$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d3060e8-7eb7-3302-a4b1-538fccc24047.roa File: 0d3060e8-7eb7-3302-a4b1-538fccc24047.roa (raw, json) Hash identifier: Z5g0w+X/jjMjzmy265ZswTnHX0HRgNkBjeaRqB1VHx0= Subject key identifier: BD:20:90:7C:97:5A:B4:C2:C2:05:B8:3E:56:72:D0:9A:7A:71:22:D4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F7FD5EB5BE2D81C59EFFE2FE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d3060e8-7eb7-3302-a4b1-538fccc24047.roa Signing time: Wed 14 Oct 2026 12:34:08 +0000 ROA not before: Wed 14 Oct 2026 12:34:08 +0000 ROA not after: Tue 12 Jan 2027 13:34:08 +0000 asID: 19905 IP address blocks: 173.29.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:d5:eb:5b:e2:d8:1c:59:ef:fe:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 14 12:34:08 2026 GMT Not After : Jan 12 13:34:08 2027 GMT Subject: CN=c31cb0d6-10ec-4ca8-b9c5-9b7935e42e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:53:cd:b2:05:85:79:fd:71:26:76:c2:d9:bb: 56:04:43:2b:53:bc:85:a8:0f:79:d3:88:7a:10:87: 2f:da:77:ed:55:f9:b1:d2:fe:00:18:05:49:92:c1: 89:75:af:f9:64:ff:cc:5a:3b:be:d6:d2:a6:79:3b: 98:5a:0f:88:00:01:43:1c:51:27:9f:c7:f7:e5:bc: 56:ab:55:03:51:7f:e2:ba:1c:ea:78:2c:39:e6:97: 5f:33:47:5c:4d:79:1b:f8:74:5c:34:4d:9e:bf:74: fd:70:1a:16:f2:db:6d:c2:21:fb:4b:63:12:e8:1e: 99:f7:0e:03:7c:e2:8a:31:93:7a:00:e1:3e:5f:3c: 7d:b3:df:4b:53:4f:76:f0:13:d7:7d:31:77:30:c4: ef:80:13:0e:b0:05:d6:0a:08:c7:a8:e6:66:05:23: aa:c2:4b:c0:dc:29:6b:0d:d4:b2:ad:e0:f4:80:75: 92:3d:ce:00:00:05:87:19:72:a6:bd:d0:41:f1:f6: b7:2f:cd:5d:77:c0:62:73:a6:aa:a8:8f:00:65:6b: 25:9e:59:60:3a:99:ee:e8:f9:07:8b:c4:45:96:05: dc:a0:f4:5a:fd:a5:a9:57:2f:1b:5f:f1:8b:b7:47: 7a:34:75:7f:ff:33:c0:f7:5d:80:69:3b:9f:70:ea: 97:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:20:90:7C:97:5A:B4:C2:C2:05:B8:3E:56:72:D0:9A:7A:71:22:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0d3060e8-7eb7-3302-a4b1-538fccc24047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:03:0f:56:10:57:11:ce:7e:24:93:36:40:9d:37:42:35:56: 4d:cd:7f:c5:49:d3:d3:3c:59:96:69:2c:98:17:bb:8f:95:57: 09:a5:6f:e6:5d:bb:c4:83:ec:2f:19:e3:21:7c:0a:65:89:94: 36:a4:0f:b6:41:31:6c:d6:52:a4:54:75:0f:3a:41:db:24:03: ae:45:5f:88:d8:e8:f8:4e:a0:37:c7:01:9d:2c:90:7e:9a:73: 79:18:ce:9f:b2:57:1b:77:b0:8f:e6:09:03:51:7a:42:bc:0c: 69:d9:e0:06:a3:5f:58:8e:f0:6a:cb:c4:32:52:13:3e:9c:08: ac:18:92:db:f9:b6:9d:4f:ed:ef:6b:74:05:64:11:3c:04:77: bb:e7:2a:4f:67:91:0d:34:86:09:9a:74:1e:6b:ae:96:70:1b: 8a:b5:eb:2e:31:fa:93:44:e3:87:ff:31:d1:9c:48:bc:f7:9c: 92:db:2a:4a:30:76:9c:34:cc:a5:63:50:ab:64:a5:91:ae:b5: 44:16:44:cf:2c:72:f2:fd:68:c6:b7:f4:fa:df:5f:ac:38:c6: 0a:7b:9e:66:1b:ec:1c:9c:74:4d:7c:1b:bc:aa:5d:33:49:16: 27:1e:0b:4b:03:26:9d:7f:b4:f3:ab:bd:d7:e6:da:d0:d2:d5: 67:0a:da:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/1etb4tgcWe/+L+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAxNDEyMzQwOFoXDTI3MDExMjEzMzQwOFowLzEtMCsGA1UEAxMk YzMxY2IwZDYtMTBlYy00Y2E4LWI5YzUtOWI3OTM1ZTQyZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFPNsgWFef1xJnbC2btWBEMrU7yFqA9504h6 EIcv2nftVfmx0v4AGAVJksGJda/5ZP/MWju+1tKmeTuYWg+IAAFDHFEnn8f35bxW q1UDUX/iuhzqeCw55pdfM0dcTXkb+HRcNE2ev3T9cBoW8tttwiH7S2MS6B6Z9w4D fOKKMZN6AOE+Xzx9s99LU0928BPXfTF3MMTvgBMOsAXWCgjHqOZmBSOqwkvA3Clr DdSyreD0gHWSPc4AAAWHGXKmvdBB8fa3L81dd8Bic6aqqI8AZWslnllgOpnu6PkH i8RFlgXcoPRa/aWpVy8bX/GLt0d6NHV//zPA912AaTufcOqXoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0gkHyXWrTCwgW4PlZy0Jp6cSLUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGQzMDYwZTgtN2ViNy0z MzAyLWE0YjEtNTM4ZmNjYzI0MDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4DD1YQVxHOfiSTNkCdN0I1Vk3Nf8VJ09M8WZZpLJgXu4+VVwmlb+Zd u8SD7C8Z4yF8CmWJlDakD7ZBMWzWUqRUdQ86QdskA65FX4jY6PhOoDfHAZ0skH6a c3kYzp+yVxt3sI/mCQNRekK8DGnZ4AajX1iO8GrLxDJSEz6cCKwYktv5tp1P7e9r dAVkETwEd7vnKk9nkQ00hgmadB5rrpZwG4q16y4x+pNE44f/MdGcSLz3nJLbKkow dpw0zKVjUKtkpZGutUQWRM8scvL9aMa39PrfX6w4xgp7nmYb7BycdE18G7yqXTNJ FiceC0sDJp1/tPOrvdfm2tDS1WcK2qQ= -----END CERTIFICATE-----Generated at Fri Oct 16 00:19:12 2026 by rpki-client