$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea3b8a9a-0855-394d-a31a-8c5f7e57d900.roa File: ea3b8a9a-0855-394d-a31a-8c5f7e57d900.roa (raw, json) Hash identifier: LcBGJh/k4IKde0IJhKtEKI9ZDQclCaCbYgMCgsKJmZ4= Subject key identifier: D6:28:B6:D4:F7:FF:89:A0:AA:B4:6A:06:6B:30:92:EA:25:89:54:CD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E683F5EF26FC608E74507C100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea3b8a9a-0855-394d-a31a-8c5f7e57d900.roa Signing time: Mon 06 Jul 2026 09:00:12 +0000 ROA not before: Mon 06 Jul 2026 09:00:12 +0000 ROA not after: Sun 04 Oct 2026 09:00:12 +0000 asID: 30036 IP address blocks: 173.28.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:68:3f:5e:f2:6f:c6:08:e7:45:07:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 6 09:00:12 2026 GMT Not After : Oct 4 09:00:12 2026 GMT Subject: CN=d1fe8afe-8fd8-4b0b-8dfb-e987b1bef71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4a:d6:66:91:99:3e:7d:a3:ce:8b:5d:25:cd: 9e:58:7d:87:86:49:6a:c1:48:34:c1:69:4d:14:04: 27:b9:20:26:f8:35:e2:66:29:4e:7b:44:4c:e6:c8: b4:9c:a4:55:b1:83:ba:d9:53:69:14:35:a5:69:3f: fa:f8:ce:b9:17:fa:9c:52:10:d0:2b:0d:ee:8d:3a: 79:8d:46:a5:f6:bc:16:04:40:93:01:be:b2:41:da: 8a:e4:42:26:05:e9:27:63:22:bd:35:ae:42:5c:0a: 15:c6:c9:2d:6e:7e:70:4f:88:8e:60:c7:b8:e9:57: 73:ae:75:26:e7:83:b7:87:d5:c3:e2:f3:a0:07:63: cc:90:d5:58:34:19:00:a6:3f:48:3e:5b:3d:ad:55: ef:0d:97:88:6f:17:82:cc:4b:bb:74:62:cc:6e:ce: 4a:a9:4c:84:42:e6:87:a3:07:66:91:af:12:96:a9: fa:11:79:75:99:0e:22:bb:f4:ab:43:f8:fe:ac:d9: e3:8b:31:bf:62:3e:be:12:2c:4b:0f:54:ba:34:ad: 02:9c:f6:db:14:48:61:2e:f2:2c:ca:33:0e:33:da: ef:64:91:44:56:d1:74:05:e0:88:ad:75:9f:55:f4: dc:92:59:dd:9c:0d:f4:fd:84:1d:aa:7b:d6:53:f6: 64:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:28:B6:D4:F7:FF:89:A0:AA:B4:6A:06:6B:30:92:EA:25:89:54:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea3b8a9a-0855-394d-a31a-8c5f7e57d900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:dd:15:86:5c:26:0b:31:9f:5d:e0:ec:d9:ef:9e:0b:2b:0e: 78:13:f3:4e:bf:8e:94:d2:8d:31:a4:e8:b0:55:ae:9b:65:d8: f6:ea:4d:2a:7a:6b:6f:12:d2:8d:94:b4:60:62:3e:1c:b3:3e: 60:27:ea:fe:fe:53:b3:59:e6:39:47:6e:70:3f:2d:3f:3b:7e: c2:00:f9:a6:fb:7d:6e:a7:02:f1:3b:76:3e:52:9c:5c:a6:e3: bb:1e:ea:d1:89:d7:fb:41:20:26:07:63:16:fe:ad:53:fc:50: be:03:7d:4a:59:36:a2:10:ad:3e:30:2c:89:1f:51:9f:2d:3d: f5:1a:6b:49:34:27:7a:09:ec:bb:2c:1b:bc:d4:bd:f7:95:92: a9:09:72:c5:86:5a:ef:ee:3e:4c:4b:3c:79:df:71:77:c3:c3: 51:49:7f:05:6c:3d:2b:14:f2:69:1c:d5:98:d6:7f:62:c2:a5: c1:6b:ba:c4:ef:33:6a:67:e2:72:e9:36:37:5b:36:32:4f:7a: ac:85:da:41:8d:c7:a1:ab:15:46:59:a6:83:d1:20:54:dd:0a: 9d:c1:7a:1d:2c:99:86:00:a0:81:21:6c:43:59:46:7c:07:d2: c0:62:fd:52:db:c1:27:19:13:a3:62:70:ce:77:4c:39:b5:10: fc:90:6d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5oP17yb8YI50UHwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcwNjA5MDAxMloXDTI2MTAwNDA5MDAxMlowLzEtMCsGA1UEAxMk ZDFmZThhZmUtOGZkOC00YjBiLThkZmItZTk4N2IxYmVmNzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6krWZpGZPn2jzotdJc2eWH2HhklqwUg0wWlN FAQnuSAm+DXiZilOe0RM5si0nKRVsYO62VNpFDWlaT/6+M65F/qcUhDQKw3ujTp5 jUal9rwWBECTAb6yQdqK5EImBeknYyK9Na5CXAoVxsktbn5wT4iOYMe46VdzrnUm 54O3h9XD4vOgB2PMkNVYNBkApj9IPls9rVXvDZeIbxeCzEu7dGLMbs5KqUyEQuaH owdmka8Slqn6EXl1mQ4iu/SrQ/j+rNnjizG/Yj6+EixLD1S6NK0CnPbbFEhhLvIs yjMOM9rvZJFEVtF0BeCIrXWfVfTcklndnA30/YQdqnvWU/Zk7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYottT3/4mgqrRqBmswkuoliVTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWEzYjhhOWEtMDg1NS0z OTRkLWEzMWEtOGM1ZjdlNTdkOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzdFYZcJgsxn13g7NnvngsrDngT806/jpTSjTGk6LBVrptl2PbqTSp6 a28S0o2UtGBiPhyzPmAn6v7+U7NZ5jlHbnA/LT87fsIA+ab7fW6nAvE7dj5SnFym 47se6tGJ1/tBICYHYxb+rVP8UL4DfUpZNqIQrT4wLIkfUZ8tPfUaa0k0J3oJ7Lss G7zUvfeVkqkJcsWGWu/uPkxLPHnfcXfDw1FJfwVsPSsU8mkc1ZjWf2LCpcFrusTv M2pn4nLpNjdbNjJPeqyF2kGNx6GrFUZZpoPRIFTdCp3Beh0smYYAoIEhbENZRnwH 0sBi/VLbwScZE6NicM53TDm1EPyQbWs= -----END CERTIFICATE-----Generated at Fri Jul 24 10:11:47 2026 by rpki-client