$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8b71705-3c5f-32db-9cbc-77633933110e.roa File: d8b71705-3c5f-32db-9cbc-77633933110e.roa (raw, json) Hash identifier: cqr36sd0uGNjChwdLSouA6oOxQD6FzindGxLs4brf9A= Subject key identifier: A9:13:E7:93:68:95:F8:9F:AB:01:8A:C2:9F:BC:52:E0:3C:28:2E:7F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497337DA8C08C35A487EFEC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8b71705-3c5f-32db-9cbc-77633933110e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.25.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:37:da:8c:08:c3:5a:48:7e:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6a7becc1-90fb-4559-9c8e-d7fb0e997b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:75:38:2d:4b:14:ed:64:0d:57:49:2f:86: 91:46:d4:b7:c3:cf:ed:13:93:09:0c:49:79:c5:10: 5a:e1:b9:87:88:3f:a2:73:8c:95:d6:c9:65:0c:b5: 7d:70:55:85:de:e5:5f:ce:ad:89:ea:6b:09:7a:26: 7e:22:fa:ab:bb:5c:87:a3:ff:2d:cb:8d:7f:0f:50: c2:42:34:22:83:f3:a4:cd:cd:0b:88:ef:bf:e6:27: 86:60:8a:ed:75:8d:0e:e5:2a:51:0b:15:d1:1c:21: 60:15:96:df:37:04:27:90:24:7a:3f:be:5e:93:90: 57:94:a7:29:f8:6d:35:e7:83:aa:0c:29:f4:ed:ea: 90:0e:f3:ce:b7:85:7d:ef:8f:71:10:15:35:e6:91: ac:0b:52:9f:24:bc:6c:ff:65:24:a3:df:80:97:c2: c3:41:84:9a:8a:36:64:20:49:39:45:7f:64:ef:c8: d7:49:12:71:77:d7:c2:aa:87:20:82:d2:49:42:fb: cd:c4:9f:38:d4:d2:92:5d:4d:ef:c1:79:37:c9:a5: ad:77:3f:3f:05:66:bd:a2:92:ee:d5:fe:df:25:93: 7e:d7:33:5c:52:c6:cd:9c:62:07:8f:d2:d7:35:95: 1b:9c:53:5c:94:38:37:70:46:bd:c8:fd:5e:e6:1b: 95:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:13:E7:93:68:95:F8:9F:AB:01:8A:C2:9F:BC:52:E0:3C:28:2E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8b71705-3c5f-32db-9cbc-77633933110e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:54:1c:01:ab:79:5e:60:dd:39:ef:d0:b4:1e:32:5f:0e:af: 29:a0:e7:aa:77:d8:45:58:3c:94:98:9d:df:1f:03:a7:8a:5f: 28:ba:18:fc:ba:2f:3b:47:db:10:8b:87:93:1c:0f:d2:a6:95: 55:9d:e7:bd:6c:99:2d:a1:ad:7a:9f:92:20:05:ea:16:59:26: 52:f1:a8:b2:2a:f7:92:88:ba:26:7d:bb:ff:6b:34:e4:97:b5: b8:5e:72:21:28:5c:e9:41:96:f0:cb:1e:c5:93:6e:45:1f:1d: 55:8e:ba:10:17:0d:16:a7:e4:75:cf:f4:ff:93:6e:8d:d6:9e: ac:cf:c5:5d:77:b4:de:37:2c:01:9a:b7:59:76:57:ed:06:63: 9b:60:19:c1:93:c7:a3:de:96:a4:82:bf:eb:da:fd:7c:ac:f3: ca:74:68:1f:f6:f8:dd:28:4f:5a:e3:e0:2c:f0:69:6b:97:a0: b3:97:35:e1:95:51:0a:49:19:02:ea:6b:b6:f9:97:c5:48:81: fb:e0:e5:6c:d4:43:dc:f7:de:bf:58:47:a1:68:b4:d2:43:09: d3:e1:88:32:24:67:2a:42:85:ce:cb:01:6f:aa:e5:72:20:aa: 1f:f1:22:ff:b5:8e:9f:1c:fd:66:b7:1e:b5:a0:81:36:b1:1e: b6:c2:a8:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczfajAjDWkh+/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmE3YmVjYzEtOTBmYi00NTU5LTljOGUtZDdmYjBlOTk3YjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBZ1OC1LFO1kDVdJL4aRRtS3w8/tE5MJDEl5 xRBa4bmHiD+ic4yV1sllDLV9cFWF3uVfzq2J6msJeiZ+Ivqru1yHo/8ty41/D1DC QjQig/Okzc0LiO+/5ieGYIrtdY0O5SpRCxXRHCFgFZbfNwQnkCR6P75ek5BXlKcp +G0154OqDCn07eqQDvPOt4V9749xEBU15pGsC1KfJLxs/2Uko9+Al8LDQYSaijZk IEk5RX9k78jXSRJxd9fCqocggtJJQvvNxJ841NKSXU3vwXk3yaWtdz8/BWa9opLu 1f7fJZN+1zNcUsbNnGIHj9LXNZUbnFNclDg3cEa9yP1e5huV5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkT55NolfifqwGKwp+8UuA8KC5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDhiNzE3MDUtM2M1Zi0z MmRiLTljYmMtNzc2MzM5MzMxMTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxUHAGreV5g3Tnv0LQeMl8Orymg56p32EVYPJSYnd8fA6eKXyi6GPy6 LztH2xCLh5McD9KmlVWd571smS2hrXqfkiAF6hZZJlLxqLIq95KIuiZ9u/9rNOSX tbheciEoXOlBlvDLHsWTbkUfHVWOuhAXDRan5HXP9P+Tbo3WnqzPxV13tN43LAGa t1l2V+0GY5tgGcGTx6PelqSCv+va/Xys88p0aB/2+N0oT1rj4CzwaWuXoLOXNeGV UQpJGQLqa7b5l8VIgfvg5WzUQ9z33r9YR6FotNJDCdPhiDIkZypChc7LAW+q5XIg qh/xIv+1jp8c/Wa3HrWggTaxHrbCqLI= -----END CERTIFICATE-----Generated at Sat Oct 3 12:53:22 2026 by rpki-client