$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa File: 2d526aab-3817-3369-8704-f5e3258bccd6.roa (raw, json) Hash identifier: TIPi1BYt8ukCIML3MdyWE4H8doVHgxhN8WLq+z8ryp8= Subject key identifier: 0C:9B:CF:4C:01:B5:6F:87:B8:33:1B:90:ED:89:D9:B8:D1:91:B7:BB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EAA51941CC75BA565A6E3C580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 30036 IP address blocks: 173.28.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:94:1c:c7:5b:a5:65:a6:e3:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=0be8239e-217b-4472-9d1c-df251c51c6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ff:63:13:19:71:db:be:4c:26:ae:8e:ff:ce: 2d:cb:46:60:7f:c9:de:0d:39:c9:be:f0:c5:24:56: 26:8e:19:83:52:d1:91:78:7b:b7:33:c4:78:87:65: f3:56:10:69:da:24:5e:fb:78:b1:bf:4f:53:da:4c: 3c:e1:c9:8b:4a:d8:2e:aa:d2:f8:4f:87:a0:bb:cb: b2:9d:78:a1:a6:b3:17:d3:ea:b4:2a:c6:9b:13:07: 34:e7:77:e4:c9:c8:3a:4b:e0:bf:d9:11:28:14:f0: f2:5b:47:61:6f:aa:10:40:54:22:68:b3:11:ed:4a: c6:41:15:74:9b:da:f7:9e:47:e2:ef:a1:7a:70:4a: cb:0d:d1:0a:c1:74:b7:49:9e:80:d5:f4:18:fe:ba: 1f:1d:34:ea:b0:32:e4:c1:ba:83:fe:b8:df:64:ce: c5:03:c6:61:21:e0:d9:0d:64:36:90:dc:24:d1:57: 7a:7f:bd:6d:11:5f:40:26:b0:4e:3a:f6:fc:bd:7f: 44:2f:be:bf:37:f1:9e:36:35:39:a3:df:7b:0e:c3: 9a:e0:de:5c:96:b6:b4:70:53:ec:88:ef:b3:d2:95: 39:eb:95:3c:c4:c8:92:ab:33:ac:c8:32:5c:40:18: 28:54:01:b3:7e:ec:a3:a6:c3:28:02:d7:94:02:7e: a5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9B:CF:4C:01:B5:6F:87:B8:33:1B:90:ED:89:D9:B8:D1:91:B7:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f0:18:2a:35:7f:93:7a:3f:a3:a2:b3:14:ab:49:74:43:c6: cf:61:51:c7:9e:f8:cb:b3:f3:03:ba:b3:a5:00:76:45:6e:a2: 97:08:0d:34:d3:a1:0a:2f:48:ba:13:77:9a:87:52:4a:d3:b6: 47:39:3a:21:e9:89:91:d3:9c:30:57:d9:44:df:f9:13:e8:0b: e8:e1:ab:71:bd:4b:60:f1:e0:cb:b3:f9:e7:a1:73:4e:0d:be: 66:ff:9b:7d:b4:05:d7:7e:72:d6:50:08:5c:ee:33:1b:06:68: 8a:c8:cf:77:d7:aa:ee:2b:87:e0:a9:b4:57:9a:bb:c9:fd:a3: 4d:c9:4a:bc:73:fc:2c:20:a6:a3:8b:7e:6f:ee:a8:57:49:e3: 29:ad:6f:3b:f2:ee:f0:84:28:6f:cb:cb:0d:c2:5f:3e:b3:e4: 65:38:f3:57:c9:e0:03:16:d0:a2:89:83:a8:93:9e:3d:fe:99: e3:9f:4c:00:83:67:6e:b3:87:a4:48:ee:d2:29:29:db:c2:47: 84:ed:d0:5c:cb:cc:04:3d:f8:82:22:f5:2d:e8:d2:2f:10:08: 1e:a1:1a:a7:05:ab:3e:77:d6:07:c8:65:3e:ac:ca:5f:8b:f6: 59:0d:9b:81:53:9c:aa:1b:72:c8:ce:b2:f9:18:0e:53:ce:fe: a9:2d:fc:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUZQcx1ulZabjxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk MGJlODIzOWUtMjE3Yi00NDcyLTlkMWMtZGYyNTFjNTFjNmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv9jExlx275MJq6O/84ty0Zgf8neDTnJvvDF JFYmjhmDUtGReHu3M8R4h2XzVhBp2iRe+3ixv09T2kw84cmLStguqtL4T4egu8uy nXihprMX0+q0KsabEwc053fkycg6S+C/2REoFPDyW0dhb6oQQFQiaLMR7UrGQRV0 m9r3nkfi76F6cErLDdEKwXS3SZ6A1fQY/rofHTTqsDLkwbqD/rjfZM7FA8ZhIeDZ DWQ2kNwk0Vd6f71tEV9AJrBOOvb8vX9EL76/N/GeNjU5o997DsOa4N5clra0cFPs iO+z0pU565U8xMiSqzOsyDJcQBgoVAGzfuyjpsMoAteUAn6leQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAybz0wBtW+HuDMbkO2J2bjRkbe7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmQ1MjZhYWItMzgxNy0z MzY5LTg3MDQtZjVlMzI1OGJjY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbwGCo1f5N6P6OisxSrSXRDxs9hUcee+Muz8wO6s6UAdkVuopcIDTTT oQovSLoTd5qHUkrTtkc5OiHpiZHTnDBX2UTf+RPoC+jhq3G9S2Dx4Muz+eehc04N vmb/m320Bdd+ctZQCFzuMxsGaIrIz3fXqu4rh+CptFeau8n9o03JSrxz/CwgpqOL fm/uqFdJ4ymtbzvy7vCEKG/Lyw3CXz6z5GU481fJ4AMW0KKJg6iTnj3+meOfTACD Z26zh6RI7tIpKdvCR4Tt0FzLzAQ9+IIi9S3o0i8QCB6hGqcFqz531gfIZT6syl+L 9lkNm4FTnKobcsjOsvkYDlPO/qkt/Mo= -----END CERTIFICATE-----Generated at Fri Aug 21 02:30:15 2026 by rpki-client