$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3aa2717e-93a2-3d2c-ad8c-85a8c48f67c2.roa File: 3aa2717e-93a2-3d2c-ad8c-85a8c48f67c2.roa (raw, json) Hash identifier: jMiKTCYOti/qyKup6/vR1z8fgd8XEY9Xif1uSmu6GHk= Subject key identifier: 44:A5:A7:D6:2B:4E:6A:1E:67:3D:52:86:71:BB:83:EA:60:78:1E:D9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F6AF2BC29F52E6DE70116CD40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3aa2717e-93a2-3d2c-ad8c-85a8c48f67c2.roa Signing time: Wed 07 Oct 2026 01:00:12 +0000 ROA not before: Wed 07 Oct 2026 01:00:12 +0000 ROA not after: Tue 05 Jan 2027 02:00:12 +0000 asID: 30036 IP address blocks: 173.22.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6a:f2:bc:29:f5:2e:6d:e7:01:16:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 7 01:00:12 2026 GMT Not After : Jan 5 02:00:12 2027 GMT Subject: CN=28797a6c-7fc2-405c-b5f4-ccf233e902f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:12:1e:98:f3:43:e1:fa:48:c0:e0:56:6e:07: 1b:41:32:72:6b:ad:b3:24:39:77:52:9d:ea:52:5a: 1a:19:9b:fc:02:d4:ce:b4:01:2a:8a:ca:70:1c:96: 63:6f:27:46:5e:16:f5:27:27:6f:bc:91:82:38:84: 82:4f:d9:74:51:62:88:bf:41:28:e0:b9:d8:1c:72: 74:a2:7a:66:47:1e:0b:66:21:51:cd:fd:90:cd:03: 3d:af:41:68:69:eb:2f:51:d0:3d:b2:02:5b:a7:86: 31:f4:38:20:7f:55:fa:c5:cf:ad:ac:e1:a8:11:8d: ba:71:cd:3d:62:1d:2a:d3:c8:15:b3:53:43:7f:5a: 3f:13:29:03:d3:52:29:28:34:da:27:1a:fc:c5:7c: 2c:ec:e5:ce:99:f0:88:4f:8e:22:f6:fd:ee:7c:ac: 6d:ac:de:14:da:ad:a0:82:e0:63:f2:ed:b7:c5:d7: 69:ee:b0:be:b1:40:df:35:b5:1b:81:62:ac:fe:fb: 59:6e:c8:c5:8c:be:29:fe:53:02:c3:30:87:b5:32: 1c:4a:33:b9:0c:d3:06:31:e2:1c:90:45:85:72:05: 79:65:63:3d:62:05:b0:4d:c9:88:45:df:ae:69:9b: c9:cf:23:14:e8:75:37:7c:3a:42:b1:15:5d:99:d1: fc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A5:A7:D6:2B:4E:6A:1E:67:3D:52:86:71:BB:83:EA:60:78:1E:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3aa2717e-93a2-3d2c-ad8c-85a8c48f67c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5a:69:15:8a:91:50:c1:36:b7:92:37:e3:fd:59:11:99:8c: dc:06:33:d7:c2:45:b5:10:f7:d8:39:2d:36:52:79:9e:54:11: d4:59:60:92:b5:ca:20:9c:9f:51:ad:71:50:25:67:aa:1c:38: 30:c8:d1:dd:c2:e8:60:ca:c3:76:b9:d3:e0:e5:3f:68:73:f6: ca:d1:34:fd:c6:02:08:62:54:e6:5a:77:4d:b9:2c:43:16:9c: 27:ac:a6:fe:8d:24:fc:c0:5b:a1:23:a3:aa:4f:7a:a6:0c:96: 07:3b:e2:1d:e3:6c:e4:80:5d:72:07:b6:90:65:9d:26:41:50: 07:39:c9:85:e1:54:ff:47:5e:42:4f:29:99:fd:c7:75:0a:ee: 8f:53:61:b4:a8:92:67:57:a3:09:95:b3:0c:6f:22:66:53:1c: c0:b1:ca:2d:ba:99:6f:f7:17:12:6e:37:9f:2b:29:66:1a:a9: d7:bf:d7:ac:74:5f:56:1e:ea:43:47:ae:e5:0b:42:a8:e1:c4: 4c:17:9a:db:3a:4f:86:a9:66:04:1a:81:9e:db:47:e8:ce:74: 47:f5:eb:b5:84:d0:9c:40:47:a4:96:d0:23:71:5b:aa:44:a2: 3b:df:91:2d:77:cd:d6:b0:7a:7a:d8:4d:05:c8:cb:81:c4:2d: 83:a6:67:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9q8rwp9S5t5wEWzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAwNzAxMDAxMloXDTI3MDEwNTAyMDAxMlowLzEtMCsGA1UEAxMk Mjg3OTdhNmMtN2ZjMi00MDVjLWI1ZjQtY2NmMjMzZTkwMmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRIemPND4fpIwOBWbgcbQTJya62zJDl3Up3q UloaGZv8AtTOtAEqispwHJZjbydGXhb1JydvvJGCOISCT9l0UWKIv0Eo4LnYHHJ0 onpmRx4LZiFRzf2QzQM9r0FoaesvUdA9sgJbp4Yx9Dggf1X6xc+trOGoEY26cc09 Yh0q08gVs1NDf1o/EykD01IpKDTaJxr8xXws7OXOmfCIT44i9v3ufKxtrN4U2q2g guBj8u23xddp7rC+sUDfNbUbgWKs/vtZbsjFjL4p/lMCwzCHtTIcSjO5DNMGMeIc kEWFcgV5ZWM9YgWwTcmIRd+uaZvJzyMU6HU3fDpCsRVdmdH8WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESlp9YrTmoeZz1ShnG7g+pgeB7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2FhMjcxN2UtOTNhMi0z ZDJjLWFkOGMtODVhOGM0OGY2N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdaaRWKkVDBNreSN+P9WRGZjNwGM9fCRbUQ99g5LTZSeZ5UEdRZYJK1 yiCcn1GtcVAlZ6ocODDI0d3C6GDKw3a50+DlP2hz9srRNP3GAghiVOZad025LEMW nCespv6NJPzAW6Ejo6pPeqYMlgc74h3jbOSAXXIHtpBlnSZBUAc5yYXhVP9HXkJP KZn9x3UK7o9TYbSokmdXowmVswxvImZTHMCxyi26mW/3FxJuN58rKWYaqde/16x0 X1Ye6kNHruULQqjhxEwXmts6T4apZgQagZ7bR+jOdEf167WE0JxAR6SW0CNxW6pE ojvfkS13zdawenrYTQXIy4HELYOmZzQ= -----END CERTIFICATE-----Generated at Tue Oct 13 00:50:45 2026 by rpki-client