$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/122c6bfa-a998-31cf-82a5-f32b6525309e.roa File: 122c6bfa-a998-31cf-82a5-f32b6525309e.roa (raw, json) Hash identifier: 4TCvqnrtan0/zXP7TDLTKR2qa27eq/iqDyetgG5T2Vc= Subject key identifier: 32:17:6B:ED:62:FF:74:80:FF:85:E8:91:65:34:FE:FF:DA:72:17:32 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F5E62E021D82950F0E209F280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/122c6bfa-a998-31cf-82a5-f32b6525309e.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 19905 IP address blocks: 173.29.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e0:21:d8:29:50:f0:e2:09:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=96e2d7fd-7da9-40a3-9142-4a546ecdbe6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:10:72:a9:2c:c0:3d:85:ba:09:05:fd:d6:e4: 99:9d:d8:78:f7:63:b3:e3:57:c1:89:dc:9d:45:c7: ec:0c:9f:35:23:92:c0:19:24:b4:5c:f7:b0:45:5e: c9:c5:ce:2b:5f:3a:0c:35:8e:b6:4e:76:38:0f:7c: 7c:7a:66:1d:63:6e:86:42:96:3e:76:35:ac:14:d9: 80:c9:15:34:9c:21:42:93:85:ed:81:65:04:37:c5: fa:41:ec:5d:e8:d0:8a:e0:ff:0a:68:5b:61:71:9e: 79:06:a8:58:f4:aa:50:fd:17:d2:5e:96:2b:e6:55: a7:8d:20:3f:06:84:fd:40:65:7e:3d:2d:12:ba:fb: 58:81:3c:39:4a:53:f9:7a:e5:1b:a1:68:dc:f9:2f: 49:c5:0e:92:fe:cd:84:2c:45:cd:fd:10:84:c8:3a: fc:6a:ab:27:27:49:94:e4:75:aa:1b:68:7f:77:51: 8b:23:8a:75:c7:2b:6d:9f:6a:9e:9a:5d:d0:ee:5e: 11:3c:33:ef:83:f2:54:da:12:86:b6:7a:97:e6:13: a4:c2:36:60:1e:3b:c8:a8:4b:cc:bf:45:1b:03:08: 30:1f:2e:0a:75:ee:df:9c:eb:89:b0:dd:0f:60:ea: 9b:b9:55:55:1a:45:cd:91:d2:f4:b7:2e:83:7f:7a: 0c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:17:6B:ED:62:FF:74:80:FF:85:E8:91:65:34:FE:FF:DA:72:17:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/122c6bfa-a998-31cf-82a5-f32b6525309e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:cc:f2:e1:15:f7:c3:49:46:d9:2b:b0:cd:70:08:87:69:6d: 61:2b:28:72:fe:7f:67:11:d6:be:2a:16:91:18:6e:4e:c6:2b: a7:57:a4:ba:82:1e:4f:cb:21:f4:87:b1:c5:8f:49:59:81:3c: 47:0b:1b:f9:ca:68:44:e4:a1:63:5e:0c:54:b0:5a:e9:a1:21: 5d:71:81:55:97:f1:d2:dc:a6:32:9c:28:92:59:13:f3:d1:37: a7:93:1e:9f:27:4d:b7:99:65:ad:de:81:40:24:9d:fc:0d:f8: 20:f9:06:84:02:34:84:9f:67:89:b6:6e:d7:0b:f3:fc:d1:00: af:ac:bb:56:59:df:5c:95:77:52:21:a9:d2:da:50:c0:39:1b: 9c:33:4f:af:d3:be:c6:9a:d1:34:2c:37:3b:12:8f:09:ca:0b: 35:2c:3b:8c:d8:82:25:42:6c:fe:bd:5d:ee:14:25:67:28:e8: a7:07:d0:2e:cc:13:b4:cd:e9:00:97:8b:6a:c0:c8:7b:a1:94: 30:cc:be:11:ca:40:6d:6d:94:c7:48:8f:1b:41:0c:cd:f7:51: 1f:5f:d4:d8:be:ef:d9:e8:04:8b:42:6e:9f:96:ee:b1:e0:cf: ad:b4:e4:f6:4e:2d:c3:d4:8d:ee:37:51:2b:82:51:5f:31:02: 5b:ea:0f:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuAh2ClQ8OIJ8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk OTZlMmQ3ZmQtN2RhOS00MGEzLTkxNDItNGE1NDZlY2RiZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BByqSzAPYW6CQX91uSZndh492Oz41fBidyd RcfsDJ81I5LAGSS0XPewRV7Jxc4rXzoMNY62TnY4D3x8emYdY26GQpY+djWsFNmA yRU0nCFCk4XtgWUEN8X6Qexd6NCK4P8KaFthcZ55BqhY9KpQ/RfSXpYr5lWnjSA/ BoT9QGV+PS0SuvtYgTw5SlP5euUboWjc+S9JxQ6S/s2ELEXN/RCEyDr8aqsnJ0mU 5HWqG2h/d1GLI4p1xyttn2qeml3Q7l4RPDPvg/JU2hKGtnqX5hOkwjZgHjvIqEvM v0UbAwgwHy4Kde7fnOuJsN0PYOqbuVVVGkXNkdL0ty6Df3oMlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIXa+1i/3SA/4XokWU0/v/achcyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTIyYzZiZmEtYTk5OC0z MWNmLTgyYTUtZjMyYjY1MjUzMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHM8uEV98NJRtkrsM1wCIdpbWErKHL+f2cR1r4qFpEYbk7GK6dXpLqC Hk/LIfSHscWPSVmBPEcLG/nKaETkoWNeDFSwWumhIV1xgVWX8dLcpjKcKJJZE/PR N6eTHp8nTbeZZa3egUAknfwN+CD5BoQCNISfZ4m2btcL8/zRAK+su1ZZ31yVd1Ih qdLaUMA5G5wzT6/Tvsaa0TQsNzsSjwnKCzUsO4zYgiVCbP69Xe4UJWco6KcH0C7M E7TN6QCXi2rAyHuhlDDMvhHKQG1tlMdIjxtBDM33UR9f1Ni+79noBItCbp+W7rHg z6205PZOLcPUje43USuCUV8xAlvqD5s= -----END CERTIFICATE-----Generated at Tue Oct 13 20:50:18 2026 by rpki-client