$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfada9d9-01a0-38ca-8d0e-3c4e2459dc26.roa File: cfada9d9-01a0-38ca-8d0e-3c4e2459dc26.roa (raw, json) Hash identifier: YoKaxXo1aXLpIuoisALJe/GQhuMli7z2tTePw/bKQe4= Subject key identifier: 36:C6:E9:FC:C1:B2:1E:D0:94:68:CE:28:4C:B3:ED:67:BB:E3:9A:7D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4973112EB6210DD2EB3CAE40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfada9d9-01a0-38ca-8d0e-3c4e2459dc26.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.25.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:11:2e:b6:21:0d:d2:eb:3c:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fcc6aaec-e8dd-42b6-81f1-886fc33d9adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:78:46:a1:16:fa:09:17:29:90:d1:67:8c:9f: d1:90:fe:9d:f5:e8:e4:95:7e:88:be:b9:5e:72:06: b7:86:89:6a:a4:75:e3:13:68:09:9e:54:d7:a6:98: 8b:12:f6:e6:67:71:8b:85:cf:16:0d:6b:af:a3:99: 0f:86:e8:88:90:ff:cb:e9:a8:da:d4:5f:b2:9f:13: 33:ae:dc:02:ec:68:1f:e7:a8:79:48:08:a2:bc:14: 25:6d:bd:97:5b:65:61:9d:68:9e:6c:03:ca:d8:7c: 8c:a8:1a:d1:f2:c6:81:d8:4c:30:fb:90:31:82:1b: 86:41:46:b4:d3:8b:e3:75:90:82:a3:ef:fc:76:24: 48:7e:03:1a:9c:50:f5:07:9f:ef:b1:0e:52:06:5b: c5:48:bb:c9:62:0f:d6:09:66:86:92:3b:c2:d9:b2: d4:dd:f5:7c:80:50:3d:3a:c8:ac:9e:a3:53:01:6a: db:ba:b5:fa:85:9e:82:b4:5e:2d:95:4d:5e:09:e3: f8:5d:f1:a5:0b:5e:4d:47:ef:7f:2c:78:ac:ff:bb: 52:d1:d4:d9:73:96:05:9c:ca:71:6f:ff:b3:13:0e: 4b:bf:fa:6d:8b:4c:64:67:60:55:f2:81:49:4f:d0: 84:6c:8f:a8:e2:51:ac:88:3c:01:ad:25:c2:da:33: f3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C6:E9:FC:C1:B2:1E:D0:94:68:CE:28:4C:B3:ED:67:BB:E3:9A:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfada9d9-01a0-38ca-8d0e-3c4e2459dc26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:2f:e9:ef:8e:10:cd:92:81:57:f6:3a:8c:0d:58:6f:99:21: 64:52:e2:6c:67:fa:57:61:10:df:a3:db:d9:dc:d1:09:11:06: 39:a7:32:42:a2:d4:ef:b7:cf:05:1a:fd:d9:bb:81:e1:29:e1: 45:74:77:32:ea:f6:2e:a9:9d:35:21:ec:cd:90:ea:bb:11:57: 88:54:d4:c8:e5:78:45:a3:f3:38:74:5e:ce:e2:93:34:23:a9: 53:62:8a:e0:03:2d:b9:4c:90:fa:d1:0a:59:69:80:a7:07:bd: b4:cb:16:13:99:37:49:4c:06:2e:5b:ae:11:a4:02:93:98:04: 44:ff:78:75:10:be:b8:e6:0f:a3:c5:b5:48:d4:dc:54:b9:b5: 7a:15:24:d8:6f:52:96:04:89:bc:5c:e6:2b:bd:be:d3:31:3b: 51:fc:d3:c3:2e:1f:53:31:26:1c:5d:d1:73:c4:bc:e9:9a:c0: bd:ff:8b:5a:a6:36:fe:78:80:b3:f8:da:e3:e1:c6:c1:3f:3f: 90:d1:a1:6e:fb:f0:1b:4a:29:23:fb:bc:50:bc:4d:c8:b6:4f: cb:40:dc:ce:03:31:92:d9:22:2c:2b:c2:80:e2:3c:1c:7a:10: 8b:80:93:08:f4:51:b5:c0:69:1f:88:9f:55:ab:b3:9f:b0:f5: 66:f6:31:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcxEutiEN0us8rkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmNjNmFhZWMtZThkZC00MmI2LTgxZjEtODg2ZmMzM2Q5YWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXhGoRb6CRcpkNFnjJ/RkP6d9ejklX6Ivrle cga3holqpHXjE2gJnlTXppiLEvbmZ3GLhc8WDWuvo5kPhuiIkP/L6aja1F+ynxMz rtwC7Ggf56h5SAiivBQlbb2XW2VhnWiebAPK2HyMqBrR8saB2Eww+5AxghuGQUa0 04vjdZCCo+/8diRIfgManFD1B5/vsQ5SBlvFSLvJYg/WCWaGkjvC2bLU3fV8gFA9 OsisnqNTAWrburX6hZ6CtF4tlU1eCeP4XfGlC15NR+9/LHis/7tS0dTZc5YFnMpx b/+zEw5Lv/pti0xkZ2BV8oFJT9CEbI+o4lGsiDwBrSXC2jPzjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbG6fzBsh7QlGjOKEyz7We745p9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ZhZGE5ZDktMDFhMC0z OGNhLThkMGUtM2M0ZTI0NTlkYzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsv6e+OEM2SgVf2OowNWG+ZIWRS4mxn+ldhEN+j29nc0QkRBjmnMkKi 1O+3zwUa/dm7geEp4UV0dzLq9i6pnTUh7M2Q6rsRV4hU1MjleEWj8zh0Xs7ikzQj qVNiiuADLblMkPrRCllpgKcHvbTLFhOZN0lMBi5brhGkApOYBET/eHUQvrjmD6PF tUjU3FS5tXoVJNhvUpYEibxc5iu9vtMxO1H808MuH1MxJhxd0XPEvOmawL3/i1qm Nv54gLP42uPhxsE/P5DRoW778BtKKSP7vFC8Tci2T8tA3M4DMZLZIiwrwoDiPBx6 EIuAkwj0UbXAaR+In1Wrs5+w9Wb2MSo= -----END CERTIFICATE-----Generated at Fri Sep 25 22:06:21 2026 by rpki-client