$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d235a2e1-8944-36d1-9c24-03c61a7c2284.roa File: d235a2e1-8944-36d1-9c24-03c61a7c2284.roa (raw, json) Hash identifier: kYxyJevUAUlf2Y9RUUzag4r84A5pXiiGTHPbx+5P8NA= Subject key identifier: DB:24:7E:1B:7A:B2:66:DA:21:E1:16:38:B1:15:51:D4:23:FB:FD:26 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4987556A79E13270E4299420 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d235a2e1-8944-36d1-9c24-03c61a7c2284.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.19.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:55:6a:79:e1:32:70:e4:29:94:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=47801eba-cc01-4bca-90ac-66a8cc838184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:33:72:8a:0b:b2:9e:20:aa:ae:f5:9c:69:1b: 29:25:f5:e2:f7:4a:6f:ba:b0:5b:ff:4e:c6:da:d8: a9:9a:91:a8:f1:72:6c:fc:f0:6f:c8:70:49:63:3a: a2:4f:3b:e1:04:f8:4c:6f:1c:44:4f:d8:66:9d:c6: 83:6b:ac:98:2a:04:f3:32:24:ae:71:8f:6d:a4:6d: 6a:3b:79:23:63:9c:4b:f1:3c:e5:5d:23:4d:64:2d: 8f:4d:5f:50:9c:62:43:13:23:3b:b7:21:43:38:98: db:74:8b:8f:99:0d:1a:16:84:2f:54:39:9f:cb:4e: 08:5c:0f:e4:9f:04:cd:1f:cd:cf:f2:31:00:cd:40: 0a:16:c9:47:f6:8e:e6:8e:48:ed:d2:a4:0c:6b:05: e7:e2:54:c8:4d:fb:39:77:5e:8a:cd:a8:a6:1f:2d: 1a:47:50:40:fe:35:30:d7:e4:5f:b7:85:de:d7:5f: 18:5b:0e:4f:59:39:4e:ea:6c:26:1f:4f:ed:6f:90: de:41:30:83:ca:5f:ba:85:5c:47:a3:ac:84:1c:42: 35:03:53:b6:e7:c0:f1:56:d7:87:c5:fa:dd:41:a5: 52:05:4d:7f:dd:bf:04:ac:7f:9a:f0:6f:2b:1a:64: de:65:b2:ef:4f:8f:41:3b:91:3c:c9:b0:c4:71:5c: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:24:7E:1B:7A:B2:66:DA:21:E1:16:38:B1:15:51:D4:23:FB:FD:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d235a2e1-8944-36d1-9c24-03c61a7c2284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:1a:78:f2:0f:9c:04:e5:5b:fa:be:85:89:25:b7:fc:f2:dc: c4:7f:f1:e7:48:72:e0:3d:db:61:23:9c:6b:29:a5:e7:ed:f0: 5e:ee:8c:37:cd:30:7d:a6:eb:e4:f6:aa:a5:70:6c:0d:1b:1b: af:83:e2:20:11:7a:08:09:01:49:83:6c:ef:6e:11:c7:4e:ef: 40:4a:93:37:cd:c4:29:50:73:ba:78:98:6a:29:91:21:84:61: 4f:72:6f:66:7e:1e:1a:da:eb:90:bb:98:64:54:4f:cd:f4:7a: f5:86:b8:7d:5d:2e:34:02:ff:f0:6b:41:96:f5:6e:95:ef:fa: af:44:bc:b2:03:bc:a1:b7:e4:4e:6b:7d:61:cd:aa:69:8e:b7: d4:d6:7f:e2:63:28:59:73:0e:2d:61:6b:65:7b:bd:8b:31:df: 6e:22:04:28:dd:cb:e5:58:f4:12:30:06:2b:f9:6e:4c:4b:ff: 8b:76:4e:38:40:7d:08:a2:08:4b:95:14:2f:7f:b3:f6:3d:d5: 58:1b:b8:8e:6b:fe:3d:92:28:ad:9e:b1:e5:c3:72:67:63:13: 57:3f:cb:84:49:a7:1f:2d:5c:8a:5d:f7:46:d0:fc:99:32:2a: 63:1c:86:b2:9e:22:d3:3d:f4:0f:e1:9c:67:65:9e:4e:43:2c: 3b:7f:d7:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh1VqeeEycOQplCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDc4MDFlYmEtY2MwMS00YmNhLTkwYWMtNjZhOGNjODM4MTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTNyiguyniCqrvWcaRspJfXi90pvurBb/07G 2tipmpGo8XJs/PBvyHBJYzqiTzvhBPhMbxxET9hmncaDa6yYKgTzMiSucY9tpG1q O3kjY5xL8TzlXSNNZC2PTV9QnGJDEyM7tyFDOJjbdIuPmQ0aFoQvVDmfy04IXA/k nwTNH83P8jEAzUAKFslH9o7mjkjt0qQMawXn4lTITfs5d16KzaimHy0aR1BA/jUw 1+Rft4Xe118YWw5PWTlO6mwmH0/tb5DeQTCDyl+6hVxHo6yEHEI1A1O258DxVteH xfrdQaVSBU1/3b8ErH+a8G8rGmTeZbLvT49BO5E8ybDEcVzl+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNskfht6smbaIeEWOLEVUdQj+/0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDIzNWEyZTEtODk0NC0z NmQxLTljMjQtMDNjNjFhN2MyMjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArROZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsaePIPnATlW/q+hYklt/zy3MR/8edIcuA922EjnGsppeft8F7ujDfN MH2m6+T2qqVwbA0bG6+D4iAReggJAUmDbO9uEcdO70BKkzfNxClQc7p4mGopkSGE YU9yb2Z+Hhra65C7mGRUT830evWGuH1dLjQC//BrQZb1bpXv+q9EvLIDvKG35E5r fWHNqmmOt9TWf+JjKFlzDi1ha2V7vYsx324iBCjdy+VY9BIwBiv5bkxL/4t2TjhA fQiiCEuVFC9/s/Y91VgbuI5r/j2SKK2eseXDcmdjE1c/y4RJpx8tXIpd90bQ/Jky KmMchrKeItM99A/hnGdlnk5DLDt/1/4= -----END CERTIFICATE-----Generated at Sat Oct 3 11:40:42 2026 by rpki-client