$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0063bf2e-d940-336a-8c0a-4ccda641701e.roa File: 0063bf2e-d940-336a-8c0a-4ccda641701e.roa (raw, json) Hash identifier: ghPmvz0uOORVYgxvN+VNZ9yN3Xmcb0hKdrNFCdsBtkE= Subject key identifier: D4:0D:75:1B:C4:68:DC:0F:A8:31:88:B6:71:AA:57:F4:E0:04:5F:EE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498877F714D4D7CBEAF6A580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0063bf2e-d940-336a-8c0a-4ccda641701e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.28.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:77:f7:14:d4:d7:cb:ea:f6:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e3b44faa-13bf-43c7-9160-2c40b89b026a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:8e:85:bd:33:81:c9:78:7d:1d:b9:fe:70: e3:f0:f5:9d:e2:e2:dd:46:21:a5:44:7c:d9:24:04: 68:0f:c5:d1:b7:3a:b7:cd:8e:7d:e6:5f:31:36:12: 9a:c6:1f:00:f5:71:ab:77:fe:26:74:7f:2f:b9:4e: 1a:ac:b7:48:63:23:c4:a6:54:95:c9:3a:5a:34:fe: 84:72:2a:a4:87:39:61:45:a5:60:bb:29:38:18:dd: 67:85:3c:35:91:97:66:d6:d5:61:5d:83:82:9f:e6: 11:2d:e6:be:c7:96:aa:f2:66:28:db:b5:49:ac:20: e2:43:5b:50:f1:7e:a4:7a:da:f6:92:2c:bc:8e:4f: 50:da:f7:a4:40:9f:b1:89:24:22:48:56:fc:90:1d: 37:52:f0:14:35:78:93:00:b6:24:6c:a1:53:4e:da: 22:8f:ad:d0:26:86:04:9e:8e:36:15:09:0e:9d:6d: 2e:ac:19:0c:28:eb:3c:05:ca:1d:be:41:66:47:05: da:8b:99:b3:4a:a9:78:31:19:55:c1:4a:48:1a:7e: 0b:88:bd:92:de:6e:2e:43:6d:39:e9:1a:46:f0:8c: 54:a2:eb:b4:f3:67:25:1d:f6:55:a7:b8:c0:33:c0: f0:2c:13:5b:9d:92:6d:a0:aa:6c:a4:62:6b:55:6d: d0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0D:75:1B:C4:68:DC:0F:A8:31:88:B6:71:AA:57:F4:E0:04:5F:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0063bf2e-d940-336a-8c0a-4ccda641701e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:a2:cf:bd:4c:22:2e:13:66:e3:da:45:39:89:6d:e1:fc:c7: 22:85:13:da:09:24:f7:b7:53:32:87:38:91:05:b4:be:2b:10: a0:f4:52:d3:87:9b:3f:e6:0d:23:ce:5a:83:b7:c9:44:7b:1f: 15:50:49:6a:34:6f:29:2b:47:b2:cd:dd:40:9d:2b:30:eb:c7: cf:d6:24:4b:76:bd:94:ed:9b:2c:3e:28:59:0b:01:57:d9:59: 67:12:d2:f5:68:90:c6:c9:fc:56:04:71:a0:c6:b8:aa:57:c4: 5a:6c:5a:b9:12:cc:84:2e:22:e5:5c:d3:26:fc:e6:04:ca:3a: ff:df:89:80:4c:59:94:df:2e:7e:ff:59:cf:03:06:ff:28:54: 55:48:45:d5:8e:94:8d:a4:8d:2f:0b:d6:9f:c4:da:33:d2:df: c3:f3:83:e9:53:a9:b5:ff:df:7a:87:d3:84:50:da:eb:c7:34: 54:6d:4a:f9:87:1b:de:4f:3f:18:ef:79:e5:17:6a:1c:b8:ae: cf:24:9b:b2:49:c4:35:4b:09:ee:08:af:30:d5:eb:72:a3:6d: b8:48:82:f5:c6:f4:85:c8:64:de:1a:ec:75:89:19:5c:f9:37: 6b:17:25:fc:a7:26:dc:f5:72:b7:5c:e4:a8:ed:8e:0e:26:ed: 76:45:fa:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiHf3FNTXy+r2pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTNiNDRmYWEtMTNiZi00M2M3LTkxNjAtMmM0MGI4OWIwMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKaOhb0zgcl4fR25/nDj8PWd4uLdRiGlRHzZ JARoD8XRtzq3zY595l8xNhKaxh8A9XGrd/4mdH8vuU4arLdIYyPEplSVyTpaNP6E ciqkhzlhRaVguyk4GN1nhTw1kZdm1tVhXYOCn+YRLea+x5aq8mYo27VJrCDiQ1tQ 8X6ketr2kiy8jk9Q2vekQJ+xiSQiSFb8kB03UvAUNXiTALYkbKFTTtoij63QJoYE no42FQkOnW0urBkMKOs8BcodvkFmRwXai5mzSql4MRlVwUpIGn4LiL2S3m4uQ205 6RpG8IxUouu082clHfZVp7jAM8DwLBNbnZJtoKpspGJrVW3QbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQNdRvEaNwPqDGItnGqV/TgBF/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDA2M2JmMmUtZDk0MC0z MzZhLThjMGEtNGNjZGE2NDE3MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRxaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKiz71MIi4TZuPaRTmJbeH8xyKFE9oJJPe3UzKHOJEFtL4rEKD0UtOH mz/mDSPOWoO3yUR7HxVQSWo0bykrR7LN3UCdKzDrx8/WJEt2vZTtmyw+KFkLAVfZ WWcS0vVokMbJ/FYEcaDGuKpXxFpsWrkSzIQuIuVc0yb85gTKOv/fiYBMWZTfLn7/ Wc8DBv8oVFVIRdWOlI2kjS8L1p/E2jPS38Pzg+lTqbX/33qH04RQ2uvHNFRtSvmH G95PPxjveeUXahy4rs8km7JJxDVLCe4IrzDV63KjbbhIgvXG9IXIZN4a7HWJGVz5 N2sXJfynJtz1crdc5Kjtjg4m7XZF+iU= -----END CERTIFICATE-----Generated at Thu Oct 15 02:08:14 2026 by rpki-client