$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba4c534e-c145-3caa-abb1-ccd8778393d1.roa File: ba4c534e-c145-3caa-abb1-ccd8778393d1.roa (raw, json) Hash identifier: rLND4avx044nyAvtcMhNu8Bpeo5N2m2uZOenXfwVruk= Subject key identifier: 42:7B:74:40:B3:12:9F:9E:4B:92:B6:68:AD:AA:BB:C2:63:88:AF:D9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498820C58CAFD70F839BE000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba4c534e-c145-3caa-abb1-ccd8778393d1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.29.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:20:c5:8c:af:d7:0f:83:9b:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e754d78e-3b67-4b67-b271-47194ff0a981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8b:56:9d:bb:7c:42:d6:80:f3:c8:ed:a9:7e: ef:9a:37:5d:9e:ff:42:a0:0f:76:9f:eb:7f:60:66: 59:6f:c7:e0:53:cf:f1:81:99:6a:4b:53:fe:66:27: 2a:76:8f:f6:33:4c:d0:05:08:d8:9c:85:c6:8f:9d: dd:d0:71:9a:c2:af:f9:29:76:2e:9d:c0:99:be:a4: ea:0d:fc:59:5b:66:c5:77:32:57:5c:87:b5:a1:63: f6:94:00:28:ff:cf:9d:72:55:a4:cb:49:8d:39:c6: ca:75:ef:21:e9:31:99:56:91:41:96:d7:46:ac:18: fa:28:d8:cb:89:48:b2:db:17:ba:de:f6:6f:dc:f4: d2:26:c1:40:c8:56:0f:af:7c:c8:f8:4a:a1:37:1c: f6:c5:97:62:80:be:74:4b:98:85:a4:d1:38:bc:09: e9:90:6a:cf:aa:14:b1:6f:6a:a8:3e:b1:f3:bc:a1: a1:52:c0:62:12:be:0f:a4:f6:31:5c:7c:54:32:eb: 23:40:0c:3a:cb:4f:fe:50:6a:9f:5d:36:b2:a1:19: 7b:9e:20:58:f0:c9:97:f6:44:55:b4:8e:57:76:30: 89:92:61:c7:9c:f8:70:4b:75:8e:ca:8a:85:03:ce: f8:f4:13:23:d1:97:0d:35:62:5b:ec:94:0e:80:92: 5c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7B:74:40:B3:12:9F:9E:4B:92:B6:68:AD:AA:BB:C2:63:88:AF:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba4c534e-c145-3caa-abb1-ccd8778393d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:62:3e:31:a7:f8:1c:35:71:88:2f:9e:ac:eb:60:19:37:d1: b6:46:e1:12:4c:71:30:5a:d3:3d:a5:5a:46:53:ad:6d:67:69: 56:29:7b:91:13:a4:a6:8f:4e:41:0c:a8:f5:4f:7c:af:7a:2e: 48:39:b2:be:20:08:93:b6:16:e4:b9:df:ef:d8:3f:16:f4:89: 1a:a7:13:ce:7d:7f:61:0a:a6:e4:04:58:cc:9a:fa:c9:87:68: d9:e4:b5:d0:28:59:52:90:42:bc:27:91:dc:af:ea:86:75:64: 61:98:ec:96:b5:18:eb:ff:f1:7a:26:5d:54:4d:2d:5e:5f:10: 68:29:5d:79:bc:56:4b:c0:05:0f:e6:56:8c:66:ff:b1:b6:ed: 5c:30:86:49:d3:f9:99:d0:7a:b2:ec:ba:c5:5e:f7:aa:39:75: 1c:b7:86:c3:8b:4d:e9:16:ff:69:f6:ba:b4:ca:89:2e:d3:34: f8:33:c5:8d:9e:31:9e:21:9a:27:f6:7d:36:f0:45:76:7a:91: 16:a1:32:24:e0:71:af:da:da:aa:a3:0a:0e:5f:a8:e1:06:8f: f1:ff:5c:29:77:d2:4f:67:6c:b9:31:a6:06:fe:c7:32:83:b3: 7b:ca:88:79:bf:12:dd:7e:92:c8:c0:d3:d6:a1:5c:ed:7f:f9: e7:22:7a:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiCDFjK/XD4Ob4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTc1NGQ3OGUtM2I2Ny00YjY3LWIyNzEtNDcxOTRmZjBhOTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYtWnbt8QtaA88jtqX7vmjddnv9CoA92n+t/ YGZZb8fgU8/xgZlqS1P+Zicqdo/2M0zQBQjYnIXGj53d0HGawq/5KXYuncCZvqTq DfxZW2bFdzJXXIe1oWP2lAAo/8+dclWky0mNOcbKde8h6TGZVpFBltdGrBj6KNjL iUiy2xe63vZv3PTSJsFAyFYPr3zI+EqhNxz2xZdigL50S5iFpNE4vAnpkGrPqhSx b2qoPrHzvKGhUsBiEr4PpPYxXHxUMusjQAw6y0/+UGqfXTayoRl7niBY8MmX9kRV tI5XdjCJkmHHnPhwS3WOyoqFA8749BMj0ZcNNWJb7JQOgJJczwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ7dECzEp+eS5K2aK2qu8JjiK/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmE0YzUzNGUtYzE0NS0z Y2FhLWFiYjEtY2NkODc3ODM5M2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR29MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRiPjGn+Bw1cYgvnqzrYBk30bZG4RJMcTBa0z2lWkZTrW1naVYpe5ET pKaPTkEMqPVPfK96Lkg5sr4gCJO2FuS53+/YPxb0iRqnE859f2EKpuQEWMya+smH aNnktdAoWVKQQrwnkdyv6oZ1ZGGY7Ja1GOv/8XomXVRNLV5fEGgpXXm8VkvABQ/m Voxm/7G27VwwhknT+ZnQerLsusVe96o5dRy3hsOLTekW/2n2urTKiS7TNPgzxY2e MZ4hmif2fTbwRXZ6kRahMiTgca/a2qqjCg5fqOEGj/H/XCl30k9nbLkxpgb+xzKD s3vKiHm/Et1+ksjA09ahXO1/+eciej0= -----END CERTIFICATE-----Generated at Sat Sep 26 11:13:32 2026 by rpki-client