$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eddfadbe-2047-3b74-bcfb-43a4a9aad27e.roa File: eddfadbe-2047-3b74-bcfb-43a4a9aad27e.roa (raw, json) Hash identifier: c7ppsVW/3mznaZLpoa2huyooqYh3fqSoLfus+7RQsNA= Subject key identifier: 34:8B:3D:DB:E9:47:FE:DA:B6:37:07:79:9D:B1:7F:D1:41:CD:E9:92 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497442BFE8E3CF742D8F4480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eddfadbe-2047-3b74-bcfb-43a4a9aad27e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.25.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:42:bf:e8:e3:cf:74:2d:8f:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=88692f52-846b-4c31-a5b5-f85dc2542839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a9:ac:fb:42:08:25:bf:55:e0:ac:63:09:eb: 43:d6:ab:ff:cf:cf:8a:72:60:15:5c:ab:1c:47:1a: f0:4e:a2:c5:86:c0:b2:f0:75:67:c0:78:ca:d5:fb: ec:2d:eb:72:88:df:d7:1b:18:16:76:96:dd:18:73: d5:78:4e:b5:00:e8:95:7c:6d:79:a8:3f:ad:7d:9d: 0e:44:0a:ef:4e:03:88:37:df:c4:6b:31:b9:bf:20: d5:e5:cc:c6:26:d1:a5:d4:c5:9b:ea:e3:38:e3:a7: b3:08:c6:af:af:52:1e:3e:a5:d6:de:e0:c1:2d:e9: c8:0d:3e:eb:0d:a5:36:50:2c:23:27:56:9a:6a:c3: c9:25:97:b6:0d:6c:6d:c6:76:b6:54:9f:37:b8:97: 16:31:31:73:63:d1:14:7b:2c:b6:af:7f:34:8a:b2: 48:56:bd:79:cd:8b:1a:d1:c3:a8:47:49:cf:88:06: c5:9b:61:9c:41:29:da:7b:d2:aa:49:15:67:93:83: e2:ca:e9:9b:e5:65:ca:9d:aa:b4:80:f7:cd:85:8c: 77:ba:80:5c:d9:cb:23:c0:a8:28:0f:d8:11:e6:ca: 0d:1a:6f:2b:fb:06:26:93:a3:fb:ca:ce:b3:48:c9: 0a:a1:e0:8e:68:26:09:f4:88:92:0a:d1:6a:93:72: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8B:3D:DB:E9:47:FE:DA:B6:37:07:79:9D:B1:7F:D1:41:CD:E9:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eddfadbe-2047-3b74-bcfb-43a4a9aad27e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c4:f6:91:84:3f:78:a3:12:e4:ec:b7:3c:0a:ed:09:f9:07: c4:4f:d1:15:2d:90:c1:ac:98:a0:8d:1b:9d:dc:29:b0:97:cd: ca:1f:c0:6d:88:98:80:29:b6:ed:0c:97:a0:79:8f:2f:89:6a: 88:24:b1:5b:fc:fc:35:c3:1c:01:17:a5:0b:6c:be:53:78:45: 20:6e:97:61:36:1d:1a:f3:94:41:8a:57:31:32:14:fc:e1:f7: cd:85:83:dd:fd:9f:c0:bb:d5:72:09:2b:e1:81:c4:11:77:4a: cb:1b:a1:27:4a:4e:00:4b:e5:ca:64:e3:e7:33:56:7c:0a:65: dd:20:a7:1c:da:94:8e:5f:60:14:9f:8c:ca:aa:f9:06:85:55: 63:6e:ec:31:f5:47:0d:dd:0d:be:31:9e:9c:4c:3f:7d:9c:3b: a5:30:28:b1:76:99:ec:6f:60:a2:db:9a:d0:41:03:a3:47:0b: fa:3b:e6:e4:5e:45:2d:8a:6f:2a:d7:5b:6d:06:0a:27:59:78: dc:41:9a:30:cf:e4:c4:40:ff:ce:0a:db:02:de:21:76:fc:3d: 49:85:5e:7e:c8:1a:69:f7:94:84:87:67:53:e7:11:92:46:82: db:39:8e:df:22:66:11:87:9c:fb:cf:86:3d:58:10:5f:dd:6a: aa:25:24:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdEK/6OPPdC2PRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODg2OTJmNTItODQ2Yi00YzMxLWE1YjUtZjg1ZGMyNTQyODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqms+0IIJb9V4KxjCetD1qv/z8+KcmAVXKsc RxrwTqLFhsCy8HVnwHjK1fvsLetyiN/XGxgWdpbdGHPVeE61AOiVfG15qD+tfZ0O RArvTgOIN9/EazG5vyDV5czGJtGl1MWb6uM446ezCMavr1IePqXW3uDBLenIDT7r DaU2UCwjJ1aaasPJJZe2DWxtxna2VJ83uJcWMTFzY9EUeyy2r380irJIVr15zYsa 0cOoR0nPiAbFm2GcQSnae9KqSRVnk4Piyumb5WXKnaq0gPfNhYx3uoBc2csjwKgo D9gR5soNGm8r+wYmk6P7ys6zSMkKoeCOaCYJ9IiSCtFqk3KH7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSLPdvpR/7atjcHeZ2xf9FBzemSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWRkZmFkYmUtMjA0Ny0z Yjc0LWJjZmItNDNhNGE5YWFkMjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRlWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvE9pGEP3ijEuTstzwK7Qn5B8RP0RUtkMGsmKCNG53cKbCXzcofwG2I mIAptu0Ml6B5jy+JaogksVv8/DXDHAEXpQtsvlN4RSBul2E2HRrzlEGKVzEyFPzh 982Fg939n8C71XIJK+GBxBF3SssboSdKTgBL5cpk4+czVnwKZd0gpxzalI5fYBSf jMqq+QaFVWNu7DH1Rw3dDb4xnpxMP32cO6UwKLF2mexvYKLbmtBBA6NHC/o75uRe RS2KbyrXW20GCidZeNxBmjDP5MRA/84K2wLeIXb8PUmFXn7IGmn3lISHZ1PnEZJG gts5jt8iZhGHnPvPhj1YEF/daqolJEY= -----END CERTIFICATE-----Generated at Fri Sep 25 23:43:24 2026 by rpki-client