$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2752ef36-549d-3c59-b2da-60b1c8b1f2e0.roa File: 2752ef36-549d-3c59-b2da-60b1c8b1f2e0.roa (raw, json) Hash identifier: gdqFFQHDd9PWCiDqzgej0j7DptyuUknVp09hkHjLdKY= Subject key identifier: C9:DE:BC:94:BF:B4:36:35:73:AD:FA:C4:45:D9:EE:A2:EC:C7:FC:06 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498B4D104BCB181829B89600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2752ef36-549d-3c59-b2da-60b1c8b1f2e0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.19.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:4d:10:4b:cb:18:18:29:b8:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=328f09e6-d5e4-4ae0-b81f-e106400d593b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:2e:95:10:63:c4:49:e5:44:23:d6:49:91: bc:ac:85:b7:d4:71:28:82:54:e2:f8:3b:36:4c:ed: 44:d8:1b:bb:e2:c1:9e:f7:84:58:44:13:12:5b:53: 2a:b9:17:8e:21:66:a2:8c:9e:e8:a5:8e:76:8d:bb: ed:6a:3d:72:47:bd:9e:4e:a1:ce:10:b4:54:ff:30: b4:4d:5f:d3:51:7a:f0:96:1a:5f:a4:46:49:d6:94: 92:b5:cd:aa:dc:a6:75:b5:3e:a9:68:f2:62:e8:e7: 0e:f2:4d:69:3e:c7:2f:29:57:ee:59:4d:1b:82:e6: c7:db:82:2c:93:41:9d:04:1b:59:ff:9b:da:0b:a8: 7b:ca:25:5c:70:7e:30:bd:88:c0:f8:53:79:f5:60: 94:01:dc:fe:79:17:61:99:66:bd:f8:d2:3c:54:bb: 06:e8:06:89:b4:75:e6:74:bb:79:04:e9:a8:fb:32: c5:c3:e9:3b:ae:32:3b:ac:73:ec:69:f9:9b:61:92: f3:5a:32:ea:d1:9b:c2:15:a7:a1:33:f2:c1:96:33: 83:f2:98:91:ae:a4:1a:2c:75:50:4c:2e:3f:78:15: bd:10:3d:58:b3:17:48:12:37:7b:93:ff:49:37:f0: 9f:14:b4:8a:5e:69:6d:15:49:53:db:bd:3a:58:4a: db:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DE:BC:94:BF:B4:36:35:73:AD:FA:C4:45:D9:EE:A2:EC:C7:FC:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2752ef36-549d-3c59-b2da-60b1c8b1f2e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c0:45:35:cd:30:c1:17:e6:00:57:bc:37:2f:9e:19:d9:e0: 31:5a:23:67:5a:1c:9d:92:b8:4e:70:08:89:a5:9f:44:56:41: 77:7e:88:83:0a:c0:dc:ff:4a:ce:4b:ec:7c:11:9e:df:44:6c: 75:95:1d:13:8d:58:fa:21:26:c7:9e:ff:92:63:80:2a:85:5a: ed:bf:c9:d8:23:4d:3a:f5:53:f6:3b:2d:22:f7:05:18:d4:f9: 6b:ec:26:2a:e2:4d:cd:c2:83:22:ac:4e:cd:9a:4c:2d:4c:7a: 20:2c:f3:db:de:4a:d2:56:32:ac:dd:82:bd:ad:7c:ee:80:1f: 7e:0b:7b:02:ad:ca:79:96:78:98:7d:3d:df:67:02:3b:c1:ce: 71:ef:2d:97:6b:f6:c7:de:4d:61:71:57:51:96:fd:74:de:f5: 76:37:74:97:fd:e9:86:3d:de:b8:76:ab:e3:4c:3d:c7:51:b8: b3:bd:90:f6:24:a8:f0:5c:40:e5:31:11:ce:c7:c7:a1:00:6b: 0b:f4:1f:07:9e:c7:9b:e3:a7:e1:a1:a6:35:bf:71:2b:af:e1: da:75:2d:b0:31:4b:1d:8b:aa:42:a2:aa:eb:4d:ac:1f:36:ad: 12:a1:40:ce:60:94:a3:e7:e1:fb:40:9a:29:2f:e5:84:2d:da: ba:41:71:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji00QS8sYGCm4lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzI4ZjA5ZTYtZDVlNC00YWUwLWI4MWYtZTEwNjQwMGQ1OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KUulRBjxEnlRCPWSZG8rIW31HEoglTi+Ds2 TO1E2Bu74sGe94RYRBMSW1MquReOIWaijJ7opY52jbvtaj1yR72eTqHOELRU/zC0 TV/TUXrwlhpfpEZJ1pSStc2q3KZ1tT6paPJi6OcO8k1pPscvKVfuWU0bgubH24Is k0GdBBtZ/5vaC6h7yiVccH4wvYjA+FN59WCUAdz+eRdhmWa9+NI8VLsG6AaJtHXm dLt5BOmo+zLFw+k7rjI7rHPsafmbYZLzWjLq0ZvCFaehM/LBljOD8piRrqQaLHVQ TC4/eBW9ED1YsxdIEjd7k/9JN/CfFLSKXmltFUlT2706WErbJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnevJS/tDY1c636xEXZ7qLsx/wGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjc1MmVmMzYtNTQ5ZC0z YzU5LWIyZGEtNjBiMWM4YjFmMmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvARTXNMMEX5gBXvDcvnhnZ4DFaI2daHJ2SuE5wCImln0RWQXd+iIMK wNz/Ss5L7HwRnt9EbHWVHRONWPohJsee/5JjgCqFWu2/ydgjTTr1U/Y7LSL3BRjU +WvsJiriTc3CgyKsTs2aTC1MeiAs89veStJWMqzdgr2tfO6AH34LewKtynmWeJh9 Pd9nAjvBznHvLZdr9sfeTWFxV1GW/XTe9XY3dJf96YY93rh2q+NMPcdRuLO9kPYk qPBcQOUxEc7Hx6EAawv0Hweex5vjp+GhpjW/cSuv4dp1LbAxSx2LqkKiqutNrB82 rRKhQM5glKPn4ftAmikv5YQt2rpBcdQ= -----END CERTIFICATE-----Generated at Tue Oct 13 08:35:35 2026 by rpki-client