$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cbeaec8-8267-3794-901a-f194be0235fa.roa File: 9cbeaec8-8267-3794-901a-f194be0235fa.roa (raw, json) Hash identifier: 2TUAGdaChWhXTfEUZ0Yae6GZdD7YQacEp5RRBoydrOc= Subject key identifier: C3:05:2B:3E:81:27:6F:F1:34:B2:27:DD:EE:04:3A:0D:7E:F9:D0:64 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F5E62F15FA9A8936E62FE4C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cbeaec8-8267-3794-901a-f194be0235fa.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 19905 IP address blocks: 173.29.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:f1:5f:a9:a8:93:6e:62:fe:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=9ddbd063-b1c6-4745-a60d-3f5851ae203f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:e4:69:38:6b:08:bc:e4:df:d6:8d:d0:fe: 39:c8:74:16:51:2e:a1:aa:ce:04:db:05:e7:aa:0e: 38:7c:3e:8a:47:66:4d:71:8c:b6:18:a0:35:fe:a0: 67:55:71:37:9e:aa:c0:a5:ab:0b:fd:13:f3:5e:8b: 77:bd:7b:76:ff:a0:47:37:bd:79:5a:f7:b0:4c:f0: 26:e0:63:ef:74:0e:45:aa:a3:35:24:c9:cf:c8:bd: a7:78:86:c2:a1:b7:2d:3d:5f:5d:84:c6:99:5e:b8: b2:e3:c9:06:07:7b:1a:2e:44:5b:2a:06:73:ea:8d: b8:23:32:09:a8:0f:46:74:51:54:1a:07:82:70:e9: 33:be:72:ed:ee:da:3d:51:0e:46:7f:77:ae:ad:42: d8:1e:20:d5:6b:d1:6f:a1:c0:d8:47:04:70:bd:23: 4d:dd:38:ee:45:19:82:0b:e0:3d:67:5e:43:49:42: c3:f5:ce:57:1a:b2:41:04:d7:3d:32:2f:1c:62:c4: df:22:5a:92:6d:10:96:06:30:9b:f4:27:6f:4d:d1: 38:81:fa:45:ff:a8:e0:d4:28:4c:61:b1:64:2b:4c: 26:11:3d:04:00:60:7f:6b:c7:c5:b5:21:0f:cb:5a: 09:d9:43:06:f2:f5:d3:2e:a7:54:7f:0e:81:d3:cd: 94:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:05:2B:3E:81:27:6F:F1:34:B2:27:DD:EE:04:3A:0D:7E:F9:D0:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cbeaec8-8267-3794-901a-f194be0235fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.80.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:d3:e9:89:25:36:5a:0e:89:42:e9:d5:3e:2d:31:3c:b8:3e: 7d:44:7f:23:30:eb:7c:10:bd:07:f3:08:13:24:8a:4e:b1:97: 10:22:13:83:59:71:2e:50:26:dd:d6:d9:48:be:79:ac:73:26: 81:64:5b:34:c6:76:c5:b9:bd:bb:91:2b:b6:ad:68:eb:4e:4b: a6:47:30:e3:3c:25:0f:64:a0:fa:ae:2b:b7:b2:95:f0:4a:c7: c0:b1:44:0f:b5:27:73:93:fa:b6:7f:95:e7:3e:79:be:fe:3a: a6:e3:13:61:0d:cf:93:5a:32:60:c6:59:33:f4:cf:9d:23:9e: 7f:b3:c4:e7:01:9b:6e:c7:55:55:45:f0:12:96:89:45:e5:39: 29:6b:74:97:6f:38:f8:96:03:1f:06:ea:30:b0:1d:3a:12:18: 00:a0:2d:18:80:8a:b0:e2:7c:45:1a:d9:e0:26:88:bb:23:d3: f3:f5:03:ad:d3:5b:3d:1a:24:3a:c2:d7:09:83:66:d1:e8:9e: 3d:df:aa:2e:ec:c3:a1:7c:00:4b:54:11:fe:a9:4a:4f:3f:9a: 59:1a:ce:28:26:37:33:11:fc:a1:86:9f:cb:be:2a:c1:06:c7: 5c:b8:41:16:81:2a:1e:75:83:07:09:6c:ed:e7:d2:48:d9:6b: 70:8b:c9:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYvFfqaiTbmL+TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk OWRkYmQwNjMtYjFjNi00NzQ1LWE2MGQtM2Y1ODUxYWUyMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZHkaThrCLzk39aN0P45yHQWUS6hqs4E2wXn qg44fD6KR2ZNcYy2GKA1/qBnVXE3nqrApasL/RPzXot3vXt2/6BHN715WvewTPAm 4GPvdA5FqqM1JMnPyL2neIbCobctPV9dhMaZXriy48kGB3saLkRbKgZz6o24IzIJ qA9GdFFUGgeCcOkzvnLt7to9UQ5Gf3eurULYHiDVa9FvocDYRwRwvSNN3TjuRRmC C+A9Z15DSULD9c5XGrJBBNc9Mi8cYsTfIlqSbRCWBjCb9CdvTdE4gfpF/6jg1ChM YbFkK0wmET0EAGB/a8fFtSEPy1oJ2UMG8vXTLqdUfw6B082UTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMFKz6BJ2/xNLIn3e4EOg1++dBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWNiZWFlYzgtODI2Ny0z Nzk0LTkwMWEtZjE5NGJlMDIzNWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrT6YklNloOiULp1T4tMTy4Pn1EfyMw63wQvQfzCBMkik6xlxAiE4NZ cS5QJt3W2Ui+eaxzJoFkWzTGdsW5vbuRK7ataOtOS6ZHMOM8JQ9koPquK7eylfBK x8CxRA+1J3OT+rZ/lec+eb7+OqbjE2ENz5NaMmDGWTP0z50jnn+zxOcBm27HVVVF 8BKWiUXlOSlrdJdvOPiWAx8G6jCwHToSGACgLRiAirDifEUa2eAmiLsj0/P1A63T Wz0aJDrC1wmDZtHonj3fqi7sw6F8AEtUEf6pSk8/mlkazigmNzMR/KGGn8u+KsEG x1y4QRaBKh51gwcJbO3n0kjZa3CLydI= -----END CERTIFICATE-----Generated at Sun Oct 11 11:04:01 2026 by rpki-client