$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9ce89db7-2c47-3b17-a2d7-b4a4fdd9d549.roa File: 9ce89db7-2c47-3b17-a2d7-b4a4fdd9d549.roa (raw, json) Hash identifier: g5u85SmzCup+8hqLBOrD0BSu7dG4ycUr0gAc6Wam28s= Subject key identifier: 7A:99:BC:6B:6D:86:B7:2F:11:C5:47:4E:C9:61:E7:C9:9A:3C:46:24 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49749C5466573C06E66C1D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9ce89db7-2c47-3b17-a2d7-b4a4fdd9d549.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.19.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:9c:54:66:57:3c:06:e6:6c:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e7c7a8b8-528e-41d8-96a0-011bcc0d2d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0f:a8:1d:18:95:9e:96:45:51:3d:c2:78:0c: 00:f9:40:aa:bc:56:f6:d3:6c:bc:3e:6f:2f:00:e2: e1:cd:33:4f:f5:46:02:bf:2f:3c:1f:ac:a5:6c:17: 66:c6:23:b7:44:64:6d:b2:72:d0:88:6b:d8:0f:1b: 13:48:a9:4d:56:57:8c:62:b2:df:e3:a0:50:ce:65: 30:57:76:4a:30:98:32:81:9a:93:d3:60:2c:76:11: 37:26:2a:65:8d:04:80:39:06:95:3b:09:ad:06:75: fe:90:1f:95:82:20:6b:99:94:41:35:38:ed:db:3d: a3:78:ad:91:42:00:83:77:2a:18:a5:a3:c4:82:e1: bc:dd:79:4a:f5:b5:87:88:56:ce:31:55:46:c3:65: be:37:69:70:65:da:da:7c:31:b2:ac:fd:87:82:be: 57:fb:f1:e2:66:33:12:5d:19:92:34:15:1b:14:20: 98:84:0f:94:36:5c:af:b3:6f:2e:92:bf:2f:f6:0c: 2e:a4:04:f4:d6:a8:9d:e6:1b:73:4f:6c:96:f7:3b: 7c:38:93:5f:99:14:86:df:8a:48:57:0c:36:b1:13: 14:ea:83:7b:a0:5d:f4:c6:e9:45:2a:b3:1f:a5:22: f7:b5:00:68:35:6f:d5:11:4c:e0:ed:a9:f0:ab:f7: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:99:BC:6B:6D:86:B7:2F:11:C5:47:4E:C9:61:E7:C9:9A:3C:46:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9ce89db7-2c47-3b17-a2d7-b4a4fdd9d549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:51:80:c6:69:e7:a9:01:b7:b9:6b:0c:52:3f:ba:76:9d:da: 84:79:1f:44:13:19:0b:5b:1c:51:6e:f1:bb:27:1e:98:18:a4: da:79:06:bb:c4:d1:5e:68:bd:4b:dd:83:5e:3c:8c:59:31:2a: f5:ab:15:71:8b:2f:26:58:6c:7e:a3:e8:44:4c:6c:f1:be:00: b5:f8:a3:29:ca:e1:9c:b6:8c:4f:ab:83:e5:ba:f7:17:f0:ef: ed:b8:16:68:99:27:70:01:70:7d:37:c2:d9:4e:ad:a6:87:9c: 64:9a:e6:f8:97:41:fd:9e:8c:b0:da:a4:2c:9f:1c:be:de:9f: 9f:f8:57:65:9d:f2:84:ad:ce:ca:7b:bb:f4:47:61:db:a2:2f: 41:04:1f:1b:c2:53:c7:5a:f8:b3:b2:c2:43:c2:ce:5f:27:e4: 23:f7:fe:ef:0f:3a:6a:f8:35:b7:66:ac:90:1e:56:3b:e4:cb: d4:96:c3:68:af:4a:c7:ea:00:9c:cf:15:49:8c:a7:7f:0a:6d: 1b:23:07:e8:1f:92:05:e8:c6:04:2e:b8:62:27:b2:b8:9f:4f: c5:27:2d:ba:23:df:f1:fa:67:c8:3a:8f:b9:d4:26:2a:b4:57: 57:66:20:fc:19:ff:5e:af:8e:16:2d:e3:90:57:2e:58:71:61: b7:29:47:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJxUZlc8BuZsHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTdjN2E4YjgtNTI4ZS00MWQ4LTk2YTAtMDExYmNjMGQyZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw+oHRiVnpZFUT3CeAwA+UCqvFb202y8Pm8v AOLhzTNP9UYCvy88H6ylbBdmxiO3RGRtsnLQiGvYDxsTSKlNVleMYrLf46BQzmUw V3ZKMJgygZqT02AsdhE3JipljQSAOQaVOwmtBnX+kB+VgiBrmZRBNTjt2z2jeK2R QgCDdyoYpaPEguG83XlK9bWHiFbOMVVGw2W+N2lwZdrafDGyrP2Hgr5X+/HiZjMS XRmSNBUbFCCYhA+UNlyvs28ukr8v9gwupAT01qid5htzT2yW9zt8OJNfmRSG34pI Vww2sRMU6oN7oF30xulFKrMfpSL3tQBoNW/VEUzg7anwq/epfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqZvGtthrcvEcVHTslh58maPEYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWNlODlkYjctMmM0Ny0z YjE3LWEyZDctYjRhNGZkZDlkNTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrROSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtRgMZp56kBt7lrDFI/unad2oR5H0QTGQtbHFFu8bsnHpgYpNp5BrvE 0V5ovUvdg148jFkxKvWrFXGLLyZYbH6j6ERMbPG+ALX4oynK4Zy2jE+rg+W69xfw 7+24FmiZJ3ABcH03wtlOraaHnGSa5viXQf2ejLDapCyfHL7en5/4V2Wd8oStzsp7 u/RHYduiL0EEHxvCU8da+LOywkPCzl8n5CP3/u8POmr4NbdmrJAeVjvky9SWw2iv SsfqAJzPFUmMp38KbRsjB+gfkgXoxgQuuGInsrifT8UnLboj3/H6Z8g6j7nUJiq0 V1dmIPwZ/16vjhYt45BXLlhxYbcpRx0= -----END CERTIFICATE-----Generated at Sat Sep 26 03:07:41 2026 by rpki-client