$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa File: 9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa (raw, json) Hash identifier: Ey9qADqtDe7TQeE+eO+jxV8aT8vx/5Mjnqaz55MD3ak= Subject key identifier: 27:39:AC:E8:ED:D5:4C:D4:BB:04:57:FF:4A:86:C7:B0:66:B5:F7:39 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497302C2FFFEE0C0BF4E60C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.29.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:02:c2:ff:fe:e0:c0:bf:4e:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8f78db3b-271b-4309-9c2e-09e6863a181e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:62:e6:66:f3:df:cb:4e:0b:41:a8:a3:7e:18: 14:ad:39:73:c1:bd:45:4c:5a:69:44:f7:80:bc:85: e1:4f:f3:c1:24:a9:aa:cf:f0:56:13:91:55:76:1c: 8c:86:82:61:83:f1:61:8e:7a:27:6b:39:21:7f:6c: 71:d0:ae:d8:4e:40:b5:9a:e4:f2:a2:f2:59:85:a3: ab:ed:1e:ea:68:80:e9:df:f6:61:03:8b:ed:e2:4c: 66:1e:9a:d5:d8:2c:f9:0e:15:d1:7b:e1:87:75:a5: bf:b3:16:f8:43:34:1c:ac:bd:18:5b:d1:e5:8a:90: 14:9c:96:11:10:f3:1c:c5:4b:03:a2:9a:ee:90:f3: ee:6c:d6:c6:f8:ee:4c:fa:dd:e4:39:94:f2:78:fa: c0:69:62:ba:76:41:c1:93:e5:38:8d:09:8b:f8:6f: 87:77:ab:a8:ec:ad:2b:7d:2b:5c:0c:b8:a5:66:c5: 66:ee:c5:04:1b:30:ce:0d:0d:27:a7:22:21:9a:13: 1a:3b:45:1c:a0:89:ca:81:62:f8:ff:64:a9:3f:2e: 7e:42:2d:43:14:92:f2:d1:e9:74:28:97:a8:f6:7d: fc:d6:e9:50:e5:4b:70:46:9d:54:8d:44:0a:2e:45: 22:84:b8:f1:e2:7a:6d:76:4a:9a:9b:01:73:94:a9: 28:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:39:AC:E8:ED:D5:4C:D4:BB:04:57:FF:4A:86:C7:B0:66:B5:F7:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cf9f3c0-2016-3a21-8d9d-9081ba2ddf83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:d4:44:12:26:15:77:6e:41:61:4f:cd:a6:26:6a:8c:2f:72: 87:cf:a9:b5:a7:b0:08:dd:e5:92:3f:a3:bd:b2:3b:f7:6e:4c: 6b:0f:57:fd:44:7b:cc:39:d9:83:eb:7d:8f:2d:6d:69:32:50: d2:d0:15:ce:97:b7:17:29:0a:55:2b:4c:1d:3f:b7:6f:c1:8a: cd:5f:be:8e:7c:2b:70:7b:4d:92:0a:24:fe:b0:7a:bf:2d:54: 8d:5e:56:41:79:f7:27:7d:57:54:fe:48:64:36:e6:e0:57:02: 74:70:7b:14:de:b1:ea:ba:10:85:0d:d0:20:b5:1c:fc:5d:c8: 01:05:9f:9b:1a:0d:3d:ab:ad:d6:26:0a:de:3b:7f:21:59:d9: ef:7c:74:f9:b2:33:07:a4:64:bc:99:c7:5c:a2:c9:a7:35:a6: 52:65:fc:c3:62:4d:1f:f8:00:a1:e7:5d:ea:5d:06:47:14:23: 7c:2d:87:33:7e:58:27:48:12:29:75:27:bb:b5:85:d7:2f:46: 00:92:c6:ad:c2:0a:84:4b:6c:79:15:b3:49:33:a5:2e:90:49: 2f:70:fe:26:5a:dd:9c:0b:7d:fa:1d:b8:97:8e:ac:ba:02:be: c1:13:1c:32:cd:01:86:4c:42:46:f8:d1:67:9c:3b:ba:00:3c: 8b:73:ba:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcwLC//7gwL9OYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGY3OGRiM2ItMjcxYi00MzA5LTljMmUtMDllNjg2M2ExODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmLmZvPfy04LQaijfhgUrTlzwb1FTFppRPeA vIXhT/PBJKmqz/BWE5FVdhyMhoJhg/Fhjnonazkhf2xx0K7YTkC1muTyovJZhaOr 7R7qaIDp3/ZhA4vt4kxmHprV2Cz5DhXRe+GHdaW/sxb4QzQcrL0YW9HlipAUnJYR EPMcxUsDoprukPPubNbG+O5M+t3kOZTyePrAaWK6dkHBk+U4jQmL+G+Hd6uo7K0r fStcDLilZsVm7sUEGzDODQ0npyIhmhMaO0UcoInKgWL4/2SpPy5+Qi1DFJLy0el0 KJeo9n381ulQ5UtwRp1UjUQKLkUihLjx4nptdkqamwFzlKkoYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCc5rOjt1UzUuwRX/0qGx7Bmtfc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWNmOWYzYzAtMjAxNi0z YTIxLThkOWQtOTA4MWJhMmRkZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXURBImFXduQWFPzaYmaowvcofPqbWnsAjd5ZI/o72yO/duTGsPV/1E e8w52YPrfY8tbWkyUNLQFc6XtxcpClUrTB0/t2/Bis1fvo58K3B7TZIKJP6wer8t VI1eVkF59yd9V1T+SGQ25uBXAnRwexTeseq6EIUN0CC1HPxdyAEFn5saDT2rrdYm Ct47fyFZ2e98dPmyMwekZLyZx1yiyac1plJl/MNiTR/4AKHnXepdBkcUI3wthzN+ WCdIEil1J7u1hdcvRgCSxq3CCoRLbHkVs0kzpS6QSS9w/iZa3ZwLffoduJeOrLoC vsETHDLNAYZMQkb40WecO7oAPItzunA= -----END CERTIFICATE-----Generated at Sat Sep 26 04:13:07 2026 by rpki-client