$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da815ca0-128b-3ad3-b0cb-ad567dede973.roa File: da815ca0-128b-3ad3-b0cb-ad567dede973.roa (raw, json) Hash identifier: V2zVhUmJ47dS9R9d1Nb/UoY8+Gb4s2E9189P0Dq+dIQ= Subject key identifier: BF:4E:5A:A0:F1:47:A8:6C:8E:DC:AE:64:90:34:77:FE:8E:15:4A:E0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6C70A7F7CD3E8184BD4680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da815ca0-128b-3ad3-b0cb-ad567dede973.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.26.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:70:a7:f7:cd:3e:81:84:bd:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=8a3a85f6-a050-4c22-bd63-ce3b93753761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:36:35:3d:29:74:f9:97:1b:2e:db:52:42:7d: 42:01:bc:ac:e2:35:b1:f4:0e:e1:5a:9e:fc:c2:69: a5:82:64:68:b3:00:f4:5a:fe:c3:b1:98:4e:3d:4e: 05:33:49:27:74:ad:9c:8a:6d:a4:75:e5:d0:f0:65: 40:55:68:97:74:ac:96:2d:2c:9c:0f:f1:a7:87:be: 19:ec:89:53:d6:7b:69:72:35:5d:96:e8:1d:7c:29: a2:f4:aa:b7:1d:42:a3:77:b7:ac:41:46:a2:b8:3b: 5d:16:74:bb:ae:81:14:64:48:28:f7:30:89:4b:d8: 49:e3:38:26:de:8e:ad:ae:a4:c8:b1:0e:84:0e:7a: 8c:5d:45:54:6c:78:b7:d7:49:10:85:d9:55:ce:2b: 28:51:05:f8:27:90:06:5b:18:ca:40:32:92:c8:43: 65:72:db:23:65:ec:ea:b4:12:e1:9d:2a:7a:76:de: ef:1f:4f:e6:be:c9:16:9b:74:19:8f:c9:2e:b3:9f: 91:e2:22:2d:9f:4b:fe:4a:45:f3:67:b2:c8:f9:ab: e2:84:85:6c:6b:ea:e1:08:93:3e:2f:cc:27:0f:66: 58:1c:02:af:9a:30:e2:b4:4b:20:ba:5c:b4:a5:b7: 7d:3a:0a:02:d5:2a:2a:91:a4:15:5c:f3:9c:03:ee: eb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4E:5A:A0:F1:47:A8:6C:8E:DC:AE:64:90:34:77:FE:8E:15:4A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da815ca0-128b-3ad3-b0cb-ad567dede973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.26.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:2f:00:16:0c:60:b6:63:16:fb:fc:58:1b:f6:ce:8a:ab:36: 75:56:83:53:2b:c6:68:87:f0:8e:69:b9:d7:81:56:9f:d2:fb: e8:09:1a:52:8b:ea:9a:55:d1:3c:6c:08:64:8c:7b:b2:37:66: ba:be:39:79:70:ea:88:14:1f:d0:e1:85:63:8e:55:97:46:53: c3:bf:6a:19:c7:a7:02:61:55:be:11:fe:b7:d6:c2:a2:e4:ca: 78:e2:27:67:e6:de:05:e9:c0:61:c0:4e:38:38:9f:f1:bb:42: 4a:36:40:1e:fc:84:a1:a1:34:7d:c3:11:21:bd:d5:e4:3b:2b: eb:68:f3:35:75:a8:13:5e:f5:9f:b2:92:f2:60:dc:90:bc:7d: fe:73:57:35:fa:2d:80:35:e8:7f:22:47:eb:43:b9:c8:8d:ee: 02:17:37:8f:57:b7:f8:bf:76:cf:10:78:e2:09:ac:a5:2b:69: 6b:45:6d:57:db:18:56:44:08:96:08:e2:28:a1:24:8a:b9:10: 5e:86:38:ae:b0:e5:5f:fc:9a:91:77:20:03:5d:54:40:22:b8: b3:89:2f:9c:09:a5:9c:da:f3:86:75:3d:37:08:9b:3d:4e:0e: fa:b3:64:1c:db:77:fb:19:31:07:5b:97:13:cd:49:d2:bc:5c: 9f:66:44:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHCn980+gYS9RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk OGEzYTg1ZjYtYTA1MC00YzIyLWJkNjMtY2UzYjkzNzUzNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTY1PSl0+ZcbLttSQn1CAbys4jWx9A7hWp78 wmmlgmRoswD0Wv7DsZhOPU4FM0kndK2cim2kdeXQ8GVAVWiXdKyWLSycD/Gnh74Z 7IlT1ntpcjVdlugdfCmi9Kq3HUKjd7esQUaiuDtdFnS7roEUZEgo9zCJS9hJ4zgm 3o6trqTIsQ6EDnqMXUVUbHi310kQhdlVzisoUQX4J5AGWxjKQDKSyENlctsjZezq tBLhnSp6dt7vH0/mvskWm3QZj8kus5+R4iItn0v+SkXzZ7LI+avihIVsa+rhCJM+ L8wnD2ZYHAKvmjDitEsguly0pbd9OgoC1SoqkaQVXPOcA+7rDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9OWqDxR6hsjtyuZJA0d/6OFUrgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGE4MTVjYTAtMTI4Yi0z YWQzLWIwY2ItYWQ1NjdkZWRlOTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4vABYMYLZjFvv8WBv2zoqrNnVWg1MrxmiH8I5pudeBVp/S++gJGlKL 6ppV0TxsCGSMe7I3Zrq+OXlw6ogUH9DhhWOOVZdGU8O/ahnHpwJhVb4R/rfWwqLk ynjiJ2fm3gXpwGHATjg4n/G7Qko2QB78hKGhNH3DESG91eQ7K+to8zV1qBNe9Z+y kvJg3JC8ff5zVzX6LYA16H8iR+tDuciN7gIXN49Xt/i/ds8QeOIJrKUraWtFbVfb GFZECJYI4iihJIq5EF6GOK6w5V/8mpF3IANdVEAiuLOJL5wJpZza84Z1PTcImz1O DvqzZBzbd/sZMQdblxPNSdK8XJ9mRCo= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:16 2025 by rpki-client