$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/607a34b6-99c1-3c14-91b8-97106f5c18b3.roa File: 607a34b6-99c1-3c14-91b8-97106f5c18b3.roa (raw, json) Hash identifier: nTrAOarsweVTcAjgCxbZ23QWYrkvzEsIskB/QsiAhNs= Subject key identifier: A8:B3:6C:0C:CF:1C:C1:2F:12:1C:22:69:A3:2C:07:FB:2F:4D:87:5C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F7E7DA2B59283B4EE5AC1DFD1 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/607a34b6-99c1-3c14-91b8-97106f5c18b3.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 19905 IP address blocks: 173.28.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:a2:b5:92:83:b4:ee:5a:c1:df:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=e66b04fa-109d-48ee-b951-c026723a4bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ae:3f:2b:09:45:cf:7b:f3:d0:99:15:a9:c6: 5d:07:11:0e:d4:55:55:c5:e7:79:54:f3:f0:c4:fa: 7d:e3:c6:7c:52:6f:31:f1:ed:e0:89:81:e7:94:e6: 25:82:4d:3a:97:47:f8:b5:25:80:42:9c:34:6e:69: 03:6c:b2:e5:bf:03:ba:32:b5:50:0d:07:f4:aa:e5: d1:62:fd:c2:c3:ab:5d:c9:53:95:d5:0d:3f:68:e1: b9:b1:f3:62:45:df:41:63:08:b9:f4:f1:82:c6:c1: 60:1b:37:e5:10:d6:d3:1e:a5:80:34:f1:ba:24:5a: 3c:40:db:62:48:45:23:e0:bd:fc:0f:c0:e0:1a:7a: d7:ea:ff:4a:15:53:95:aa:ef:9c:62:63:02:55:5e: 92:fd:19:af:c9:cb:61:54:cf:72:42:b2:98:bf:a2: 72:85:0f:34:fe:ce:42:2a:78:cd:91:ed:bd:32:a3: 9d:40:e2:72:e4:0d:6c:44:12:99:e1:10:59:f2:5d: 64:b2:0b:18:f7:8d:ad:88:23:51:36:b9:65:60:1b: 4e:a3:8f:81:67:57:29:14:d2:66:82:70:43:c4:51: f4:d4:ea:32:c3:87:84:37:b7:46:75:b7:8b:ea:60: 84:87:7f:d1:e3:74:70:b9:38:a6:83:26:06:56:1e: f2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B3:6C:0C:CF:1C:C1:2F:12:1C:22:69:A3:2C:07:FB:2F:4D:87:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/607a34b6-99c1-3c14-91b8-97106f5c18b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e0:f2:a1:65:da:5a:1f:08:cb:48:0d:e1:8f:00:98:9d:33: 4e:d3:e9:a3:68:bb:8d:2a:a7:46:5a:21:ae:9d:74:59:da:21: 7b:b4:cf:dd:59:62:d0:6c:6e:0a:b8:ca:d8:82:26:e8:64:fd: fb:e7:97:8d:49:cc:85:44:41:06:4f:c7:bf:a3:64:ad:0d:d6: 6c:4c:ec:14:a1:6d:57:1a:50:10:0c:7d:b2:f3:92:6a:c5:59: 25:78:6c:07:ef:73:27:30:67:3f:7b:21:37:f2:55:bd:95:09: 60:ce:df:c2:c6:5b:da:f9:22:7a:bd:9e:46:97:5d:1d:79:7d: b5:c8:ec:20:ef:f5:9f:8b:83:89:55:05:b5:7e:27:ef:10:c0: 98:f2:46:47:6d:ed:03:60:38:e9:bc:4e:a8:7e:cf:53:87:89: b6:0e:c7:7d:29:c8:a0:52:b1:ed:c7:a8:35:45:12:2a:eb:64: 76:8e:3b:d7:a2:54:c9:e5:8f:51:ba:da:c3:90:e1:25:31:67: 3f:68:1e:47:00:10:4e:0f:25:3d:ef:4c:0b:87:40:ae:43:2c: a6:4e:a3:99:67:dd:58:fe:45:94:a1:f5:1f:fb:e1:38:2b:00: 1a:c7:ee:e4:53:08:b2:83:51:01:98:62:37:3f:2b:20:16:36: c9:33:de:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+faK1koO07lrB39EwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTY2YjA0ZmEtMTA5ZC00OGVlLWI5NTEtYzAyNjcyM2E0YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh64/KwlFz3vz0JkVqcZdBxEO1FVVxed5VPPw xPp948Z8Um8x8e3giYHnlOYlgk06l0f4tSWAQpw0bmkDbLLlvwO6MrVQDQf0quXR Yv3Cw6tdyVOV1Q0/aOG5sfNiRd9BYwi59PGCxsFgGzflENbTHqWANPG6JFo8QNti SEUj4L38D8DgGnrX6v9KFVOVqu+cYmMCVV6S/RmvycthVM9yQrKYv6JyhQ80/s5C KnjNke29MqOdQOJy5A1sRBKZ4RBZ8l1ksgsY942tiCNRNrllYBtOo4+BZ1cpFNJm gnBDxFH01Ooyw4eEN7dGdbeL6mCEh3/R43RwuTimgyYGVh7ybwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKizbAzPHMEvEhwiaaMsB/svTYdcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjA3YTM0YjYtOTljMS0z YzE0LTkxYjgtOTcxMDZmNWMxOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITg8qFl2lofCMtIDeGPAJidM07T6aNou40qp0ZaIa6ddFnaIXu0z91Z YtBsbgq4ytiCJuhk/fvnl41JzIVEQQZPx7+jZK0N1mxM7BShbVcaUBAMfbLzkmrF WSV4bAfvcycwZz97ITfyVb2VCWDO38LGW9r5Inq9nkaXXR15fbXI7CDv9Z+Lg4lV BbV+J+8QwJjyRkdt7QNgOOm8Tqh+z1OHibYOx30pyKBSse3HqDVFEirrZHaOO9ei VMnlj1G62sOQ4SUxZz9oHkcAEE4PJT3vTAuHQK5DLKZOo5ln3Vj+RZSh9R/74Tgr ABrH7uRTCLKDUQGYYjc/KyAWNskz3kY= -----END CERTIFICATE-----Generated at Wed Oct 14 13:15:56 2026 by rpki-client