$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3bce852-ffd7-333c-bf58-d4a7ff94a5de.roa File: e3bce852-ffd7-333c-bf58-d4a7ff94a5de.roa (raw, json) Hash identifier: jBeBO0WNTS62dc3+NPLMLNeqd5NXdd53dZXclpNwsa8= Subject key identifier: DC:00:78:69:70:5F:63:E7:3D:9E:E4:63:3C:2E:E1:2F:5B:35:9B:96 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49735BE5AA784680E8DE8040 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3bce852-ffd7-333c-bf58-d4a7ff94a5de.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.19.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:5b:e5:aa:78:46:80:e8:de:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7a9ef81e-d779-4f86-8f59-0fe89a6850c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:66:04:22:dc:36:78:4d:ab:bc:0f:37:59:e5: a0:39:5c:e3:74:4c:74:09:2d:f7:65:03:ce:0e:96: b4:4a:48:22:6f:59:c1:2d:19:4c:ea:21:99:54:b8: 9d:35:a0:81:54:30:ab:21:0c:d7:06:fc:01:bc:45: 19:79:19:f8:ad:0b:f5:2f:42:4f:b8:51:10:6e:8f: 4a:d0:c9:cf:58:ae:00:08:2f:8c:c6:42:93:c3:74: 1d:41:76:95:fe:39:17:7b:45:0d:22:7b:1b:04:82: 34:f2:75:d9:29:ea:1f:27:bc:b6:ca:7e:74:8e:86: ae:e7:d6:4c:d9:01:8e:c9:1c:42:36:85:5f:79:b2: da:36:6e:0c:08:9a:17:f1:bc:94:1c:c3:b9:1a:fa: 4c:80:85:01:69:17:3e:90:88:d8:86:ca:e1:37:94: 24:88:62:d9:91:c3:b0:ca:44:15:39:66:13:81:9e: 48:71:15:f5:32:37:b7:82:2a:09:e1:75:b9:be:71: 30:2f:cc:26:f8:57:85:d9:bb:0c:c5:d3:d4:40:ba: 40:03:9a:2b:a3:ea:b5:a4:d3:52:2f:5b:c9:61:60: 1c:a3:a4:ca:9a:50:a9:ca:ff:14:6f:49:fe:1c:ad: 62:00:5d:3e:e1:69:a7:e8:9e:99:17:2f:b7:c1:de: 60:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:00:78:69:70:5F:63:E7:3D:9E:E4:63:3C:2E:E1:2F:5B:35:9B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e3bce852-ffd7-333c-bf58-d4a7ff94a5de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4f:ef:4d:66:2f:eb:ed:29:1c:ab:79:46:8c:f0:9d:2b:d3: a7:79:62:5c:1a:93:11:72:03:f3:c8:a5:fb:94:6d:f8:29:ad: 8a:f5:df:1e:2d:b5:cd:21:8e:dc:56:ac:66:33:42:88:7a:0b: 63:07:3b:40:73:82:d9:64:f8:14:85:58:5c:c1:08:25:3e:84: 54:fc:e6:e3:cd:d2:a2:88:b9:14:7b:26:7a:b7:cd:4c:33:8d: 94:e7:15:5b:94:53:f6:b5:b2:45:e7:89:12:e5:6a:88:82:93: c9:29:23:5b:22:a6:c3:5f:3e:ba:4c:b8:af:f0:72:1d:26:ae: fb:6e:d3:cb:4a:92:b3:bf:e6:1d:4e:38:2c:95:88:cb:79:15: f8:bf:d5:83:84:4a:f9:f9:ed:95:04:e7:d3:f3:09:9f:67:0e: de:4e:cf:ba:82:7d:b4:ad:91:5e:1a:9a:de:26:30:70:68:c2: 4d:78:33:de:74:dc:0e:25:71:97:14:7d:77:74:b8:f5:a4:27: a5:f3:b8:14:45:b0:d0:8e:b3:30:10:af:1a:8d:0e:e5:32:61: ae:d6:ab:7b:af:7a:f8:a6:f9:40:6a:e3:24:d9:04:b4:03:52: 79:b2:d7:66:78:51:8d:09:5d:52:c7:2b:a5:11:41:78:1d:d4: bf:f2:7f:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc1vlqnhGgOjegEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2E5ZWY4MWUtZDc3OS00Zjg2LThmNTktMGZlODlhNjg1MGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWYEItw2eE2rvA83WeWgOVzjdEx0CS33ZQPO Dpa0Skgib1nBLRlM6iGZVLidNaCBVDCrIQzXBvwBvEUZeRn4rQv1L0JPuFEQbo9K 0MnPWK4ACC+MxkKTw3QdQXaV/jkXe0UNInsbBII08nXZKeofJ7y2yn50joau59ZM 2QGOyRxCNoVfebLaNm4MCJoX8byUHMO5GvpMgIUBaRc+kIjYhsrhN5QkiGLZkcOw ykQVOWYTgZ5IcRX1Mje3gioJ4XW5vnEwL8wm+FeF2bsMxdPUQLpAA5oro+q1pNNS L1vJYWAco6TKmlCpyv8Ub0n+HK1iAF0+4Wmn6J6ZFy+3wd5g1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwAeGlwX2PnPZ7kYzwu4S9bNZuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTNiY2U4NTItZmZkNy0z MzNjLWJmNTgtZDRhN2ZmOTRhNWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArROYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBP701mL+vtKRyreUaM8J0r06d5YlwakxFyA/PIpfuUbfgprYr13x4t tc0hjtxWrGYzQoh6C2MHO0Bzgtlk+BSFWFzBCCU+hFT85uPN0qKIuRR7Jnq3zUwz jZTnFVuUU/a1skXniRLlaoiCk8kpI1sipsNfPrpMuK/wch0mrvtu08tKkrO/5h1O OCyViMt5Ffi/1YOESvn57ZUE59PzCZ9nDt5Oz7qCfbStkV4amt4mMHBowk14M950 3A4lcZcUfXd0uPWkJ6XzuBRFsNCOszAQrxqNDuUyYa7Wq3uvevim+UBq4yTZBLQD Unmy12Z4UY0JXVLHK6URQXgd1L/yf8A= -----END CERTIFICATE-----Generated at Sat Sep 26 03:58:49 2026 by rpki-client