$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d2538829-9160-3100-9c86-8f687f0b943e.roa File: d2538829-9160-3100-9c86-8f687f0b943e.roa (raw, json) Hash identifier: WesRRKFDDq2kPfkS84SPvl4BUKro85rBVhYKP7MoBB8= Subject key identifier: D0:13:EB:D2:5D:78:7B:C6:91:FF:93:FD:EA:B6:40:7B:D6:45:D1:1E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4972FF3FAABE9A33DAB62C40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d2538829-9160-3100-9c86-8f687f0b943e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.19.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ff:3f:aa:be:9a:33:da:b6:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8aa46d27-6f5f-4e64-ab63-74b453dc5d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:55:27:9a:09:69:b3:5b:16:fc:1d:ad:45: 9f:d9:45:1a:6b:9c:1d:5a:27:c2:fa:b2:2c:be:04: f6:f3:99:12:94:c3:59:a1:62:22:84:a3:9f:2e:da: d6:e0:ee:cf:34:19:cc:16:e2:a8:f0:ab:10:41:2c: 3a:c1:72:8e:2b:42:de:b0:2a:1c:ad:9c:e2:3e:d8: 2d:a0:cb:15:fa:5a:15:e5:c3:bc:2e:45:74:19:42: 27:92:05:7a:b2:d6:f2:78:61:f0:17:7d:b7:2c:80: d2:ef:ce:a1:ed:25:a2:21:83:6c:ae:b6:cf:a4:7d: f5:a2:f9:86:22:03:bc:cd:55:a0:dd:44:60:18:7e: 26:13:7e:53:f9:16:9a:7f:52:c6:f2:d5:03:ae:54: 46:f9:5e:d4:08:14:1d:7b:47:7c:9d:0c:70:8c:fe: 60:4d:1e:f6:12:fb:c9:72:2a:ca:1f:09:97:e5:80: 70:81:46:f7:6d:c2:31:f6:07:0f:43:bf:f8:32:c8: a4:bb:39:0d:54:09:9f:ec:a9:67:b9:f0:ae:cb:01: 79:0e:59:f1:7e:fa:09:f2:5d:33:fa:33:b0:69:a4: 93:f7:67:95:c6:ef:69:be:e9:e7:5f:ad:f7:86:9a: 6b:16:49:9d:08:57:80:30:5c:0b:8e:b7:f1:a8:e9: f2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:13:EB:D2:5D:78:7B:C6:91:FF:93:FD:EA:B6:40:7B:D6:45:D1:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d2538829-9160-3100-9c86-8f687f0b943e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:6f:9e:9f:07:7c:d8:2e:8f:c7:19:f0:22:06:6f:39:de:86: 42:44:d5:d2:0f:49:ec:4f:b8:4b:67:79:f7:2f:fe:17:d1:53: 9a:dc:e8:d2:4b:1a:ee:01:c0:ab:7e:9c:bc:8b:bf:b6:53:88: e3:b4:22:94:d0:a3:a1:24:cf:83:c9:8a:05:7d:52:42:b8:a0: 0a:6a:d6:fb:53:db:3f:85:c4:d0:ee:9d:a7:3f:e7:b2:73:97: 7e:2b:c0:84:11:52:b0:09:f9:c3:ed:f6:80:e9:0f:94:25:72: f0:3c:3e:46:c4:e2:1a:e9:34:ce:b4:a8:ec:62:e2:54:50:ee: c2:1c:4b:67:3c:b7:68:2e:86:f3:cc:7a:79:25:5d:62:10:61: 16:d2:de:59:3d:08:7c:3f:b9:60:24:c8:3e:05:f6:c5:12:19: 56:eb:e5:ee:f8:69:29:a5:71:ae:1b:4b:2c:b1:50:ac:50:e8: cc:f9:62:18:a9:0c:95:4d:bb:31:3d:98:28:bb:bf:15:8c:b8: 24:ec:90:76:ee:7f:7f:90:a2:1f:ca:9e:79:cc:01:36:d8:2f: 59:ba:21:f4:08:73:c2:62:7b:0d:a9:58:54:5c:11:bd:da:40: 0f:f0:ee:2b:2b:9b:e3:e4:6e:9d:1c:08:4d:90:34:72:f5:46: df:7b:b6:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcv8/qr6aM9q2LEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGFhNDZkMjctNmY1Zi00ZTY0LWFiNjMtNzRiNDUzZGM1ZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA9VJ5oJabNbFvwdrUWf2UUaa5wdWifC+rIs vgT285kSlMNZoWIihKOfLtrW4O7PNBnMFuKo8KsQQSw6wXKOK0LesCocrZziPtgt oMsV+loV5cO8LkV0GUInkgV6stbyeGHwF323LIDS786h7SWiIYNsrrbPpH31ovmG IgO8zVWg3URgGH4mE35T+Raaf1LG8tUDrlRG+V7UCBQde0d8nQxwjP5gTR72EvvJ cirKHwmX5YBwgUb3bcIx9gcPQ7/4MsikuzkNVAmf7KlnufCuywF5DlnxfvoJ8l0z +jOwaaST92eVxu9pvunnX633hpprFkmdCFeAMFwLjrfxqOnyUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAT69JdeHvGkf+T/eq2QHvWRdEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDI1Mzg4MjktOTE2MC0z MTAwLTljODYtOGY2ODdmMGI5NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFvnp8HfNguj8cZ8CIGbznehkJE1dIPSexPuEtnefcv/hfRU5rc6NJL Gu4BwKt+nLyLv7ZTiOO0IpTQo6Ekz4PJigV9UkK4oApq1vtT2z+FxNDunac/57Jz l34rwIQRUrAJ+cPt9oDpD5QlcvA8PkbE4hrpNM60qOxi4lRQ7sIcS2c8t2guhvPM enklXWIQYRbS3lk9CHw/uWAkyD4F9sUSGVbr5e74aSmlca4bSyyxUKxQ6Mz5Yhip DJVNuzE9mCi7vxWMuCTskHbuf3+Qoh/KnnnMATbYL1m6IfQIc8Jiew2pWFRcEb3a QA/w7isrm+Pkbp0cCE2QNHL1Rt97too= -----END CERTIFICATE-----Generated at Mon Sep 28 10:49:08 2026 by rpki-client