$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ffbe976-8677-3a5e-9ea6-c14593f96e4e.roa File: 4ffbe976-8677-3a5e-9ea6-c14593f96e4e.roa (raw, json) Hash identifier: iPKNd0F3mVwtQmbZqIySy0nP7IS8RzsRF9DnbLVU7XI= Subject key identifier: 22:5B:DA:1B:0F:00:F0:59:F6:4C:DA:A8:48:2D:A8:A5:7B:01:46:C5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F7FD525E246FC47442AE20300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ffbe976-8677-3a5e-9ea6-c14593f96e4e.roa Signing time: Wed 14 Oct 2026 12:32:35 +0000 ROA not before: Wed 14 Oct 2026 12:32:35 +0000 ROA not after: Tue 12 Jan 2027 13:32:35 +0000 asID: 19905 IP address blocks: 173.28.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:d5:25:e2:46:fc:47:44:2a:e2:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 14 12:32:35 2026 GMT Not After : Jan 12 13:32:35 2027 GMT Subject: CN=4676f62a-4725-4b61-8ce0-df2d694920fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c2:12:26:c2:74:b8:2b:22:b9:a6:12:be:89: b5:23:aa:54:d6:e4:d5:f2:69:7a:26:4b:1f:01:9c: 85:4d:2c:87:12:be:08:34:cb:c2:77:f6:c1:a9:2e: 46:d7:60:c8:29:df:6f:f5:c0:12:64:9d:a7:f4:c5: 55:5c:fd:2d:2c:7e:9c:98:ed:1f:1d:11:97:cd:ab: fb:6d:6a:51:67:fd:a9:b3:b5:7a:11:34:92:4b:47: 9c:ab:cd:43:34:25:fe:67:fb:86:6d:dc:94:02:58: f4:4a:ce:c3:39:7b:a3:19:bb:66:a6:a7:7a:ee:67: 0b:29:83:45:f4:44:e8:b6:e4:c3:c4:c7:95:c3:7f: 06:aa:48:54:8f:01:9e:ba:5f:11:87:2e:ed:f6:cb: 22:bf:af:71:18:9a:75:02:20:46:20:44:15:04:cf: 06:37:86:72:e5:42:44:02:c4:d5:e1:50:82:10:5a: 60:6e:09:21:49:1f:0a:58:00:35:84:27:2c:84:e7: c1:72:9b:5a:c5:b3:f2:18:a2:c6:8a:8d:b9:dd:9e: 89:9c:a8:b7:bc:25:d1:34:b0:89:0e:8a:4e:a2:20: 4b:4e:7e:90:95:d0:80:4f:e1:ca:f6:4f:18:82:07: 95:fe:a1:84:8a:0a:0f:1c:72:a5:8c:84:b4:00:6e: 8e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5B:DA:1B:0F:00:F0:59:F6:4C:DA:A8:48:2D:A8:A5:7B:01:46:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ffbe976-8677-3a5e-9ea6-c14593f96e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b7:d6:ab:1a:70:ce:af:c7:26:7c:5b:7b:a5:e2:07:cd:74: 03:6e:6c:0c:eb:ee:f2:4d:69:fb:27:3b:19:cf:2b:3f:74:66: 33:b5:9a:ea:be:75:ca:0a:43:38:a7:3b:35:31:d5:af:87:20: ee:c9:c1:15:87:ad:a7:f3:46:b6:18:6f:17:27:88:96:4e:b7: 47:d4:88:1e:d7:39:f4:51:ab:01:e0:a3:ca:39:79:e2:93:25: 51:ce:e4:e6:36:e6:f6:25:84:d0:67:47:4b:ff:a4:0f:7d:59: 4d:7d:4c:a5:7c:df:31:db:c2:71:f5:a3:1d:3c:89:5c:54:3a: d4:be:bb:61:36:12:4f:4a:f3:74:16:d9:7e:90:d7:1c:48:0c: cb:42:5c:8d:a0:02:7c:95:76:4d:1a:29:81:80:29:ef:1d:fe: 6f:79:52:d3:35:9c:21:12:fb:e9:a0:af:8a:2c:c0:42:07:82: 59:cc:21:47:68:a9:80:43:ba:d7:bb:b0:27:72:e0:e0:9b:7f: 30:06:c7:64:77:2f:ff:b2:dd:76:ec:1c:96:bd:7c:29:d7:ea: d9:11:1d:0a:fc:4b:41:e4:c8:b6:f2:1c:c6:10:2b:99:db:ae: 54:39:f8:65:f0:29:6e:ec:ee:11:11:70:36:e8:7e:fb:86:9b: ae:f5:c5:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/1SXiRvxHRCriAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAxNDEyMzIzNVoXDTI3MDExMjEzMzIzNVowLzEtMCsGA1UEAxMk NDY3NmY2MmEtNDcyNS00YjYxLThjZTAtZGYyZDY5NDkyMGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cISJsJ0uCsiuaYSvom1I6pU1uTV8ml6Jksf AZyFTSyHEr4INMvCd/bBqS5G12DIKd9v9cASZJ2n9MVVXP0tLH6cmO0fHRGXzav7 bWpRZ/2ps7V6ETSSS0ecq81DNCX+Z/uGbdyUAlj0Ss7DOXujGbtmpqd67mcLKYNF 9ETotuTDxMeVw38GqkhUjwGeul8Rhy7t9ssiv69xGJp1AiBGIEQVBM8GN4Zy5UJE AsTV4VCCEFpgbgkhSR8KWAA1hCcshOfBcptaxbPyGKLGio253Z6JnKi3vCXRNLCJ DopOoiBLTn6QldCAT+HK9k8YggeV/qGEigoPHHKljIS0AG6OrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJb2hsPAPBZ9kzaqEgtqKV7AUbFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGZmYmU5NzYtODY3Ny0z YTVlLTllYTYtYzE0NTkzZjk2ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa31qsacM6vxyZ8W3ul4gfNdANubAzr7vJNafsnOxnPKz90ZjO1muq+ dcoKQzinOzUx1a+HIO7JwRWHrafzRrYYbxcniJZOt0fUiB7XOfRRqwHgo8o5eeKT JVHO5OY25vYlhNBnR0v/pA99WU19TKV83zHbwnH1ox08iVxUOtS+u2E2Ek9K83QW 2X6Q1xxIDMtCXI2gAnyVdk0aKYGAKe8d/m95UtM1nCES++mgr4oswEIHglnMIUdo qYBDute7sCdy4OCbfzAGx2R3L/+y3XbsHJa9fCnX6tkRHQr8S0HkyLbyHMYQK5nb rlQ5+GXwKW7s7hERcDbofvuGm671xZo= -----END CERTIFICATE-----Generated at Tue Oct 20 20:44:30 2026 by rpki-client