$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a9caf70-6911-3c70-8343-0bd5b93d10b4.roa File: 0a9caf70-6911-3c70-8343-0bd5b93d10b4.roa (raw, json) Hash identifier: 3jomts3DcV9hF2y3hQSVMJgNduT5lFqYwxVYcU7GmOc= Subject key identifier: 99:E4:68:0A:FC:B4:0F:8D:CF:BD:E7:1A:D1:0B:83:80:B9:0E:B9:5E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EE7BCCBD0A6B2A843FC88F440 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a9caf70-6911-3c70-8343-0bd5b93d10b4.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.19.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:cb:d0:a6:b2:a8:43:fc:88:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=4f43917b-5d13-4e78-b5da-01f77ce8d9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3b:c3:31:c8:cb:53:17:de:dc:18:3e:e9:4b: 08:94:10:69:ef:72:2e:a1:46:6e:f4:8d:8e:43:e4: 5c:9f:be:af:b3:c3:77:88:c6:0e:ca:26:ac:1c:25: d4:0f:b5:ba:24:bd:ce:7b:27:f5:ba:17:a1:c1:f1: d9:98:69:c3:21:23:23:76:23:56:59:3a:9b:c9:b9: 05:2e:c3:d7:1f:40:57:1f:20:b1:52:b9:87:0b:fd: 65:9d:29:7d:df:b7:3f:0a:cb:5a:17:b8:35:c5:af: 57:ce:b3:ec:df:cd:1e:06:2b:83:40:21:f0:02:ac: cb:8c:68:b0:c2:c7:16:09:06:c9:8b:92:48:3d:50: ee:64:27:07:a4:33:d7:30:bd:2d:67:4d:18:a3:65: 3a:cc:ed:38:02:13:a6:43:31:30:b9:73:60:01:39: 29:66:f9:1e:c5:8f:43:7c:36:c5:6c:e6:a4:b0:95: 9a:3b:72:06:15:d4:ae:5a:d2:1b:7b:71:aa:06:26: ab:cb:d9:2a:bb:fc:a6:ef:c8:38:36:55:7f:44:c9: 94:3c:23:81:b1:2e:ef:da:d4:d8:14:f6:9e:66:f2: 09:b3:8a:8a:83:02:fc:41:c9:0a:d5:e0:a6:22:6a: 01:f5:c7:8f:26:ec:a5:71:ea:0c:6f:6b:3e:c0:51: e9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E4:68:0A:FC:B4:0F:8D:CF:BD:E7:1A:D1:0B:83:80:B9:0E:B9:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a9caf70-6911-3c70-8343-0bd5b93d10b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:97:79:be:32:1b:36:d7:87:33:6c:72:74:af:4e:9a:42:dd: c4:00:fa:f6:3f:d2:66:22:fa:29:fb:32:87:dc:4f:ad:ca:78: 0c:6a:3b:2f:70:98:84:6d:24:a6:e8:51:80:b2:37:7a:94:58: db:45:25:ff:b6:77:19:8f:4c:05:9b:93:7b:0f:23:5d:af:af: bc:11:55:59:d8:fc:ca:b9:ba:0a:4a:70:d7:7a:2f:ef:99:a2: ce:25:9f:24:00:09:f8:6d:4f:b6:7e:68:dd:89:93:8d:ab:65: 44:4e:75:05:bd:06:66:12:ef:ac:98:79:21:10:61:6b:ae:21: 66:90:34:c1:42:4b:f8:e9:47:46:a9:03:31:3f:34:31:36:e5: 51:c4:00:1b:22:7b:ab:8f:18:2d:ad:42:c9:82:dd:61:c6:c7: 78:0b:be:cc:21:6d:ef:c2:06:bc:36:80:e6:f3:24:db:f0:1d: aa:e8:16:13:c6:db:3b:1f:aa:29:0e:25:d5:17:02:65:01:25: 19:55:65:d0:c9:5f:a5:58:f9:95:22:46:9a:f1:56:78:57:ce: 9a:46:1c:0f:80:8a:80:88:78:c1:f6:ae:18:d9:01:24:2f:38: e9:76:46:c1:b1:88:7a:d5:ac:d8:e9:7f:d3:56:90:87:30:0d: 82:39:96:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvMvQprKoQ/yI9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk NGY0MzkxN2ItNWQxMy00ZTc4LWI1ZGEtMDFmNzdjZThkOWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jvDMcjLUxfe3Bg+6UsIlBBp73IuoUZu9I2O Q+Rcn76vs8N3iMYOyiasHCXUD7W6JL3Oeyf1uhehwfHZmGnDISMjdiNWWTqbybkF LsPXH0BXHyCxUrmHC/1lnSl937c/CstaF7g1xa9XzrPs380eBiuDQCHwAqzLjGiw wscWCQbJi5JIPVDuZCcHpDPXML0tZ00Yo2U6zO04AhOmQzEwuXNgATkpZvkexY9D fDbFbOaksJWaO3IGFdSuWtIbe3GqBiary9kqu/ym78g4NlV/RMmUPCOBsS7v2tTY FPaeZvIJs4qKgwL8QckK1eCmImoB9cePJuylceoMb2s+wFHpSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnkaAr8tA+Nz73nGtELg4C5DrleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGE5Y2FmNzAtNjkxMS0z YzcwLTgzNDMtMGJkNWI5M2QxMGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArROAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqXeb4yGzbXhzNscnSvTppC3cQA+vY/0mYi+in7MofcT63KeAxqOy9w mIRtJKboUYCyN3qUWNtFJf+2dxmPTAWbk3sPI12vr7wRVVnY/Mq5ugpKcNd6L++Z os4lnyQACfhtT7Z+aN2Jk42rZUROdQW9BmYS76yYeSEQYWuuIWaQNMFCS/jpR0ap AzE/NDE25VHEABsie6uPGC2tQsmC3WHGx3gLvswhbe/CBrw2gObzJNvwHaroFhPG 2zsfqikOJdUXAmUBJRlVZdDJX6VY+ZUiRprxVnhXzppGHA+AioCIeMH2rhjZASQv OOl2RsGxiHrVrNjpf9NWkIcwDYI5luI= -----END CERTIFICATE-----Generated at Fri Aug 21 03:09:03 2026 by rpki-client