$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc28f813-2664-3daf-afc0-31008b881da7.roa File: cc28f813-2664-3daf-afc0-31008b881da7.roa (raw, json) Hash identifier: oaeRj/IHfw5XPnucBvBrV/fMNYpeH2q+kvmMg6ML7jE= Subject key identifier: FC:48:F3:E8:75:7E:E4:E9:76:95:51:A0:B5:89:52:19:A8:A8:DF:7F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498B679E3A005B1555844580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc28f813-2664-3daf-afc0-31008b881da7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.19.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:67:9e:3a:00:5b:15:55:84:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=03ea1830-00d0-4f23-8169-cbf111c43c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:71:f6:5d:ea:d5:ae:84:24:0f:8b:fb:79:8f: 37:91:4a:49:8e:f0:06:92:1a:cd:1b:61:18:c2:bd: 70:84:70:71:25:e9:bf:21:3c:63:b1:01:d5:ca:97: a2:4a:fd:46:15:c3:de:cb:c8:4d:21:7a:c6:52:97: 5c:fb:2b:27:52:e0:ff:3f:c6:80:f6:8e:6e:1c:a0: 63:6d:81:c4:f9:95:f7:69:12:75:99:65:c5:cb:10: b5:29:99:23:2e:36:97:c2:d7:46:8a:29:e6:4f:4f: d3:9e:e5:e9:2c:f7:f8:7f:77:b7:6d:54:36:76:2f: bf:92:37:42:aa:26:6f:ca:f6:0b:f7:4b:70:0d:70: f3:bd:0b:da:72:7b:32:80:c3:d9:2a:f6:35:62:c5: a1:71:1a:24:0c:0e:e2:ee:b6:f5:3e:7d:4b:61:47: 44:9c:19:a9:56:41:b2:a3:e0:fb:d0:79:88:d3:51: 70:3a:c5:1d:5a:75:14:1e:dc:83:ef:cf:8d:03:54: a9:db:b6:b8:c3:c0:90:63:a5:28:39:fe:1f:2c:93: be:8c:91:8a:0b:06:d5:dc:1b:55:af:98:0a:f5:d6: 47:d7:12:ad:bc:21:e4:28:88:9f:1c:65:c6:5c:25: 5f:c5:eb:a5:e9:0a:9b:de:0f:2b:1f:6a:5b:0c:d8: 25:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:48:F3:E8:75:7E:E4:E9:76:95:51:A0:B5:89:52:19:A8:A8:DF:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cc28f813-2664-3daf-afc0-31008b881da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:8f:54:af:43:1c:88:c7:d6:81:88:50:8f:eb:a9:44:40:1a: 59:12:40:dd:71:48:2d:43:72:3d:39:05:77:5c:b3:ef:8b:6b: 78:f6:43:b4:ed:09:26:35:07:17:e2:91:24:04:70:87:b8:6b: 6d:84:66:79:a9:52:13:5d:3d:50:98:78:54:64:ab:df:9b:ed: 7e:83:c9:50:32:4b:7b:fe:b3:84:88:49:38:28:ce:50:48:6e: e1:6c:93:76:e7:d0:9a:45:30:d3:1e:2d:e1:13:cc:54:3b:4b: 19:fd:97:58:a1:40:fa:56:19:6b:dc:17:9c:20:4f:c9:0c:28: bd:e4:0d:6c:cd:9c:f8:d8:73:0f:2f:89:9a:a5:d8:3f:8d:5e: 9d:19:24:ef:2a:06:6a:69:f4:2b:64:3c:5c:7c:34:d9:7a:16: 9f:c6:01:19:dc:92:c3:56:7b:03:32:86:ce:6d:f4:f9:ad:96: 15:40:fe:60:1c:cb:2b:59:0f:b7:ac:00:96:0a:57:c9:e7:6a: 2e:62:8f:58:bb:bc:78:78:a4:fa:e1:b7:92:23:52:c1:ee:92: 72:d3:91:45:8c:53:1f:e9:b3:a8:0a:84:3e:1f:0c:33:98:21: f3:ff:a2:78:f5:a7:8f:1d:d3:68:af:27:a8:6d:a6:d5:65:dd: 02:f1:fa:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji2eeOgBbFVWERYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDNlYTE4MzAtMDBkMC00ZjIzLTgxNjktY2JmMTExYzQzYzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnH2XerVroQkD4v7eY83kUpJjvAGkhrNG2EY wr1whHBxJem/ITxjsQHVypeiSv1GFcPey8hNIXrGUpdc+ysnUuD/P8aA9o5uHKBj bYHE+ZX3aRJ1mWXFyxC1KZkjLjaXwtdGiinmT0/TnuXpLPf4f3e3bVQ2di+/kjdC qiZvyvYL90twDXDzvQvacnsygMPZKvY1YsWhcRokDA7i7rb1Pn1LYUdEnBmpVkGy o+D70HmI01FwOsUdWnUUHtyD78+NA1Sp27a4w8CQY6UoOf4fLJO+jJGKCwbV3BtV r5gK9dZH1xKtvCHkKIifHGXGXCVfxeul6Qqb3g8rH2pbDNglEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxI8+h1fuTpdpVRoLWJUhmoqN9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2MyOGY4MTMtMjY2NC0z ZGFmLWFmYzAtMzEwMDhiODgxZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRP0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKPVK9DHIjH1oGIUI/rqURAGlkSQN1xSC1Dcj05BXdcs++La3j2Q7Tt CSY1BxfikSQEcIe4a22EZnmpUhNdPVCYeFRkq9+b7X6DyVAyS3v+s4SISTgozlBI buFsk3bn0JpFMNMeLeETzFQ7Sxn9l1ihQPpWGWvcF5wgT8kMKL3kDWzNnPjYcw8v iZql2D+NXp0ZJO8qBmpp9CtkPFx8NNl6Fp/GARncksNWewMyhs5t9PmtlhVA/mAc yytZD7esAJYKV8nnai5ij1i7vHh4pPrht5IjUsHuknLTkUWMUx/ps6gKhD4fDDOY IfP/onj1p48d02ivJ6htptVl3QLx+pE= -----END CERTIFICATE-----Generated at Tue Sep 29 08:21:59 2026 by rpki-client