$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10013f9a-40eb-3b7d-98a7-1b182871cc0d.roa File: 10013f9a-40eb-3b7d-98a7-1b182871cc0d.roa (raw, json) Hash identifier: iAIufc4STtzdrh/na9u500sGzOgRC1rMIESJatOpSsE= Subject key identifier: 46:D8:F1:EF:2B:02:C4:79:37:F6:B7:1A:11:50:17:74:DF:7D:DC:97 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F6292D256AF2BBB63EA3F4EC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10013f9a-40eb-3b7d-98a7-1b182871cc0d.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 30036 IP address blocks: 173.25.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:d2:56:af:2b:bb:63:ea:3f:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=642ed4d2-fe83-4d70-872c-78417d8255a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6e:e2:0d:38:3f:5f:40:6f:e2:0a:04:e3:8b: 8a:9e:ef:3f:02:0e:33:a7:84:62:06:99:c8:39:31: bf:f7:64:79:87:ed:fa:1f:fb:45:00:5b:d0:60:94: b6:cc:e5:1c:84:5b:80:a0:e2:c8:bb:bc:ad:69:13: 8c:43:60:a5:86:76:18:8f:ee:73:13:3d:0e:80:be: 52:05:89:5c:f9:b6:46:ec:e7:d5:ab:06:de:aa:0f: 23:31:a9:32:33:0f:c6:84:05:3e:cc:13:ef:9f:40: 42:75:49:96:d0:90:74:24:bb:1d:1d:ac:b6:25:51: 9b:18:4a:e8:c3:a5:51:eb:40:9e:0a:e0:5e:62:01: ee:ae:0f:3b:56:17:8b:c4:1e:b9:c9:68:44:dd:cc: af:ba:f0:13:e5:82:ed:be:fc:07:c9:71:35:37:4b: d0:2c:3b:8a:28:79:8f:59:fe:86:4b:6b:fd:87:3c: 16:39:a6:81:05:df:7b:e2:41:33:c6:16:f8:9c:9c: be:72:f1:02:fb:64:22:8c:84:c3:b2:a4:f4:f1:64: 6f:82:d0:d1:a5:7f:00:ff:62:7d:b0:94:95:c2:39: 17:30:44:28:92:b9:cf:b0:0f:e1:e5:6a:d7:71:94: 9a:bc:f3:b9:29:e8:5c:17:66:5c:3e:dd:a1:5e:61: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D8:F1:EF:2B:02:C4:79:37:F6:B7:1A:11:50:17:74:DF:7D:DC:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10013f9a-40eb-3b7d-98a7-1b182871cc0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:4d:64:5b:43:bc:95:e9:60:ba:2b:11:55:d3:b0:e7:a6:e3: a8:67:bd:11:28:1e:33:3a:af:bd:83:8c:4d:ee:32:7e:21:38: 3e:e0:b1:8d:92:76:32:4e:af:15:ff:18:b1:5a:4e:53:55:0d: b1:64:5c:51:bf:70:1b:91:d0:56:ab:17:01:79:12:03:7c:be: 37:ce:50:6a:e7:cc:8b:40:62:47:ea:36:66:a9:d2:3d:c0:c4: 34:3e:42:8e:d1:e6:e6:ce:e3:a7:e4:3e:a4:cf:7a:e8:dc:d3: 0c:24:7e:b8:25:32:d8:a9:9d:28:27:1b:bb:c8:fa:3a:88:d9: bd:4b:1e:d3:43:1f:86:ad:4b:21:a9:17:ba:96:7a:c7:4c:4a: 81:65:88:4c:06:ab:7d:41:22:ba:f8:db:1f:0e:5e:85:a5:29: 6c:b2:5c:b7:b6:7c:07:7e:bc:d9:cf:a6:dc:f2:7c:51:92:d9: e7:28:bc:bb:23:27:7d:7f:62:20:da:17:c8:be:90:d5:c7:63: f9:e0:0e:3a:b0:92:d5:a1:49:1a:0b:c8:bd:01:a1:b5:f4:3b: f5:f1:98:4c:c5:0b:b7:e7:56:89:8c:d7:78:cb:00:ef:22:4c: 89:38:d3:b6:5d:99:2c:0d:66:3b:33:07:fe:7f:b0:fb:89:8b: 64:fa:26:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktJWryu7Y+o/TsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NjQyZWQ0ZDItZmU4My00ZDcwLTg3MmMtNzg0MTdkODI1NWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm7iDTg/X0Bv4goE44uKnu8/Ag4zp4RiBpnI OTG/92R5h+36H/tFAFvQYJS2zOUchFuAoOLIu7ytaROMQ2ClhnYYj+5zEz0OgL5S BYlc+bZG7OfVqwbeqg8jMakyMw/GhAU+zBPvn0BCdUmW0JB0JLsdHay2JVGbGEro w6VR60CeCuBeYgHurg87VheLxB65yWhE3cyvuvAT5YLtvvwHyXE1N0vQLDuKKHmP Wf6GS2v9hzwWOaaBBd974kEzxhb4nJy+cvEC+2QijITDsqT08WRvgtDRpX8A/2J9 sJSVwjkXMEQokrnPsA/h5WrXcZSavPO5KehcF2ZcPt2hXmEbfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbY8e8rAsR5N/a3GhFQF3TffdyXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTAwMTNmOWEtNDBlYi0z YjdkLTk4YTctMWIxODI4NzFjYzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRlYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBNZFtDvJXpYLorEVXTsOem46hnvREoHjM6r72DjE3uMn4hOD7gsY2S djJOrxX/GLFaTlNVDbFkXFG/cBuR0FarFwF5EgN8vjfOUGrnzItAYkfqNmap0j3A xDQ+Qo7R5ubO46fkPqTPeujc0wwkfrglMtipnSgnG7vI+jqI2b1LHtNDH4atSyGp F7qWesdMSoFliEwGq31BIrr42x8OXoWlKWyyXLe2fAd+vNnPptzyfFGS2ecovLsj J31/YiDaF8i+kNXHY/ngDjqwktWhSRoLyL0BobX0O/XxmEzFC7fnVomM13jLAO8i TIk407ZdmSwNZjszB/5/sPuJi2T6JnE= -----END CERTIFICATE-----Generated at Sun Oct 11 11:40:29 2026 by rpki-client