$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa File: 3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa (raw, json) Hash identifier: 7GmU70cV4ZMS40rvyRptn++aDdjvdU5pKMv5A4mK1Rc= Subject key identifier: AB:72:28:36:25:7E:11:56:EA:20:D1:FD:0D:C6:6F:9E:0B:99:FA:4F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498885EC9B72D9AD6BFCCC80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.28.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:85:ec:9b:72:d9:ad:6b:fc:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0c09cd27-6a00-44fb-a341-91ba23859bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c4:26:0b:1c:31:11:26:91:99:a1:d4:75:35: a9:8f:f0:fb:e7:82:fc:91:25:03:1f:d4:99:01:cc: c2:60:25:d8:c1:11:d8:1b:6b:d4:fd:fa:6e:cc:a7: 76:7e:4e:5c:7c:f1:84:48:a5:02:79:69:fc:b9:48: ea:7d:a3:47:fe:47:3b:76:c6:03:35:53:a6:9b:21: 3f:36:43:a2:27:a3:88:70:37:d1:dc:f0:89:98:fe: 80:8b:ce:1b:cf:54:02:52:09:06:ff:07:3e:ae:a0: 43:40:03:d9:94:c8:02:ff:55:e9:a3:8d:f6:6e:df: 44:3a:1b:e9:5a:83:9a:cd:0a:b0:ac:03:18:ca:fa: f0:4d:43:45:32:1b:f2:b9:31:f7:10:ec:5f:7c:d6: 4b:a2:fd:9f:e2:17:0e:b9:2e:d1:53:26:c0:a4:cb: ea:69:96:34:3d:90:2a:8b:df:95:3f:14:9e:40:04: 83:15:7a:99:fd:0a:ff:85:89:93:5e:0e:42:f6:21: a3:24:c8:c8:5e:80:4d:dd:4f:d8:a0:cd:3d:18:a7: b0:f3:a1:78:24:fd:ba:54:bc:b9:62:ad:e5:41:a7: c6:6b:3d:88:97:c2:c5:f7:94:61:b9:ae:e0:15:12: 6e:7a:f6:cd:14:59:93:26:42:f4:a1:d5:a3:31:8a: 67:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:72:28:36:25:7E:11:56:EA:20:D1:FD:0D:C6:6F:9E:0B:99:FA:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ec113c8-8041-38f4-84fb-157f2fdf65d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:7d:69:1f:e0:09:cb:17:a6:98:14:6a:75:e5:8e:ad:1d:af: 6f:37:15:79:92:19:c1:94:97:66:da:cf:01:9f:c9:f7:8f:02: fa:c7:59:e2:a0:30:b5:3b:fa:66:10:68:d8:3c:d0:76:23:9a: c2:a1:3d:23:93:99:5e:c8:e1:61:dd:cc:a4:fe:a8:45:ed:08: ee:e3:9d:6d:59:3c:38:8b:e9:e5:50:43:d0:cf:55:1e:e0:70: 04:8a:9e:af:73:e2:c2:f5:cc:c4:97:01:82:95:64:07:47:5a: b2:50:11:38:33:ec:8f:12:9a:7e:0a:91:1b:41:7c:65:e8:ae: 96:14:0d:d7:a6:6a:a5:79:66:fd:f3:ba:41:f7:8f:09:72:ed: 96:55:33:77:8b:f4:a2:f7:5a:99:d0:f1:87:72:c6:6c:66:ad: 41:2f:bf:1f:82:f6:ad:35:df:56:8b:d3:1b:48:8d:8b:e2:32: 1d:70:0a:77:e0:55:ed:32:c3:72:e2:4b:a1:ea:fb:f6:9c:88: 68:46:a2:83:68:30:f2:db:0a:fc:7a:4a:41:52:a7:3e:28:a4: 35:d9:cf:b8:fd:73:61:42:68:ee:a0:e8:fc:46:67:4e:ad:9b: e3:71:a2:25:4b:79:bb:c1:d6:0b:6f:5e:90:08:36:bf:fa:56: f5:b2:c2:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiIXsm3LZrWv8zIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGMwOWNkMjctNmEwMC00NGZiLWEzNDEtOTFiYTIzODU5YmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8QmCxwxESaRmaHUdTWpj/D754L8kSUDH9SZ AczCYCXYwRHYG2vU/fpuzKd2fk5cfPGESKUCeWn8uUjqfaNH/kc7dsYDNVOmmyE/ NkOiJ6OIcDfR3PCJmP6Ai84bz1QCUgkG/wc+rqBDQAPZlMgC/1Xpo432bt9EOhvp WoOazQqwrAMYyvrwTUNFMhvyuTH3EOxffNZLov2f4hcOuS7RUybApMvqaZY0PZAq i9+VPxSeQASDFXqZ/Qr/hYmTXg5C9iGjJMjIXoBN3U/YoM09GKew86F4JP26VLy5 Yq3lQafGaz2Il8LF95Rhua7gFRJuevbNFFmTJkL0odWjMYpntQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtyKDYlfhFW6iDR/Q3Gb54LmfpPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2VjMTEzYzgtODA0MS0z OGY0LTg0ZmItMTU3ZjJmZGY2NWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV9aR/gCcsXppgUanXljq0dr283FXmSGcGUl2bazwGfyfePAvrHWeKg MLU7+mYQaNg80HYjmsKhPSOTmV7I4WHdzKT+qEXtCO7jnW1ZPDiL6eVQQ9DPVR7g cASKnq9z4sL1zMSXAYKVZAdHWrJQETgz7I8Smn4KkRtBfGXorpYUDdemaqV5Zv3z ukH3jwly7ZZVM3eL9KL3WpnQ8YdyxmxmrUEvvx+C9q0131aL0xtIjYviMh1wCnfg Ve0yw3LiS6Hq+/aciGhGooNoMPLbCvx6SkFSpz4opDXZz7j9c2FCaO6g6PxGZ06t m+NxoiVLebvB1gtvXpAINr/6VvWywoc= -----END CERTIFICATE-----Generated at Mon Oct 12 00:54:50 2026 by rpki-client