$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49857a90-f490-31a1-a4af-0d9678a70395.roa File: 49857a90-f490-31a1-a4af-0d9678a70395.roa (raw, json) Hash identifier: aTSu9VtwY8c18oQyFxo0NvG0rdJ7BXHQ6ZR/GWtA+6w= Subject key identifier: C1:63:F8:EA:CB:74:D9:5F:AB:5C:AC:C0:21:B1:0C:FF:C8:A8:01:37 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D67E3D8403563716866C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49857a90-f490-31a1-a4af-0d9678a70395.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.29.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:67:e3:d8:40:35:63:71:68:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=377219b1-1182-4c21-bb38-344799ddfbae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:53:3e:c9:a1:1a:fd:81:f5:a4:60:2f:66:ab: 0b:cf:74:7a:d7:75:55:c3:d9:e4:98:1d:d3:22:b0: 73:06:ab:21:8e:b6:ad:94:f8:2f:be:e8:61:12:ba: 98:c8:32:76:4d:af:0a:09:cb:48:70:05:c3:50:e8: 3f:e1:0b:ae:cc:c6:d3:9b:5a:27:d1:f2:43:1c:94: 78:4e:a9:43:d2:d4:dd:5e:74:52:48:10:d4:12:91: 76:ac:70:a8:5b:3a:e9:06:72:6d:bf:cc:14:42:9a: 1c:1c:17:ef:63:10:72:0f:ec:53:79:ac:50:db:50: f6:d3:66:a9:b5:48:6a:f8:30:e9:b5:da:5a:3c:3e: 08:d1:d6:d6:8e:69:f0:9a:b8:fc:28:6e:d1:bf:13: 76:35:14:52:ab:a8:33:ff:fc:fd:6e:6d:92:f7:04: e2:b7:a2:02:37:ed:89:6f:7c:fd:93:e4:34:bf:9e: 2e:ef:99:fc:48:9f:dd:84:82:5d:2b:06:90:d9:d4: 86:73:c7:af:fd:0f:5f:16:a8:fc:18:ac:4e:39:ff: 06:eb:ca:3b:58:e8:53:0e:dc:23:28:66:0f:a5:c6: 81:77:f2:9b:b2:56:24:62:0e:72:32:33:d5:d4:b4: 11:00:4e:5d:4a:e9:f3:98:90:06:cd:fa:b6:81:7d: cb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:63:F8:EA:CB:74:D9:5F:AB:5C:AC:C0:21:B1:0C:FF:C8:A8:01:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49857a90-f490-31a1-a4af-0d9678a70395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c9:fa:e3:3e:d3:89:13:3a:3b:83:06:17:5e:8a:a7:12:15: aa:5c:c3:53:60:08:fb:0a:64:19:b6:82:b1:6c:9c:6a:cc:ea: 4f:54:b4:10:87:21:57:b8:52:a8:bc:c9:62:b6:e5:c8:f1:17: 3a:d3:29:5d:d1:af:d2:41:df:92:07:4e:40:b1:ea:14:5b:bf: 8a:2e:59:01:d2:30:82:3e:45:fb:dd:19:69:95:16:b6:71:60: f2:52:b7:d6:e6:9d:a8:6a:20:eb:ef:60:65:77:cd:1a:f9:f5: 92:a8:ee:e8:b5:0f:07:2e:79:c5:4a:59:f0:4c:b1:68:22:6c: fc:fa:ac:a6:21:55:04:b7:ed:c8:28:93:5a:29:a7:8b:9b:d1: 29:76:ba:af:3a:12:64:d3:1c:f7:05:74:30:90:94:23:98:09: b8:92:48:81:14:63:db:b3:a6:2e:23:41:e1:39:d7:ad:1a:85: e6:9e:df:b9:ec:93:45:e9:18:06:0e:e2:82:8f:36:19:ca:2c: 26:20:0f:7b:cf:65:f8:3d:fb:cc:e7:b4:27:9c:97:06:39:5a: c2:64:ec:11:8f:a5:ae:a4:16:78:7e:f0:d2:0f:62:f9:95:0a: 80:dc:45:7d:9d:e6:18:ab:85:1c:8a:7a:a5:59:2e:0c:64:9e: 27:9a:4e:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWfj2EA1Y3FoZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Mzc3MjE5YjEtMTE4Mi00YzIxLWJiMzgtMzQ0Nzk5ZGRmYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFM+yaEa/YH1pGAvZqsLz3R613VVw9nkmB3T IrBzBqshjratlPgvvuhhErqYyDJ2Ta8KCctIcAXDUOg/4QuuzMbTm1on0fJDHJR4 TqlD0tTdXnRSSBDUEpF2rHCoWzrpBnJtv8wUQpocHBfvYxByD+xTeaxQ21D202ap tUhq+DDptdpaPD4I0dbWjmnwmrj8KG7RvxN2NRRSq6gz//z9bm2S9wTit6ICN+2J b3z9k+Q0v54u75n8SJ/dhIJdKwaQ2dSGc8ev/Q9fFqj8GKxOOf8G68o7WOhTDtwj KGYPpcaBd/KbslYkYg5yMjPV1LQRAE5dSunzmJAGzfq2gX3L4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFj+OrLdNlfq1yswCGxDP/IqAE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDk4NTdhOTAtZjQ5MC0z MWExLWE0YWYtMGQ5Njc4YTcwMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITJ+uM+04kTOjuDBhdeiqcSFapcw1NgCPsKZBm2grFsnGrM6k9UtBCH IVe4Uqi8yWK25cjxFzrTKV3Rr9JB35IHTkCx6hRbv4ouWQHSMII+RfvdGWmVFrZx YPJSt9bmnahqIOvvYGV3zRr59ZKo7ui1DwcuecVKWfBMsWgibPz6rKYhVQS37cgo k1opp4ub0Sl2uq86EmTTHPcFdDCQlCOYCbiSSIEUY9uzpi4jQeE5160aheae37ns k0XpGAYO4oKPNhnKLCYgD3vPZfg9+8zntCeclwY5WsJk7BGPpa6kFnh+8NIPYvmV CoDcRX2d5hirhRyKeqVZLgxknieaTlc= -----END CERTIFICATE-----Generated at Mon Oct 12 04:48:49 2026 by rpki-client