$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d086aa31-9bf9-3b79-9c55-1c34bf268d34.roa File: d086aa31-9bf9-3b79-9c55-1c34bf268d34.roa (raw, json) Hash identifier: OlUk6EapJnDIdDqBfEhHfZwVvi8M/TnOA2G6I6t6R78= Subject key identifier: E8:43:14:35:32:38:51:1C:05:5D:1B:B4:CD:E1:9D:01:12:CC:97:59 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497453208A38E18B71DFD200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d086aa31-9bf9-3b79-9c55-1c34bf268d34.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.29.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:53:20:8a:38:e1:8b:71:df:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c513a75f-e147-423a-a4b7-dd81abd04cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4a:5e:de:dc:53:8a:21:ea:5c:c1:26:00:17: a0:30:17:1b:5b:b0:f7:f2:39:33:e1:fd:c9:bf:ba: e4:30:09:28:7d:89:fa:63:43:fb:dd:03:8a:54:36: 84:43:2f:33:e0:56:b5:bd:01:9e:d1:1c:9a:bb:54: a9:60:9e:bf:8f:87:58:b8:5b:c9:8d:e6:85:37:2a: 05:7c:73:42:6a:f0:7e:05:e4:70:bf:73:22:25:27: aa:88:8f:f9:c4:57:e5:87:91:4c:df:bb:03:db:20: 5a:f8:9d:ab:75:58:b7:a6:96:0f:85:4b:2c:29:fb: a2:73:af:86:d0:4f:fa:c6:a3:43:2a:83:c0:d7:db: 79:c6:43:6b:7b:ad:3f:74:49:77:b6:ad:19:c5:3c: c5:0b:17:65:4e:de:0d:b1:0e:43:41:94:d5:b9:36: 99:90:f8:0e:a9:53:4f:a2:27:b0:92:da:45:a3:77: 98:52:88:57:dd:b6:b9:17:44:48:c7:ab:45:ba:32: 77:49:72:14:64:95:6a:d7:bf:b2:4d:a7:8b:b1:8e: f9:19:74:83:d6:f2:3b:65:3a:90:2f:0c:12:62:c0: 56:ee:58:fb:8a:b6:da:ef:d8:c9:8d:8c:ff:8c:db: cc:3c:d5:1b:d7:96:b0:8a:84:61:0f:a1:f2:2a:60: 24:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:43:14:35:32:38:51:1C:05:5D:1B:B4:CD:E1:9D:01:12:CC:97:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d086aa31-9bf9-3b79-9c55-1c34bf268d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d3:78:c9:78:d4:3c:ef:b0:28:0f:f6:23:0a:14:a9:e5:d5: fc:f4:76:92:90:99:d7:2d:c9:cb:2b:f6:9d:b6:80:1b:3a:43: 31:14:64:b2:2f:19:94:30:ac:63:15:18:c1:1d:3a:8d:87:62: 56:9b:99:ef:aa:9d:a2:be:d6:d4:97:df:33:2c:66:27:29:75: 66:c6:42:72:58:67:a6:0a:41:f8:78:1f:a3:3a:b0:f4:72:20: 5f:b9:1e:e5:e9:27:18:7e:7f:58:70:41:b9:8e:ef:ae:e8:29: d4:21:f9:24:eb:53:98:86:ef:64:64:cd:17:16:80:85:de:f4: 23:ed:a4:f9:f9:4b:82:bb:b4:9f:73:0f:38:97:7f:fb:b8:fd: eb:a5:86:1f:25:12:fe:9b:f4:ea:48:e0:16:24:cb:75:d2:0e: 69:21:3c:26:10:b6:87:19:cf:0b:eb:73:bd:d8:1f:a9:4f:3f: 42:a5:a7:d5:1c:93:e5:92:c7:c5:81:ac:dd:88:3f:22:5e:67: 69:42:9f:fe:38:44:73:a3:4b:c4:b0:ef:23:20:28:df:84:48: 01:d1:90:7b:a1:7e:87:2d:92:d0:6d:24:c2:91:6c:7e:e0:e1: b8:e4:e7:a9:d9:94:b1:64:a9:dd:f0:af:33:eb:c6:91:a9:50: b2:c2:7f:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdFMgijjhi3Hf0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzUxM2E3NWYtZTE0Ny00MjNhLWE0YjctZGQ4MWFiZDA0Y2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkpe3txTiiHqXMEmABegMBcbW7D38jkz4f3J v7rkMAkofYn6Y0P73QOKVDaEQy8z4Fa1vQGe0Ryau1SpYJ6/j4dYuFvJjeaFNyoF fHNCavB+BeRwv3MiJSeqiI/5xFflh5FM37sD2yBa+J2rdVi3ppYPhUssKfuic6+G 0E/6xqNDKoPA19t5xkNre60/dEl3tq0ZxTzFCxdlTt4NsQ5DQZTVuTaZkPgOqVNP oiewktpFo3eYUohX3ba5F0RIx6tFujJ3SXIUZJVq17+yTaeLsY75GXSD1vI7ZTqQ LwwSYsBW7lj7irba79jJjYz/jNvMPNUb15awioRhD6HyKmAkuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhDFDUyOFEcBV0btM3hnQESzJdZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDA4NmFhMzEtOWJmOS0z Yjc5LTljNTUtMWMzNGJmMjY4ZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTTeMl41DzvsCgP9iMKFKnl1fz0dpKQmdctycsr9p22gBs6QzEUZLIv GZQwrGMVGMEdOo2HYlabme+qnaK+1tSX3zMsZicpdWbGQnJYZ6YKQfh4H6M6sPRy IF+5HuXpJxh+f1hwQbmO767oKdQh+STrU5iG72RkzRcWgIXe9CPtpPn5S4K7tJ9z DziXf/u4/eulhh8lEv6b9OpI4BYky3XSDmkhPCYQtocZzwvrc73YH6lPP0Klp9Uc k+WSx8WBrN2IPyJeZ2lCn/44RHOjS8Sw7yMgKN+ESAHRkHuhfoctktBtJMKRbH7g 4bjk56nZlLFkqd3wrzPrxpGpULLCf2w= -----END CERTIFICATE-----Generated at Sat Sep 26 16:01:32 2026 by rpki-client