$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba9e7ef1-d09e-3ddd-9229-4b17d75c62af.roa File: ba9e7ef1-d09e-3ddd-9229-4b17d75c62af.roa (raw, json) Hash identifier: Y3PR7Fw+Ag/JPuik5YkSTKI3FruQ+EtyYQMpcvOtjwA= Subject key identifier: B1:24:77:CA:72:66:0D:B9:67:00:D6:8E:05:36:28:DA:CC:7F:CB:38 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49880AC1DFD1F610E11B3780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba9e7ef1-d09e-3ddd-9229-4b17d75c62af.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.28.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:0a:c1:df:d1:f6:10:e1:1b:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=36b59d62-c67c-4de8-ab3d-ccceac4d302b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d4:e3:8f:c3:f4:f0:a2:5c:fe:c3:72:e1:1f: 91:a5:d1:43:23:00:85:35:45:3c:5a:b5:37:1f:f8: e4:c7:3b:f2:5e:f7:ec:ff:34:3c:d6:5e:18:35:7c: 86:81:bc:d8:7a:a3:c9:04:e8:33:f6:ab:b7:03:e6: 26:6c:a3:b0:eb:90:86:3b:f4:30:65:24:dd:9c:13: 20:c6:ad:83:d3:d2:22:7e:99:45:0d:39:cb:7c:0e: a3:68:46:38:fb:15:60:76:28:93:e2:da:37:ac:bf: 62:63:b2:42:19:53:fd:38:79:7f:f3:89:53:d7:3e: e1:19:89:e9:8f:b1:06:d3:8b:b0:dd:f8:fd:68:61: 5a:8a:e4:cc:0a:6f:33:1a:34:81:1c:c7:b8:d4:a6: 4d:a7:a7:1c:3a:2f:4a:67:a9:41:00:2c:6b:4f:c4: 23:39:25:c0:fb:c5:20:c0:f6:29:97:a4:02:c6:dd: ac:36:b0:3b:9e:35:fa:0e:08:17:e5:72:d9:6c:c1: 8c:13:b5:f5:7d:a0:80:be:0f:60:1e:32:1d:83:0f: cb:98:6c:59:0b:ad:ef:c5:d9:6b:13:3e:87:c8:e1: ff:c3:3e:c5:95:ac:d4:2a:73:b3:ee:98:20:1e:31: da:1b:f0:63:e4:d3:0a:2e:ea:89:8d:13:5b:35:7b: bc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:24:77:CA:72:66:0D:B9:67:00:D6:8E:05:36:28:DA:CC:7F:CB:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba9e7ef1-d09e-3ddd-9229-4b17d75c62af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d1:bd:08:fc:6a:f5:32:83:4a:01:31:c3:39:fb:e1:51:5d: 9c:61:1f:2e:87:38:7a:93:cc:37:b5:92:12:14:52:14:8e:8a: 72:9e:cb:6c:33:cc:70:49:5c:16:1f:0a:3d:ac:3b:7c:0c:6b: 1e:9c:19:1f:2b:87:74:fe:cd:11:6a:73:48:71:cf:5d:ce:2d: 1a:b5:40:d1:a0:44:30:59:32:54:23:0d:c3:06:45:f7:3c:4a: be:38:dd:7d:80:0f:b9:5e:45:37:2a:7f:84:01:f8:98:0a:b1: 27:5a:6d:42:f5:40:90:b6:c3:f5:9c:5e:8e:2b:84:06:75:3d: 97:57:d6:e4:6d:da:0d:b7:6d:5f:37:25:e3:5f:67:92:8d:46: 3f:22:88:fe:1e:99:4b:6e:a3:9f:c7:75:69:9f:13:4a:07:d1: b5:61:d5:dc:bc:a0:b7:d0:4e:47:6a:40:c7:a8:5e:11:d4:e2: d7:cc:a1:4d:dc:27:f2:f7:85:af:59:e6:58:6c:8e:c3:f3:ae: 1d:6f:a3:12:b7:a8:a5:22:95:dc:09:80:14:27:bb:7b:a9:55: 07:0f:c8:8e:7d:27:c5:6c:79:e6:82:98:3b:55:77:2f:ee:29: 71:62:6f:04:c1:9e:a3:42:0b:2b:2f:4d:b9:af:90:0e:10:a1: 54:26:b8:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiArB39H2EOEbN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzZiNTlkNjItYzY3Yy00ZGU4LWFiM2QtY2NjZWFjNGQzMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69Tjj8P08KJc/sNy4R+RpdFDIwCFNUU8WrU3 H/jkxzvyXvfs/zQ81l4YNXyGgbzYeqPJBOgz9qu3A+YmbKOw65CGO/QwZSTdnBMg xq2D09IifplFDTnLfA6jaEY4+xVgdiiT4to3rL9iY7JCGVP9OHl/84lT1z7hGYnp j7EG04uw3fj9aGFaiuTMCm8zGjSBHMe41KZNp6ccOi9KZ6lBACxrT8QjOSXA+8Ug wPYpl6QCxt2sNrA7njX6DggX5XLZbMGME7X1faCAvg9gHjIdgw/LmGxZC63vxdlr Ez6HyOH/wz7FlazUKnOz7pggHjHaG/Bj5NMKLuqJjRNbNXu8cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEkd8pyZg25ZwDWjgU2KNrMf8s4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmE5ZTdlZjEtZDA5ZS0z ZGRkLTkyMjktNGIxN2Q3NWM2MmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHRvQj8avUyg0oBMcM5++FRXZxhHy6HOHqTzDe1khIUUhSOinKey2wz zHBJXBYfCj2sO3wMax6cGR8rh3T+zRFqc0hxz13OLRq1QNGgRDBZMlQjDcMGRfc8 Sr443X2AD7leRTcqf4QB+JgKsSdabUL1QJC2w/WcXo4rhAZ1PZdX1uRt2g23bV83 JeNfZ5KNRj8iiP4emUtuo5/HdWmfE0oH0bVh1dy8oLfQTkdqQMeoXhHU4tfMoU3c J/L3ha9Z5lhsjsPzrh1voxK3qKUildwJgBQnu3upVQcPyI59J8VseeaCmDtVdy/u KXFibwTBnqNCCysvTbmvkA4QoVQmuO4= -----END CERTIFICATE-----Generated at Mon Sep 28 01:10:14 2026 by rpki-client