$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa File: b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa (raw, json) Hash identifier: 26Q1mTffumGgCuhofBVseh/RDEGZVG2c3naT02tbK5c= Subject key identifier: D5:C5:D1:8E:A7:9A:42:C8:50:F0:9B:2C:4F:06:E2:C3:24:AF:98:28 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4987FD13599AA32C630E0140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.25.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:fd:13:59:9a:a3:2c:63:0e:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=87d840f5-4755-4abf-b7b7-8288b707935d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:03:75:12:47:aa:7e:a5:47:8e:d8:d7:30:c8: 7e:3f:6c:bb:d5:9a:e7:c3:bc:ac:ab:fd:05:d5:9e: 6e:69:b6:da:1c:83:25:6e:1f:32:1f:8e:ec:07:81: 57:98:a2:19:2b:88:e7:21:1a:bd:58:df:7e:df:14: b2:0c:2b:50:6e:35:77:fa:81:3d:d6:56:e5:72:12: 59:4b:33:7f:0a:e9:54:ea:46:61:4e:81:dd:64:72: 5a:cb:67:c1:37:0a:5a:f9:40:08:c0:a6:34:91:9e: 9b:01:b8:e4:46:57:db:25:87:f2:8d:95:85:8f:ba: de:b1:70:9d:21:b7:f6:81:33:ba:ad:3d:39:30:41: e7:d6:8a:86:40:15:df:a7:de:27:e9:f9:bb:ce:9e: 32:d8:1a:38:c2:b9:fb:22:82:ec:b8:8e:f5:45:86: fe:ec:38:d1:e2:8a:a5:36:4f:dc:81:59:76:15:bf: cc:2b:42:5e:9f:9b:26:a3:ad:38:c2:bc:f3:8b:c5: 5f:ff:8d:8f:9f:bd:ff:9a:48:f4:fa:ec:9c:c7:99: 57:43:05:77:17:fa:0a:66:27:7e:53:12:2a:77:f1: 67:0e:35:46:1c:16:94:3b:ff:37:6b:67:35:30:3d: 12:89:64:f5:01:64:4b:d0:dc:d0:8a:70:9c:21:23: 44:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C5:D1:8E:A7:9A:42:C8:50:F0:9B:2C:4F:06:E2:C3:24:AF:98:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:60:d2:82:2e:d1:48:b5:8a:6f:5c:1f:a4:df:82:ae:25:c7: b0:08:2b:d9:42:bc:83:87:63:0f:07:ce:ce:48:aa:43:51:11: 5a:34:39:43:10:c3:1b:92:15:9f:91:52:5c:ed:fb:88:9e:c3: bc:fe:49:40:37:24:3a:7a:44:1d:10:49:2f:64:34:bd:9a:2b: 17:c2:9c:c3:3b:b4:1b:d6:a2:b7:34:8d:b3:f0:6c:bf:28:78: 11:d0:2c:75:b0:66:22:d8:6e:d0:3e:ec:0b:3b:20:b4:56:2f: 2a:9e:93:0d:cb:5c:34:54:d0:36:94:49:a1:38:42:53:08:d8: c2:e0:83:1a:60:be:ec:80:5e:e5:b3:30:ad:00:39:77:13:ae: 90:6a:59:d6:1a:3a:01:1b:de:20:07:71:74:94:ae:66:0e:19: 6e:54:b0:04:dd:61:73:d4:ed:7d:d8:0a:9e:24:56:0f:5d:59: 2f:5b:0d:fb:3b:52:41:36:98:a1:29:26:b8:58:54:e1:fe:2f: 72:bb:b3:db:0d:d3:f9:c5:f8:e6:49:b8:12:e2:1c:25:72:3f: 80:fb:cb:32:df:ef:6d:16:b1:3c:dd:8a:2c:c0:5a:db:6c:6b: 1f:08:4a:22:a1:0a:0b:ac:42:cf:4b:c0:40:25:77:09:0d:af: df:36:2c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh/0TWZqjLGMOAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODdkODQwZjUtNDc1NS00YWJmLWI3YjctODI4OGI3MDc5MzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AN1EkeqfqVHjtjXMMh+P2y71Zrnw7ysq/0F 1Z5uabbaHIMlbh8yH47sB4FXmKIZK4jnIRq9WN9+3xSyDCtQbjV3+oE91lblchJZ SzN/CulU6kZhToHdZHJay2fBNwpa+UAIwKY0kZ6bAbjkRlfbJYfyjZWFj7resXCd Ibf2gTO6rT05MEHn1oqGQBXfp94n6fm7zp4y2Bo4wrn7IoLsuI71RYb+7DjR4oql Nk/cgVl2Fb/MK0Jen5smo604wrzzi8Vf/42Pn73/mkj0+uycx5lXQwV3F/oKZid+ UxIqd/FnDjVGHBaUO/83a2c1MD0SiWT1AWRL0NzQinCcISNEmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXF0Y6nmkLIUPCbLE8G4sMkr5goMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjVjYmE2YjAtNDA3My0z ZGFhLWIyOTctZWFjYThkMDk1ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRnuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtg0oIu0Ui1im9cH6Tfgq4lx7AIK9lCvIOHYw8Hzs5IqkNREVo0OUMQ wxuSFZ+RUlzt+4iew7z+SUA3JDp6RB0QSS9kNL2aKxfCnMM7tBvWorc0jbPwbL8o eBHQLHWwZiLYbtA+7As7ILRWLyqekw3LXDRU0DaUSaE4QlMI2MLggxpgvuyAXuWz MK0AOXcTrpBqWdYaOgEb3iAHcXSUrmYOGW5UsATdYXPU7X3YCp4kVg9dWS9bDfs7 UkE2mKEpJrhYVOH+L3K7s9sN0/nF+OZJuBLiHCVyP4D7yzLf720WsTzdiizAWtts ax8ISiKhCgusQs9LwEAldwkNr982LBE= -----END CERTIFICATE-----Generated at Sat Sep 26 12:12:50 2026 by rpki-client