$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf629ed3-5c32-33e7-a6df-988589df11b5.roa File: cf629ed3-5c32-33e7-a6df-988589df11b5.roa (raw, json) Hash identifier: yIKuqde4Mptcd4lmmhVltVEIbY2a9ENORLG5UDHE8os= Subject key identifier: 54:53:EC:FD:C5:3E:85:D3:CE:86:7F:15:6E:E2:F5:54:57:8E:44:2D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4973756B0D89965F19ECD1C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf629ed3-5c32-33e7-a6df-988589df11b5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.29.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:75:6b:0d:89:96:5f:19:ec:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6326cebb-245b-4765-988c-8cdf78af7934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d0:43:47:83:9f:34:d7:05:aa:1f:6c:2f:d6: b6:10:47:68:4b:92:78:6b:1e:f1:77:0a:1d:6a:94: fd:ac:50:7c:6a:34:ab:88:39:8a:a4:16:33:e9:4c: ca:27:c4:fd:c5:80:d3:8d:29:c6:f3:54:76:69:46: db:b7:33:f9:36:48:82:e3:9b:83:1a:63:6f:19:cb: 73:c5:15:02:f0:9a:9e:c0:a9:b6:da:de:fa:cb:7c: 9d:9d:3f:9d:a8:2f:7d:c2:2b:50:2a:c0:53:46:bf: c4:d3:51:b7:44:2a:5d:88:3b:11:f0:5e:8e:3b:59: ce:40:a3:fd:11:fc:f9:e6:67:88:60:43:9c:15:f0: 2d:f5:8c:c7:e3:24:3b:82:4b:ec:7f:89:21:3e:b9: 7c:4b:d1:0c:e3:54:41:71:7f:c8:78:b6:80:24:53: eb:f2:75:cc:29:c4:8e:eb:f2:8c:4e:f8:07:c0:32: cb:57:81:bc:41:a3:43:35:3e:df:ee:89:45:13:63: e8:67:21:65:af:80:9a:2d:07:5c:5e:f7:05:a6:83: 86:0d:90:7e:75:e4:db:97:87:36:80:8c:62:f8:c4: 48:ab:19:06:35:60:ba:55:f0:91:06:30:72:83:39: 15:b3:75:aa:ae:2b:b1:6e:78:7b:d6:dd:37:6b:cf: b6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:53:EC:FD:C5:3E:85:D3:CE:86:7F:15:6E:E2:F5:54:57:8E:44:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf629ed3-5c32-33e7-a6df-988589df11b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ef:41:3d:44:da:64:fb:eb:62:ac:f9:c4:21:66:70:85:f4: 04:77:af:6f:bf:56:74:d7:6f:21:5f:c9:76:f3:bd:f7:7e:ff: c5:4c:07:96:3b:50:df:39:e4:a2:d3:9e:94:41:f4:fe:e8:99: f0:33:91:f0:1f:f8:ac:2c:df:25:00:5e:c4:ee:59:fa:b9:b8: c8:1d:d8:a1:4f:1c:6c:7d:b1:08:04:2f:42:b6:ef:61:bd:3f: d2:52:61:65:4e:17:4a:1c:ae:54:13:58:0a:36:e3:e2:16:ec: 7c:a7:40:49:bf:a7:44:ab:60:4e:14:b8:4e:db:32:7d:2a:e9: 50:33:7e:67:08:ee:8e:61:64:72:9d:f8:60:3c:38:a8:e5:1c: d2:c8:83:08:ac:55:df:45:3e:60:b1:8f:23:6d:a4:c0:9e:6a: 2e:e1:ec:02:69:18:8e:bc:c6:94:11:33:48:4d:1d:12:3c:9a: f3:bc:63:3d:82:ed:8f:a0:bd:49:1c:a7:92:08:25:31:a4:fc: 7c:14:02:51:e4:d9:95:9c:b0:19:5a:f4:13:e5:19:fa:80:9a: 4e:9c:3b:a6:ba:fa:8f:59:d2:6d:6e:56:be:44:9e:fd:2f:0f: bc:84:3d:9f:16:2a:f4:58:a7:4d:a4:c7:0a:d8:6f:f7:11:1c: 96:85:0e:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc3VrDYmWXxns0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjMyNmNlYmItMjQ1Yi00NzY1LTk4OGMtOGNkZjc4YWY3OTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtBDR4OfNNcFqh9sL9a2EEdoS5J4ax7xdwod apT9rFB8ajSriDmKpBYz6UzKJ8T9xYDTjSnG81R2aUbbtzP5NkiC45uDGmNvGctz xRUC8JqewKm22t76y3ydnT+dqC99witQKsBTRr/E01G3RCpdiDsR8F6OO1nOQKP9 Efz55meIYEOcFfAt9YzH4yQ7gkvsf4khPrl8S9EM41RBcX/IeLaAJFPr8nXMKcSO 6/KMTvgHwDLLV4G8QaNDNT7f7olFE2PoZyFlr4CaLQdcXvcFpoOGDZB+deTbl4c2 gIxi+MRIqxkGNWC6VfCRBjBygzkVs3Wqriuxbnh71t03a8+2XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRT7P3FPoXTzoZ/FW7i9VRXjkQtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y2MjllZDMtNWMzMi0z M2U3LWE2ZGYtOTg4NTg5ZGYxMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHvQT1E2mT762Ks+cQhZnCF9AR3r2+/VnTXbyFfyXbzvfd+/8VMB5Y7 UN855KLTnpRB9P7omfAzkfAf+Kws3yUAXsTuWfq5uMgd2KFPHGx9sQgEL0K272G9 P9JSYWVOF0ocrlQTWAo24+IW7HynQEm/p0SrYE4UuE7bMn0q6VAzfmcI7o5hZHKd +GA8OKjlHNLIgwisVd9FPmCxjyNtpMCeai7h7AJpGI68xpQRM0hNHRI8mvO8Yz2C 7Y+gvUkcp5IIJTGk/HwUAlHk2ZWcsBla9BPlGfqAmk6cO6a6+o9Z0m1uVr5Env0v D7yEPZ8WKvRYp02kxwrYb/cRHJaFDss= -----END CERTIFICATE-----Generated at Sat Sep 26 18:05:42 2026 by rpki-client