$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0c3882c-273a-3105-9a46-e5acd4beda29.roa File: d0c3882c-273a-3105-9a46-e5acd4beda29.roa (raw, json) Hash identifier: bX5iJilK1S2cZvUC/yrp//53lT+RwTkd3KImOVAiNIA= Subject key identifier: 74:DC:1E:C7:89:0A:D5:B5:80:94:AE:CD:4D:B3:54:F6:F2:7C:26:B8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49747DE55ABD5CB941110080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0c3882c-273a-3105-9a46-e5acd4beda29.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.28.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:7d:e5:5a:bd:5c:b9:41:11:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f18109df-3399-4057-87e4-f88e630648c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:77:05:ff:2d:94:cc:4d:46:ca:f5:8b:c6: 91:32:74:58:c7:33:82:87:63:e5:8f:65:11:d6:91: 0c:2f:db:2c:d4:d5:5b:fc:8b:f3:c3:ea:22:27:90: 7e:27:ed:66:c2:46:00:66:23:08:68:ab:d8:0b:95: 92:de:44:19:50:e3:1d:db:66:4d:42:14:91:2e:e9: a9:46:87:85:a5:85:b4:1b:f1:29:2a:c5:71:c6:c6: c7:ae:68:b0:9e:2d:d2:ef:25:a2:0b:76:34:2e:39: b2:dc:31:79:43:ef:1f:7e:46:28:0e:7b:05:7c:c4: a8:ec:b7:7a:92:8e:57:9f:57:fb:21:7c:6c:f3:cd: e4:7e:c0:2c:0f:f2:48:d9:24:1e:f9:f9:66:fb:24: ce:e0:41:55:62:79:02:1f:31:9e:9f:c4:12:52:06: e9:7e:37:d3:65:ef:c9:39:f2:e6:1b:b6:0a:41:ed: 09:3f:2e:b9:d3:32:af:a9:ee:b4:2e:b4:bb:4c:bc: 84:bf:48:ce:2d:6b:cf:a1:ab:62:92:1f:4e:d9:24: e5:6b:8f:f1:98:65:62:42:04:9d:21:0f:40:df:52: 48:81:55:ff:da:99:a1:5c:2b:fc:c2:cd:71:96:cc: a9:3a:10:58:f4:57:1a:c6:fb:f9:56:78:58:7d:cc: 08:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DC:1E:C7:89:0A:D5:B5:80:94:AE:CD:4D:B3:54:F6:F2:7C:26:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0c3882c-273a-3105-9a46-e5acd4beda29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:29:1f:e5:59:51:3b:8f:2c:ba:04:9b:63:3a:38:74:71:d0: 23:67:a4:95:44:06:33:f7:23:f1:80:7c:79:f8:86:45:0d:cd: b4:2b:c9:94:1a:36:9b:11:3a:3b:9a:b1:2b:ba:93:26:8d:60: 51:99:4a:1f:63:1c:bf:56:eb:51:55:6d:19:59:7a:ac:67:e3: 19:b9:bf:53:8b:55:07:86:c9:4e:9d:71:e8:06:b3:58:92:01: 31:85:c1:7b:b9:b0:df:32:84:6d:36:20:e9:08:b0:fc:a3:55: 6a:d6:ab:10:47:13:cf:80:13:49:7b:f1:6f:82:84:f4:fe:64: 94:5e:a7:18:1a:c4:a5:f9:53:15:cd:7a:6d:42:19:7c:8b:5f: 2f:aa:97:21:e7:fb:b6:3b:04:0f:fb:df:2d:2c:27:f9:be:bd: 53:6b:15:04:45:d6:e4:87:36:c4:e1:a9:e1:99:de:f1:da:4c: 83:53:b0:aa:fc:e6:e7:36:1c:55:79:3d:e8:21:1a:04:5c:09: 1b:b3:08:53:b6:3b:69:df:bd:5c:82:63:9e:49:ec:9a:d0:82: 51:33:63:7c:5c:3d:00:90:fe:93:8d:13:0e:ff:06:d7:9e:24: 72:aa:34:2c:62:60:32:b7:70:d8:99:4b:0b:51:38:14:74:95: 52:f3:2d:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdH3lWr1cuUERAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjE4MTA5ZGYtMzM5OS00MDU3LTg3ZTQtZjg4ZTYzMDY0OGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Z3Bf8tlMxNRsr1i8aRMnRYxzOCh2Plj2UR 1pEML9ss1NVb/Ivzw+oiJ5B+J+1mwkYAZiMIaKvYC5WS3kQZUOMd22ZNQhSRLump RoeFpYW0G/EpKsVxxsbHrmiwni3S7yWiC3Y0Ljmy3DF5Q+8ffkYoDnsFfMSo7Ld6 ko5Xn1f7IXxs883kfsAsD/JI2SQe+flm+yTO4EFVYnkCHzGen8QSUgbpfjfTZe/J OfLmG7YKQe0JPy650zKvqe60LrS7TLyEv0jOLWvPoatikh9O2STla4/xmGViQgSd IQ9A31JIgVX/2pmhXCv8ws1xlsypOhBY9Fcaxvv5VnhYfcwIXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTcHseJCtW1gJSuzU2zVPbyfCa4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBjMzg4MmMtMjczYS0z MTA1LTlhNDYtZTVhY2Q0YmVkYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFspH+VZUTuPLLoEm2M6OHRx0CNnpJVEBjP3I/GAfHn4hkUNzbQryZQa NpsROjuasSu6kyaNYFGZSh9jHL9W61FVbRlZeqxn4xm5v1OLVQeGyU6dcegGs1iS ATGFwXu5sN8yhG02IOkIsPyjVWrWqxBHE8+AE0l78W+ChPT+ZJRepxgaxKX5UxXN em1CGXyLXy+qlyHn+7Y7BA/73y0sJ/m+vVNrFQRF1uSHNsThqeGZ3vHaTINTsKr8 5uc2HFV5PeghGgRcCRuzCFO2O2nfvVyCY55J7JrQglEzY3xcPQCQ/pONEw7/Btee JHKqNCxiYDK3cNiZSwtROBR0lVLzLS8= -----END CERTIFICATE-----Generated at Fri Sep 25 22:18:30 2026 by rpki-client