$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/273dfd6a-9db9-36c5-a78c-f4e8a062db7e.roa File: 273dfd6a-9db9-36c5-a78c-f4e8a062db7e.roa (raw, json) Hash identifier: +PPJ4AmTvV/MHJYZGbXEAaWWhB+gLTBSuk3Lpu1BfD4= Subject key identifier: FA:6F:1B:75:8D:9C:E7:D0:AA:52:B1:22:11:58:EF:80:05:7C:33:DE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F74B82CC7B280F3F6AE3C79C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/273dfd6a-9db9-36c5-a78c-f4e8a062db7e.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 30036 IP address blocks: 173.22.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:2c:c7:b2:80:f3:f6:ae:3c:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=7b8f39f2-177d-41d5-bcb8-1fafcf074a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c8:34:c3:c9:b4:06:7a:02:12:76:b3:5d:3f: 95:94:a2:65:eb:5a:75:53:51:00:2d:ca:0d:07:37: f4:3b:61:e2:3e:11:75:8c:11:56:58:66:05:b1:fa: a1:d4:c4:3a:9d:7c:6a:04:49:91:73:d9:37:33:37: ff:45:b2:0c:c5:ba:b8:16:d2:5b:15:69:60:cd:5b: f0:9e:6c:1c:1d:93:e8:2d:62:39:b4:0e:17:d4:8e: 00:f4:16:68:88:2c:a0:9b:0e:79:24:3e:98:1a:94: b6:0d:98:61:72:5d:0d:4c:d2:d5:11:8a:e5:c0:29: 82:bc:67:c2:8c:41:31:4e:4a:b1:25:d0:cf:35:c8: da:42:bd:1e:5d:4a:de:80:c4:37:8f:30:c2:b1:cc: bd:7c:58:02:92:a0:83:b0:fa:70:71:bf:2f:68:cc: f4:ce:7b:7a:b7:cc:ae:7b:fa:1c:08:ba:22:4f:f5: 97:56:e4:74:b4:b3:e5:ce:0c:f1:55:6a:21:e0:11: 31:15:56:c9:b0:94:f6:fa:d8:a0:85:27:b6:d7:c8: 9b:fc:74:e5:31:04:b8:f7:23:55:5a:80:55:da:c1: 77:a7:89:36:9f:66:0d:47:32:15:97:3f:9a:0f:56: ab:73:da:f0:2b:05:18:a8:65:e1:98:1b:47:53:1c: 1b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6F:1B:75:8D:9C:E7:D0:AA:52:B1:22:11:58:EF:80:05:7C:33:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/273dfd6a-9db9-36c5-a78c-f4e8a062db7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:97:92:06:e1:0c:4f:1a:ff:74:87:9b:3c:e7:43:32:e8:45: e2:13:48:f4:ec:e6:74:95:f8:7d:31:a5:62:1a:db:eb:56:71: 81:88:9f:a0:fc:ba:e0:aa:7d:6e:16:5a:19:34:28:3f:d6:aa: 92:1d:78:ed:13:ac:15:37:74:d2:9b:4e:eb:cd:32:cd:97:36: d1:bc:4c:fa:c8:54:ac:0b:0e:38:cf:47:af:d3:80:8c:1c:3d: f6:a3:fb:71:a6:44:99:8e:f4:56:0b:fe:40:08:54:88:86:22: ce:a5:71:b9:d2:53:88:29:b6:21:29:72:1e:90:fa:66:a1:ee: f0:a5:dc:78:08:49:da:e4:d3:60:3f:ca:b9:3c:f3:01:9d:34: 45:7d:5e:91:92:0f:1f:1c:04:d0:54:76:ae:64:5c:cb:99:a6: 0f:02:17:93:3b:bb:d8:90:43:e2:c7:1e:bf:c4:ec:ee:89:8e: f5:46:23:0a:5a:2c:89:0f:e4:70:2f:de:97:b7:06:d3:6d:b0: 2e:04:ab:67:8a:c8:e7:72:31:8f:47:a3:8a:09:35:cd:48:ef: f7:83:82:38:42:74:e9:16:45:5a:9c:76:b4:0e:3b:7d:45:46: b1:87:1c:14:f9:de:a5:4b:24:36:8d:ab:81:09:cb:a7:95:22: 34:57:c4:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90uCzHsoDz9q48ecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk N2I4ZjM5ZjItMTc3ZC00MWQ1LWJjYjgtMWZhZmNmMDc0YTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMg0w8m0BnoCEnazXT+VlKJl61p1U1EALcoN Bzf0O2HiPhF1jBFWWGYFsfqh1MQ6nXxqBEmRc9k3Mzf/RbIMxbq4FtJbFWlgzVvw nmwcHZPoLWI5tA4X1I4A9BZoiCygmw55JD6YGpS2DZhhcl0NTNLVEYrlwCmCvGfC jEExTkqxJdDPNcjaQr0eXUregMQ3jzDCscy9fFgCkqCDsPpwcb8vaMz0znt6t8yu e/ocCLoiT/WXVuR0tLPlzgzxVWoh4BExFVbJsJT2+tighSe218ib/HTlMQS49yNV WoBV2sF3p4k2n2YNRzIVlz+aD1arc9rwKwUYqGXhmBtHUxwbEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpvG3WNnOfQqlKxIhFY74AFfDPeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjczZGZkNmEtOWRiOS0z NmM1LWE3OGMtZjRlOGEwNjJkYjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqXkgbhDE8a/3SHmzznQzLoReITSPTs5nSV+H0xpWIa2+tWcYGIn6D8 uuCqfW4WWhk0KD/WqpIdeO0TrBU3dNKbTuvNMs2XNtG8TPrIVKwLDjjPR6/TgIwc Pfaj+3GmRJmO9FYL/kAIVIiGIs6lcbnSU4gptiEpch6Q+mah7vCl3HgISdrk02A/ yrk88wGdNEV9XpGSDx8cBNBUdq5kXMuZpg8CF5M7u9iQQ+LHHr/E7O6JjvVGIwpa LIkP5HAv3pe3BtNtsC4Eq2eKyOdyMY9Ho4oJNc1I7/eDgjhCdOkWRVqcdrQOO31F RrGHHBT53qVLJDaNq4EJy6eVIjRXxFY= -----END CERTIFICATE-----Generated at Sun Oct 11 19:00:13 2026 by rpki-client