$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bcdeab2b-2110-3b23-b432-bf7bf1ce3985.roa File: bcdeab2b-2110-3b23-b432-bf7bf1ce3985.roa (raw, json) Hash identifier: VxaAr8PVAH14/laOn8hlfkg9P1dB74U0q+Gw17jzZek= Subject key identifier: DB:6A:09:1E:35:82:AC:B8:3F:93:AB:97:ED:74:C9:86:BE:1D:64:67 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4987DA41049B68266AFFC000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bcdeab2b-2110-3b23-b432-bf7bf1ce3985.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.29.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:da:41:04:9b:68:26:6a:ff:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=96299e9f-1247-4ca4-b37b-c84c2eb8e978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:16:1a:48:7a:d2:cc:68:74:18:63:65:d1:86: 7d:15:d4:ce:6a:cc:28:9f:1b:f5:62:ef:07:0a:a1: 03:6f:ff:50:81:e6:ba:b7:08:fb:75:82:e6:0d:bd: d4:a0:09:f8:4f:c8:bf:31:bd:ed:c7:b5:d1:68:20: 73:39:3d:e2:25:3d:fe:d6:2f:17:9c:9f:a9:c5:9e: dc:31:fe:94:00:b4:20:69:ce:56:9b:02:73:74:f1: 6a:e7:83:38:aa:eb:ec:be:4d:ab:bc:c6:36:b9:93: a7:09:54:05:76:d7:cf:73:8b:9a:01:4a:b2:97:01: b5:4e:a3:f0:c7:a8:c3:62:9f:df:ad:01:f2:f8:6a: 30:21:c8:3b:3c:f7:51:98:09:80:eb:73:35:d1:98: fa:07:b2:e0:f6:7a:6e:6f:db:ca:20:93:19:75:80: 1c:00:05:51:a0:85:b9:79:2b:cf:3e:36:04:f5:39: e8:04:e7:32:9f:9b:1e:85:bd:47:4b:d5:02:5a:93: d0:46:6e:8f:59:cb:a0:2a:98:58:6d:08:94:eb:12: 61:95:70:2b:a0:c5:5b:18:43:86:e5:c8:95:01:5c: 1a:e9:68:8e:f8:c3:aa:ef:d6:bc:94:3e:4c:6d:47: 6e:1a:de:96:94:34:ca:26:32:7b:a3:60:23:8a:a8: f2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:6A:09:1E:35:82:AC:B8:3F:93:AB:97:ED:74:C9:86:BE:1D:64:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bcdeab2b-2110-3b23-b432-bf7bf1ce3985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:f8:c4:8d:a7:1d:c6:b2:18:dc:ef:9f:e5:85:6f:63:34:bc: 17:ca:c8:68:e3:aa:7d:e8:95:1c:a7:de:c6:dc:2c:59:d4:6a: 78:ec:30:7a:41:e8:f8:46:ec:47:d5:26:a3:8e:ab:66:2a:f5: d7:d1:7c:73:4f:c7:d9:a8:33:47:db:13:8d:a2:88:c4:26:d6: 59:e8:76:c7:b7:51:ee:c1:4f:bf:85:56:77:25:93:10:4e:c7: d4:6d:1f:9e:7d:1d:7b:a5:e6:e6:34:55:46:1f:98:20:a8:b1: 92:54:9a:b8:44:fa:36:03:4e:ba:3a:8e:58:b2:37:a7:8f:0a: ba:da:f7:44:6e:60:7e:1a:77:0a:a2:b8:4f:52:07:fd:f9:19: 69:18:56:55:61:4b:09:4a:a2:f7:52:93:7b:0f:32:b4:3a:7b: 80:57:ff:90:40:cb:81:0b:48:7e:b9:c1:4f:27:11:e0:90:74: 8e:d1:8b:99:2d:43:1a:24:b4:bc:b8:c9:41:d2:b7:f9:99:55: 46:b1:9f:fb:ee:51:78:80:68:ce:ca:dc:fa:60:68:c5:e1:5c: fb:40:c4:72:e6:66:f8:cd:bf:e6:03:33:46:d5:89:74:d5:40: 48:5f:47:a7:33:dd:c8:af:96:76:99:66:11:5e:e9:b7:5e:45: 8d:c6:5d:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh9pBBJtoJmr/wAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTYyOTllOWYtMTI0Ny00Y2E0LWIzN2ItYzg0YzJlYjhlOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxYaSHrSzGh0GGNl0YZ9FdTOaswonxv1Yu8H CqEDb/9Qgea6twj7dYLmDb3UoAn4T8i/Mb3tx7XRaCBzOT3iJT3+1i8XnJ+pxZ7c Mf6UALQgac5WmwJzdPFq54M4quvsvk2rvMY2uZOnCVQFdtfPc4uaAUqylwG1TqPw x6jDYp/frQHy+GowIcg7PPdRmAmA63M10Zj6B7Lg9npub9vKIJMZdYAcAAVRoIW5 eSvPPjYE9TnoBOcyn5sehb1HS9UCWpPQRm6PWcugKphYbQiU6xJhlXAroMVbGEOG 5ciVAVwa6WiO+MOq79a8lD5MbUduGt6WlDTKJjJ7o2Ajiqjy5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtqCR41gqy4P5Orl+10yYa+HWRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmNkZWFiMmItMjExMC0z YjIzLWI0MzItYmY3YmYxY2UzOTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG74xI2nHcayGNzvn+WFb2M0vBfKyGjjqn3olRyn3sbcLFnUanjsMHpB 6PhG7EfVJqOOq2Yq9dfRfHNPx9moM0fbE42iiMQm1lnodse3Ue7BT7+FVnclkxBO x9RtH559HXul5uY0VUYfmCCosZJUmrhE+jYDTro6jliyN6ePCrra90RuYH4adwqi uE9SB/35GWkYVlVhSwlKovdSk3sPMrQ6e4BX/5BAy4ELSH65wU8nEeCQdI7Ri5kt QxoktLy4yUHSt/mZVUaxn/vuUXiAaM7K3PpgaMXhXPtAxHLmZvjNv+YDM0bViXTV QEhfR6cz3civlnaZZhFe6bdeRY3GXVc= -----END CERTIFICATE-----Generated at Sat Sep 26 12:45:36 2026 by rpki-client