$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbe6526d-78fc-3cb8-90f2-78620a928aaf.roa File: dbe6526d-78fc-3cb8-90f2-78620a928aaf.roa (raw, json) Hash identifier: xueMQMllmsKZVdEGFxFgbYdCWw70NaFRUs/4Uqxrl34= Subject key identifier: F8:1A:83:78:A0:BF:51:40:FD:DE:F7:BD:60:CB:98:D1:84:B6:A6:43 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F2957AD4CF781FA8C39A8F940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbe6526d-78fc-3cb8-90f2-78620a928aaf.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 19905 IP address blocks: 173.29.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:ad:4c:f7:81:fa:8c:39:a8:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=7899afc3-2c69-49ad-ad3b-74aee19926dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bd:9f:27:1e:41:f4:c0:a1:99:13:24:8f:23: 43:3f:67:6f:12:5a:23:96:26:b8:8e:26:76:58:fe: 3f:11:24:93:19:4e:88:ae:ee:f3:df:ce:ce:2e:85: 45:f6:c3:81:32:05:0d:5e:01:ae:0e:55:62:26:37: cc:42:92:ec:77:de:e7:1c:30:a1:30:28:ed:0c:1c: aa:45:46:c3:e0:57:8d:14:4a:1f:d9:78:40:a4:d9: b9:f3:d2:dc:a5:85:41:df:1a:3e:d3:16:c1:03:c2: 6e:dc:76:20:04:42:c1:e3:1f:ec:d4:e5:06:ea:a5: 7d:ae:81:b7:9e:ad:3b:eb:37:88:38:00:51:71:4a: 8b:cd:c6:90:ab:86:26:71:30:76:dc:9b:86:b9:16: 62:2c:7b:b8:df:13:f2:6f:d1:97:82:58:f5:dd:6d: 79:66:51:b6:10:7e:6b:41:ea:d5:29:26:3c:a2:45: 0b:d8:99:ac:5e:3e:86:6c:e4:c5:e2:f7:75:6e:6e: 5d:db:be:31:6c:2b:f9:fd:a4:51:c6:9d:f6:77:53: 96:14:5b:f8:45:80:3a:59:4e:d3:e9:2c:04:ba:db: fc:c5:b4:a2:88:67:39:bf:50:0f:b8:d7:72:fd:5d: 35:ef:13:a9:41:ef:99:09:70:f7:34:76:15:7c:49: 3e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1A:83:78:A0:BF:51:40:FD:DE:F7:BD:60:CB:98:D1:84:B6:A6:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dbe6526d-78fc-3cb8-90f2-78620a928aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:da:89:06:77:21:7f:8c:f9:b9:d7:56:87:fb:6f:8a:59:d1: df:21:60:0d:94:00:ce:39:8e:a5:74:f8:96:75:70:a6:cd:a7: c5:59:2b:c1:a8:f1:f2:de:85:1b:fc:8d:fa:ce:a0:a1:94:0c: 31:85:55:2f:2f:2b:bd:56:ff:67:30:92:91:e4:7f:7a:86:7f: cd:38:f9:0e:cf:6b:1b:ed:f3:96:1a:fa:7a:6f:e6:59:d4:f4: 18:31:26:56:e0:91:cc:97:65:55:fe:77:7e:87:b8:a5:f3:ee: fa:e3:65:88:2c:30:61:16:07:61:23:f0:58:39:b6:50:cb:39: b8:1a:33:fb:e1:e5:a3:89:d5:cb:2c:84:61:f9:ee:02:23:0d: bc:42:be:53:97:0c:71:11:32:12:4d:36:d5:4e:24:b5:ad:75: e7:0c:25:31:1e:d2:c8:b6:37:ef:c9:f7:d6:0a:be:66:38:0d: e7:3e:4c:95:26:ea:4b:cd:28:ee:d5:68:32:41:e9:50:95:42: ab:2a:d6:4c:95:a7:f6:06:ce:4c:48:35:0a:5c:1e:47:4e:46: 90:92:39:bc:38:22:05:c0:b9:b9:a3:d5:7f:88:9b:1a:8e:41: fb:18:5f:64:98:eb:60:49:29:5b:e3:b2:eb:e8:b4:d4:3d:de: 1a:3d:dd:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV61M94H6jDmo+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk Nzg5OWFmYzMtMmM2OS00OWFkLWFkM2ItNzRhZWUxOTkyNmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb2fJx5B9MChmRMkjyNDP2dvElojlia4jiZ2 WP4/ESSTGU6Iru7z387OLoVF9sOBMgUNXgGuDlViJjfMQpLsd97nHDChMCjtDByq RUbD4FeNFEof2XhApNm589LcpYVB3xo+0xbBA8Ju3HYgBELB4x/s1OUG6qV9roG3 nq076zeIOABRcUqLzcaQq4YmcTB23JuGuRZiLHu43xPyb9GXglj13W15ZlG2EH5r QerVKSY8okUL2JmsXj6GbOTF4vd1bm5d274xbCv5/aRRxp32d1OWFFv4RYA6WU7T 6SwEutv8xbSiiGc5v1APuNdy/V017xOpQe+ZCXD3NHYVfEk+BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgag3igv1FA/d73vWDLmNGEtqZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGJlNjUyNmQtNzhmYy0z Y2I4LTkwZjItNzg2MjBhOTI4YWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzaiQZ3IX+M+bnXVof7b4pZ0d8hYA2UAM45jqV0+JZ1cKbNp8VZK8Go 8fLehRv8jfrOoKGUDDGFVS8vK71W/2cwkpHkf3qGf804+Q7Paxvt85Ya+npv5lnU 9BgxJlbgkcyXZVX+d36HuKXz7vrjZYgsMGEWB2Ej8Fg5tlDLObgaM/vh5aOJ1css hGH57gIjDbxCvlOXDHERMhJNNtVOJLWtdecMJTEe0si2N+/J99YKvmY4Dec+TJUm 6kvNKO7VaDJB6VCVQqsq1kyVp/YGzkxINQpcHkdORpCSObw4IgXAubmj1X+ImxqO QfsYX2SY62BJKVvjsuvotNQ93ho93b8= -----END CERTIFICATE-----Generated at Thu Sep 24 23:58:22 2026 by rpki-client