$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/327186aa-62bc-351f-89fa-15b28fff6f9b.roa File: 327186aa-62bc-351f-89fa-15b28fff6f9b.roa (raw, json) Hash identifier: klNOnOgJGOitzXMPtttpVS7U0DaevU00BCXSBt2AQCk= Subject key identifier: D7:33:6E:0E:94:5D:27:07:67:2A:50:B5:61:7E:B8:F4:09:49:E0:7E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F7FD51C8B0FEFA077BC610D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/327186aa-62bc-351f-89fa-15b28fff6f9b.roa Signing time: Wed 14 Oct 2026 12:32:30 +0000 ROA not before: Wed 14 Oct 2026 12:32:30 +0000 ROA not after: Tue 12 Jan 2027 13:32:30 +0000 asID: 19905 IP address blocks: 173.24.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:d5:1c:8b:0f:ef:a0:77:bc:61:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 14 12:32:30 2026 GMT Not After : Jan 12 13:32:30 2027 GMT Subject: CN=e2bf1d10-90d6-404a-8a4b-bf35653c2c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c8:ed:fb:34:23:e0:a7:c2:b1:42:b5:2f:91: 55:de:e1:82:de:2c:05:dd:99:f0:d9:af:18:19:c6: 9f:a1:4d:05:43:18:5f:4d:58:15:4b:d9:d0:24:09: 40:05:39:27:56:bc:73:4b:ba:9b:28:05:bf:6d:bc: b6:90:30:e4:ba:56:1c:ff:2b:88:8e:b5:3a:d8:08: ca:fa:45:9f:dd:27:c3:e6:69:ce:f5:c6:b9:57:34: 9d:57:c5:66:7f:07:33:f7:05:a9:5d:e7:38:84:25: f2:bd:5b:2e:5f:65:cc:d6:57:14:e7:9c:14:2e:10: 45:a1:f7:26:c5:95:5e:0d:92:a4:dc:6f:92:c3:a1: 6c:14:8d:9b:17:89:80:5b:69:7d:68:0a:09:55:c2: d0:8f:81:0e:bb:61:f4:0b:44:a1:26:73:d6:3c:f6: f0:aa:53:94:36:ce:f2:78:2d:79:2d:e4:1b:99:89: 36:a2:75:72:61:81:20:9f:7c:c8:a9:18:f1:26:6c: 1b:e5:95:76:e9:dd:7f:e7:6c:81:2a:bc:fb:89:7b: 84:0c:46:8e:6b:de:56:52:4d:56:7f:4e:48:61:ec: cc:c8:ab:b0:81:96:56:38:93:e8:a5:a0:57:2f:f6: c0:53:98:6e:e1:da:5f:a0:4c:cc:95:1e:44:8a:69: 2d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:33:6E:0E:94:5D:27:07:67:2A:50:B5:61:7E:B8:F4:09:49:E0:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/327186aa-62bc-351f-89fa-15b28fff6f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:22:15:a9:30:74:f7:00:46:07:0d:84:8b:7e:31:4a:7c:31: 62:0b:77:bd:fc:d3:63:92:ec:e2:1b:75:db:e9:07:b3:9e:1e: ef:6a:02:fb:c8:f8:c5:75:23:6f:8e:63:f7:ff:2e:bd:b3:e3: d0:a6:a4:78:32:5c:f9:8d:d5:a5:14:ca:a0:44:45:7a:32:c8: 8d:8a:e9:ae:79:4d:8e:9a:b9:e5:a2:e6:d9:c4:52:36:78:a2: ab:85:c8:2b:03:bd:9d:23:c7:81:85:f3:47:a0:c0:52:8b:ac: 8c:c2:69:07:0e:7c:01:6a:70:41:c6:10:57:9a:d9:88:fb:92: d8:96:5b:55:ff:2d:f8:39:6f:37:86:bf:4d:10:39:7a:cf:74: 7b:f7:d4:ad:b5:4a:f7:5e:2c:9d:e9:b6:6a:2b:3a:44:b1:61: 30:9c:7b:e1:df:69:01:c1:8e:81:c7:9f:6c:7e:21:8b:8e:fc: 68:cd:62:ad:f6:a1:c7:39:4c:ee:63:e2:da:71:0f:e0:0b:6e: f3:0a:84:d1:10:02:ec:77:ae:37:73:35:3a:48:c0:05:55:98: 7b:62:a5:e2:34:a1:ed:8c:e1:f7:93:c9:72:5b:48:c4:a7:73: 2f:82:67:26:01:c3:8f:49:b6:9b:d6:29:97:ce:5a:c4:ec:7f: b1:25:71:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/1RyLD++gd7xhDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAxNDEyMzIzMFoXDTI3MDExMjEzMzIzMFowLzEtMCsGA1UEAxMk ZTJiZjFkMTAtOTBkNi00MDRhLThhNGItYmYzNTY1M2MyYzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksjt+zQj4KfCsUK1L5FV3uGC3iwF3Znw2a8Y GcafoU0FQxhfTVgVS9nQJAlABTknVrxzS7qbKAW/bby2kDDkulYc/yuIjrU62AjK +kWf3SfD5mnO9ca5VzSdV8Vmfwcz9wWpXec4hCXyvVsuX2XM1lcU55wULhBFofcm xZVeDZKk3G+Sw6FsFI2bF4mAW2l9aAoJVcLQj4EOu2H0C0ShJnPWPPbwqlOUNs7y eC15LeQbmYk2onVyYYEgn3zIqRjxJmwb5ZV26d1/52yBKrz7iXuEDEaOa95WUk1W f05IYezMyKuwgZZWOJPopaBXL/bAU5hu4dpfoEzMlR5EimktpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNczbg6UXScHZypQtWF+uPQJSeB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzI3MTg2YWEtNjJiYy0z NTFmLTg5ZmEtMTViMjhmZmY2ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEiFakwdPcARgcNhIt+MUp8MWILd73802OS7OIbddvpB7OeHu9qAvvI +MV1I2+OY/f/Lr2z49CmpHgyXPmN1aUUyqBERXoyyI2K6a55TY6aueWi5tnEUjZ4 oquFyCsDvZ0jx4GF80egwFKLrIzCaQcOfAFqcEHGEFea2Yj7ktiWW1X/Lfg5bzeG v00QOXrPdHv31K21SvdeLJ3ptmorOkSxYTCce+HfaQHBjoHHn2x+IYuO/GjNYq32 occ5TO5j4tpxD+ALbvMKhNEQAux3rjdzNTpIwAVVmHtipeI0oe2M4feTyXJbSMSn cy+CZyYBw49JtpvWKZfOWsTsf7ElcQI= -----END CERTIFICATE-----Generated at Thu Oct 15 19:49:06 2026 by rpki-client