$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eea876b2-c56f-3862-8642-3b21e6d3d2e1.roa File: eea876b2-c56f-3862-8642-3b21e6d3d2e1.roa (raw, json) Hash identifier: NTWyNRl/7BIhwvXqRzPCudlTk47m9rrkV+G6k0ZZUxY= Subject key identifier: C7:4A:73:DD:C9:43:EE:6A:FA:FD:D1:E5:24:7B:B5:AB:65:79:76:77 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49745717598D9659AB0B7C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eea876b2-c56f-3862-8642-3b21e6d3d2e1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.30.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:57:17:59:8d:96:59:ab:0b:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4ea9dc90-26f1-409a-b8a8-1b31b4e0fc57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:73:d9:5d:1b:d3:56:5e:76:57:8c:30:4a:d8: c0:4d:ff:68:74:d4:f8:07:34:8d:1f:99:30:d9:ec: f2:98:01:5d:79:62:1e:8a:dd:f0:9f:0f:25:36:a7: 65:9e:79:c1:65:12:ca:d7:b8:ff:0b:88:2b:22:bb: ca:a0:8d:b9:67:1c:1a:5e:b1:b1:32:e1:8b:61:44: 24:e8:0c:f6:50:e6:91:86:d0:35:01:28:1f:da:30: f8:aa:29:40:1b:1e:a4:48:18:91:cc:25:42:af:52: 99:e9:7c:84:db:e1:9f:e6:96:1f:98:a8:b7:e2:eb: f4:5b:ea:01:ba:2d:d8:f5:22:d6:1c:d9:e2:ef:e7: 75:a8:bd:af:54:3a:a8:fc:16:4d:5e:5e:3a:07:f2: 66:1c:2f:96:e5:17:0a:e4:de:20:fa:1a:2e:7c:e8: 11:75:df:2e:ce:2b:c0:02:45:10:df:d4:e5:b5:fb: 74:d2:20:c2:15:e5:ad:37:6e:ce:2f:28:ed:1c:41: 83:31:82:39:e3:7d:34:44:d5:ae:d4:0d:6c:68:49: 59:f0:72:1c:06:1c:32:2e:36:f0:cc:6f:35:6c:37: b6:14:60:b9:f3:e1:a2:e1:55:46:18:73:71:bc:66: d3:39:04:83:b1:c5:b9:b0:4c:cd:3d:49:54:e2:8f: 45:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4A:73:DD:C9:43:EE:6A:FA:FD:D1:E5:24:7B:B5:AB:65:79:76:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eea876b2-c56f-3862-8642-3b21e6d3d2e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:15:b1:40:95:9c:29:c9:63:ec:71:d8:1c:91:10:f6:a7:0c: c2:17:a4:ad:99:90:6d:c3:aa:b1:4b:85:03:60:5d:48:bc:c6: d7:81:73:9c:2b:97:73:11:49:f3:54:98:ca:b1:3b:9e:30:73: a7:df:c7:86:70:22:db:02:7f:bc:c6:53:b2:5b:14:ed:52:c9: 89:b5:61:ca:d2:71:b3:35:cd:b5:b2:73:ad:19:30:b9:23:c6: 73:e6:da:d1:d5:05:eb:f0:10:e4:f8:28:59:60:6f:d9:49:4e: c0:22:82:16:8f:67:21:eb:ef:23:3a:56:17:dc:90:14:19:e2: f3:60:ec:d9:ce:2f:4f:37:90:d0:b7:f9:77:73:bf:d0:9e:11: cf:ed:5c:e6:39:95:65:e2:82:62:52:22:8e:21:67:03:3f:20: 7b:02:da:2a:ca:8e:5b:60:c2:1e:5b:ae:5a:3c:df:0d:90:f4: fd:5d:16:e5:41:39:13:12:22:29:2f:47:7b:a9:68:46:72:bf: cb:85:1d:b7:e7:b4:3e:2e:96:b6:e8:b0:46:df:d5:38:db:55: 2f:d3:ca:11:92:46:b1:af:19:72:d2:19:6a:d8:95:c7:4f:10: 07:77:80:a3:ca:9f:52:27:2c:39:ce:df:43:58:64:5d:1d:e2: 9d:1e:cf:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdFcXWY2WWasLfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGVhOWRjOTAtMjZmMS00MDlhLWI4YTgtMWIzMWI0ZTBmYzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3PZXRvTVl52V4wwStjATf9odNT4BzSNH5kw 2ezymAFdeWIeit3wnw8lNqdlnnnBZRLK17j/C4grIrvKoI25ZxwaXrGxMuGLYUQk 6Az2UOaRhtA1ASgf2jD4qilAGx6kSBiRzCVCr1KZ6XyE2+Gf5pYfmKi34uv0W+oB ui3Y9SLWHNni7+d1qL2vVDqo/BZNXl46B/JmHC+W5RcK5N4g+houfOgRdd8uzivA AkUQ39Tltft00iDCFeWtN27OLyjtHEGDMYI54300RNWu1A1saElZ8HIcBhwyLjbw zG81bDe2FGC58+Gi4VVGGHNxvGbTOQSDscW5sEzNPUlU4o9FXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdKc93JQ+5q+v3R5SR7tatleXZ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWVhODc2YjItYzU2Zi0z ODYyLTg2NDItM2IyMWU2ZDNkMmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsVsUCVnCnJY+xx2ByREPanDMIXpK2ZkG3DqrFLhQNgXUi8xteBc5wr l3MRSfNUmMqxO54wc6ffx4ZwItsCf7zGU7JbFO1SyYm1YcrScbM1zbWyc60ZMLkj xnPm2tHVBevwEOT4KFlgb9lJTsAighaPZyHr7yM6VhfckBQZ4vNg7NnOL083kNC3 +Xdzv9CeEc/tXOY5lWXigmJSIo4hZwM/IHsC2irKjltgwh5brlo83w2Q9P1dFuVB ORMSIikvR3upaEZyv8uFHbfntD4ulrbosEbf1TjbVS/TyhGSRrGvGXLSGWrYlcdP EAd3gKPKn1InLDnO30NYZF0d4p0ez5U= -----END CERTIFICATE-----Generated at Fri Sep 25 19:22:16 2026 by rpki-client