctNmY2My0z NjQ0LThiMzQtMDIyZjVlZDg3NDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2eifVARfRX4JjwYB3i1rI3V98rOyP3J4EuaO7db7shV4P+CsSoYv2k Rsf+LwsWPDO4OIEIzF+yv5QTqI2Rxw0M+OKV7ZEn+LcXdMokGrznghDWNkSy861o klaQQGsv500hB3jpZzBkGtJolikrlLKZZn9oDIXBB9GFCTnFaEBL1DxFp7D+/pUd EsrChYiudkqMqtjt91Oxkme65zBUv7IXN9kLgRj7FrdWLuYDOA3NuKot/Nl4y96k UjM6VLJPtmuZuYTUFPDWOvMar8sqGa//05I+wb39zqrYWl5OGrZ7rL/xQn2z/8G1 9sklrK1eLhg9gw8gsACsa5yYStH8UgU= -----END CERTIFICATE-----Generated at Sun Sep 27 10:43:12 2026 by rpki-client