$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8e78436-e696-38eb-918c-9aaf893d3717.roa File: a8e78436-e696-38eb-918c-9aaf893d3717.roa (raw, json) Hash identifier: DcyJ0aa9O8Z4vTS4ncI2Q5WrT0aeNvWRac5BoPmnLGw= Subject key identifier: 88:A4:8C:05:17:0E:05:98:9B:33:7D:6C:B1:52:0E:AD:07:F2:EF:BB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4972B9E3A83482A3F34DF242 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8e78436-e696-38eb-918c-9aaf893d3717.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.25.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b9:e3:a8:34:82:a3:f3:4d:f2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5c2f5f7e-fcaf-4669-ac87-e90de7e3613f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:91:34:cc:18:e4:8f:7f:c8:f4:48:fc:52:f9: 84:2c:1c:34:ce:75:b6:cc:f9:3b:0c:f6:49:6c:c1: 6b:81:c7:be:7b:f5:18:64:d0:da:9c:a5:38:fe:f6: 6b:d7:1c:fc:5d:3b:33:ec:5f:8b:fd:05:84:f2:6b: 74:a9:fe:aa:2a:bd:be:60:ef:ae:f7:4b:d0:f5:03: 0c:bc:06:a4:ac:db:84:f8:39:6e:96:38:f1:27:7a: 3c:a0:9c:bf:80:73:2b:81:ae:a3:a5:15:a4:17:10: 8a:6d:c9:1c:ba:b3:8c:de:e6:4e:e7:0a:86:d4:11: b7:05:fd:0d:2d:d1:9a:5a:d1:df:f0:99:aa:4a:71: 02:aa:4c:18:ea:92:10:43:8c:fd:65:ce:d8:6f:d6: 9c:7d:b0:87:41:42:44:60:90:6a:5f:a5:61:13:64: 98:c4:1b:b2:97:ea:7d:62:72:84:76:88:45:e7:d9: 55:de:dd:66:f5:60:33:2f:ed:ce:8f:6b:14:c2:db: 8d:6c:73:bd:6d:e9:57:92:ea:e6:9f:20:e9:6f:75: db:2f:28:64:69:81:df:03:a3:cf:b5:68:12:e0:34: fe:63:3d:97:dc:05:64:62:7b:45:3f:ce:a1:dd:6c: 6c:fb:aa:cf:04:c3:d1:1d:b9:62:c0:b3:3e:85:f7: 18:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A4:8C:05:17:0E:05:98:9B:33:7D:6C:B1:52:0E:AD:07:F2:EF:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8e78436-e696-38eb-918c-9aaf893d3717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c6:3f:0d:8d:cc:1a:6d:c7:dd:70:04:73:70:a9:89:b9:46: c6:f1:3b:25:57:f0:9e:b8:30:57:8c:1a:2d:0f:a9:03:8e:de: 4d:dd:94:27:b6:01:56:de:bc:5d:1f:66:63:5b:08:fb:7d:24: d2:a7:e2:63:f8:90:ee:b4:b1:7b:be:ec:bb:95:e3:4c:a1:0d: 49:6f:4d:54:24:f5:30:28:cb:46:2e:ec:b1:a0:f3:5e:8e:3e: 4b:4f:8e:47:94:82:57:a3:62:2b:ac:14:cb:4c:34:24:fa:3d: 31:10:ed:e1:4c:2d:45:80:09:77:af:11:7c:62:21:e4:23:9e: 9d:84:4a:d0:a0:1f:86:ae:7b:96:d4:fa:ca:4b:37:06:05:2e: 20:88:7e:f2:eb:f6:14:a7:0c:91:f0:42:f4:48:dd:62:3d:7b: b0:3d:f9:bb:60:54:97:40:4f:c5:9b:f9:2f:e8:1b:a8:af:40: 58:4b:f7:6b:4a:bf:53:55:33:1e:6a:3b:6a:b8:c5:3e:22:b2: 30:6b:51:37:a8:da:40:8d:79:a4:f3:72:7a:24:8f:a9:aa:80: 2e:40:e7:3d:9a:2d:40:b2:2e:c7:c2:c7:9c:c6:2e:6f:f3:a5: d4:61:70:4a:66:26:5a:d9:1a:f5:9b:17:72:6c:3c:12:19:a8: f2:cf:36:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcrnjqDSCo/NN8kIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWMyZjVmN2UtZmNhZi00NjY5LWFjODctZTkwZGU3ZTM2MTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35E0zBjkj3/I9Ej8UvmELBw0znW2zPk7DPZJ bMFrgce+e/UYZNDanKU4/vZr1xz8XTsz7F+L/QWE8mt0qf6qKr2+YO+u90vQ9QMM vAakrNuE+DluljjxJ3o8oJy/gHMrga6jpRWkFxCKbckcurOM3uZO5wqG1BG3Bf0N LdGaWtHf8JmqSnECqkwY6pIQQ4z9Zc7Yb9acfbCHQUJEYJBqX6VhE2SYxBuyl+p9 YnKEdohF59lV3t1m9WAzL+3Oj2sUwtuNbHO9belXkurmnyDpb3XbLyhkaYHfA6PP tWgS4DT+Yz2X3AVkYntFP86h3Wxs+6rPBMPRHbliwLM+hfcYGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIikjAUXDgWYmzN9bLFSDq0H8u+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYThlNzg0MzYtZTY5Ni0z OGViLTkxOGMtOWFhZjg5M2QzNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbGPw2NzBptx91wBHNwqYm5RsbxOyVX8J64MFeMGi0PqQOO3k3dlCe2 AVbevF0fZmNbCPt9JNKn4mP4kO60sXu+7LuV40yhDUlvTVQk9TAoy0Yu7LGg816O PktPjkeUglejYiusFMtMNCT6PTEQ7eFMLUWACXevEXxiIeQjnp2EStCgH4aue5bU +spLNwYFLiCIfvLr9hSnDJHwQvRI3WI9e7A9+btgVJdAT8Wb+S/oG6ivQFhL92tK v1NVMx5qO2q4xT4isjBrUTeo2kCNeaTzcnokj6mqgC5A5z2aLUCyLsfCx5zGLm/z pdRhcEpmJlrZGvWbF3JsPBIZqPLPNhM= -----END CERTIFICATE-----Generated at Sun Sep 27 16:53:39 2026 by rpki-client