$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad6019c5-db98-3f76-bfae-976b40532f1f.roa File: ad6019c5-db98-3f76-bfae-976b40532f1f.roa (raw, json) Hash identifier: Wi5TG2++wf+iFcrlNdTQLZw8Zsi4Pup6STC+p/4drBI= Subject key identifier: 9E:78:2C:30:D4:46:24:B9:D7:8C:95:3D:96:4A:F9:F8:24:A6:27:9F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497334F0A5751092C266FE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad6019c5-db98-3f76-bfae-976b40532f1f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.28.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:34:f0:a5:75:10:92:c2:66:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bd1df123-4e2c-4427-8ee2-4d3df16f8113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a7:46:0a:64:88:de:8f:a0:81:5d:a1:db:0e: d7:6a:35:d9:4d:f3:32:c2:2a:80:a9:10:84:89:15: a4:8f:b9:f6:b0:5b:92:09:bd:ec:63:90:e6:24:d7: 80:81:29:31:81:f0:79:3d:da:0c:97:12:07:be:f9: f3:0c:13:23:6c:36:e6:8b:6d:5d:0b:fd:b9:40:bf: 47:d8:c9:05:dc:6d:6b:05:0d:46:40:e9:04:94:90: 37:14:d6:03:57:36:88:96:eb:1c:09:71:6e:74:83: c4:e5:56:3d:63:42:c1:ed:d4:52:86:8b:c7:39:c3: 4f:1a:1c:b1:02:47:64:9e:5d:e3:00:21:c2:f1:bf: 43:83:56:43:ab:9a:7c:0c:92:c4:d7:c0:7d:e4:96: 46:8a:e8:38:a2:21:62:00:91:5f:3b:87:05:ba:1c: 2a:66:3b:27:ee:6f:7a:ac:01:ba:d9:9d:27:6c:c4: 3c:13:be:6c:f2:3e:32:d9:61:b5:ba:68:73:48:f7: d2:04:b3:9b:31:1c:c3:cb:e4:27:dd:f5:9f:b2:19: f2:a9:90:eb:3a:79:1f:f8:46:d7:3a:8a:37:82:83: b7:e0:c6:ff:81:d2:0f:3c:ae:ab:53:af:35:84:e4: 19:1f:fb:84:bb:97:01:a4:0c:2a:31:cd:70:28:00: 66:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:78:2C:30:D4:46:24:B9:D7:8C:95:3D:96:4A:F9:F8:24:A6:27:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad6019c5-db98-3f76-bfae-976b40532f1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:fb:d1:83:82:b3:cb:dc:51:ca:93:30:39:dc:fa:ab:ba:f2: 34:a4:f5:c9:df:74:fb:e9:44:d2:6a:14:7e:de:5a:04:89:6b: d8:15:2e:a9:63:02:54:9f:b0:bd:77:ce:d0:87:65:a3:39:bd: 20:3c:18:68:1e:cb:da:86:95:ae:88:d7:39:6d:1a:f6:13:dc: de:ad:a6:e9:41:de:4b:de:54:9a:c3:9b:36:52:ce:e3:78:00: 9b:8b:86:2b:5c:17:90:43:9b:f7:22:0e:ec:1f:cf:41:45:06: 6f:be:5d:50:c0:60:39:a8:c1:60:09:b7:d5:f3:27:ec:c2:37: 53:8e:8f:00:0d:ac:f8:cb:46:84:6a:b0:fa:ea:b8:ac:fc:8c: e9:47:57:fb:41:a8:b7:ea:56:50:f3:1f:90:54:f8:52:1b:0c: 16:0a:2f:76:c6:88:34:5b:54:c0:51:4b:bb:cc:c1:cf:17:33: 27:d2:6c:cf:f8:2a:ed:b9:0e:3f:7c:12:75:7f:5a:1a:a2:0a: b9:cb:aa:12:7f:b2:bf:1e:94:1f:eb:18:06:e3:25:0b:b7:38: 5f:da:b1:e4:b7:11:1c:cd:41:9a:d7:bc:0e:cc:c3:91:ba:5e: 87:21:5e:66:5d:b9:20:39:72:c1:71:9c:e1:0b:84:8a:4e:6c: 63:68:73:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczTwpXUQksJm/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmQxZGYxMjMtNGUyYy00NDI3LThlZTItNGQzZGYxNmY4MTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiadGCmSI3o+ggV2h2w7XajXZTfMywiqAqRCE iRWkj7n2sFuSCb3sY5DmJNeAgSkxgfB5PdoMlxIHvvnzDBMjbDbmi21dC/25QL9H 2MkF3G1rBQ1GQOkElJA3FNYDVzaIluscCXFudIPE5VY9Y0LB7dRShovHOcNPGhyx Akdknl3jACHC8b9Dg1ZDq5p8DJLE18B95JZGiug4oiFiAJFfO4cFuhwqZjsn7m96 rAG62Z0nbMQ8E75s8j4y2WG1umhzSPfSBLObMRzDy+Qn3fWfshnyqZDrOnkf+EbX Ooo3goO34Mb/gdIPPK6rU681hOQZH/uEu5cBpAwqMc1wKABm9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ54LDDURiS514yVPZZK+fgkpiefMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWQ2MDE5YzUtZGI5OC0z Zjc2LWJmYWUtOTc2YjQwNTMyZjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHP70YOCs8vcUcqTMDnc+qu68jSk9cnfdPvpRNJqFH7eWgSJa9gVLqlj AlSfsL13ztCHZaM5vSA8GGgey9qGla6I1zltGvYT3N6tpulB3kveVJrDmzZSzuN4 AJuLhitcF5BDm/ciDuwfz0FFBm++XVDAYDmowWAJt9XzJ+zCN1OOjwANrPjLRoRq sPrquKz8jOlHV/tBqLfqVlDzH5BU+FIbDBYKL3bGiDRbVMBRS7vMwc8XMyfSbM/4 Ku25Dj98EnV/WhqiCrnLqhJ/sr8elB/rGAbjJQu3OF/aseS3ERzNQZrXvA7Mw5G6 XochXmZduSA5csFxnOELhIpObGNoc3o= -----END CERTIFICATE-----Generated at Sat Sep 26 18:43:55 2026 by rpki-client