$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b04ff45-474f-3fad-87d3-4c8d99c77d1b.roa File: 8b04ff45-474f-3fad-87d3-4c8d99c77d1b.roa (raw, json) Hash identifier: 1m+tu1/mWXHdCaEnHD3T8hY7vCAoWOsnuSEVUkCXN6U= Subject key identifier: 34:1D:E3:8A:E6:52:07:40:8C:4B:62:CE:06:E1:25:ED:FF:45:09:5A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F7FD527BD211CEF1E4E310860 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b04ff45-474f-3fad-87d3-4c8d99c77d1b.roa Signing time: Wed 14 Oct 2026 12:32:35 +0000 ROA not before: Wed 14 Oct 2026 12:32:35 +0000 ROA not after: Tue 12 Jan 2027 13:32:35 +0000 asID: 19905 IP address blocks: 173.28.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:d5:27:bd:21:1c:ef:1e:4e:31:08:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 14 12:32:35 2026 GMT Not After : Jan 12 13:32:35 2027 GMT Subject: CN=e7607042-ebab-4ff8-86fc-eeabd38e63cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:20:08:84:9a:1c:d1:73:dd:ea:84:08:0d:68: 77:ac:29:61:07:4a:1a:4d:fa:51:d3:47:c6:57:77: 24:aa:4e:16:92:0e:61:f7:58:cd:08:81:ef:c1:f3: 99:23:7a:ae:d8:69:89:ee:26:6e:11:49:63:b4:37: ae:5b:15:54:15:b5:04:6a:63:b8:f0:59:60:fa:7b: 1b:b4:08:43:1d:a6:ad:aa:54:19:21:c3:20:72:e3: 5e:94:50:28:0b:4e:3e:23:2f:c4:98:28:58:35:03: 2c:9d:99:6c:e9:3e:3c:10:ec:9e:b4:b8:b2:03:8a: 2a:aa:0a:86:4b:e4:77:30:54:07:d2:ab:3b:02:02: 75:96:2e:6d:75:b4:d5:e4:95:1c:66:2b:e3:85:1b: 55:67:7d:8a:c2:0d:a2:43:9e:76:6e:dc:74:fc:a0: 5f:65:4c:db:a7:a0:97:66:7e:09:90:71:53:9a:66: 0d:5f:da:e9:70:88:37:41:4b:7e:48:e6:f4:d5:01: 3c:94:f8:02:cb:c4:f3:4c:35:f8:e2:fc:75:3d:36: 9a:d9:4c:91:83:c3:4c:de:e8:44:26:55:21:77:8d: 9c:3c:f2:04:9c:9c:b5:79:91:23:a8:b3:d9:12:bf: 1f:50:d3:07:13:4d:f3:7c:ad:77:18:c9:f1:ff:51: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1D:E3:8A:E6:52:07:40:8C:4B:62:CE:06:E1:25:ED:FF:45:09:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b04ff45-474f-3fad-87d3-4c8d99c77d1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:88:29:65:61:59:9e:2f:56:4b:47:d7:2a:e3:b4:f0:bf:37: 70:c2:2d:69:93:9d:d7:0e:ef:45:ad:84:6d:8e:60:83:ef:c1: 53:f4:58:88:5c:da:cc:9f:2f:7c:64:80:8d:80:71:3e:f4:ba: fb:ed:63:b3:21:1e:d8:2e:e1:ef:5f:66:a3:20:b1:0f:15:21: 15:c7:1d:36:f1:dd:ed:76:07:a9:ab:2d:1f:39:95:1e:ab:7c: 6a:ce:c7:cb:e0:a4:14:7a:e1:f7:17:1a:4e:88:20:90:6e:42: a2:af:d3:e3:48:2d:b5:e7:a5:c4:4a:ee:4d:a0:8d:45:cb:08: c6:55:b9:a5:2b:4d:04:63:64:cc:ab:69:0c:9b:9b:13:06:b0: 1e:7d:a2:79:c7:0d:07:95:73:79:af:58:23:de:5b:a4:15:49: 36:ef:4d:d7:39:00:1f:66:77:d3:f4:06:f0:ac:28:e3:a1:2d: a1:99:e5:f7:cc:83:83:17:e0:54:e1:20:a0:fc:77:37:c5:dd: 10:ac:e7:3a:97:21:38:d2:73:69:6a:06:6b:22:95:a6:49:8b: 45:ed:e1:9a:54:ba:a0:93:a3:b0:7f:d2:e5:d0:ed:85:f2:12: 0b:c7:d5:a7:0a:e0:57:36:74:17:f9:6d:57:f9:19:8d:18:78: 79:48:14:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/1Se9IRzvHk4xCGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAxNDEyMzIzNVoXDTI3MDExMjEzMzIzNVowLzEtMCsGA1UEAxMk ZTc2MDcwNDItZWJhYi00ZmY4LTg2ZmMtZWVhYmQzOGU2M2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSAIhJoc0XPd6oQIDWh3rClhB0oaTfpR00fG V3ckqk4Wkg5h91jNCIHvwfOZI3qu2GmJ7iZuEUljtDeuWxVUFbUEamO48Flg+nsb tAhDHaatqlQZIcMgcuNelFAoC04+Iy/EmChYNQMsnZls6T48EOyetLiyA4oqqgqG S+R3MFQH0qs7AgJ1li5tdbTV5JUcZivjhRtVZ32Kwg2iQ552btx0/KBfZUzbp6CX Zn4JkHFTmmYNX9rpcIg3QUt+SOb01QE8lPgCy8TzTDX44vx1PTaa2UyRg8NM3uhE JlUhd42cPPIEnJy1eZEjqLPZEr8fUNMHE03zfK13GMnx/1E9YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQd44rmUgdAjEtizgbhJe3/RQlaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGIwNGZmNDUtNDc0Zi0z ZmFkLTg3ZDMtNGM4ZDk5Yzc3ZDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiIKWVhWZ4vVktH1yrjtPC/N3DCLWmTndcO70WthG2OYIPvwVP0WIhc 2syfL3xkgI2AcT70uvvtY7MhHtgu4e9fZqMgsQ8VIRXHHTbx3e12B6mrLR85lR6r fGrOx8vgpBR64fcXGk6IIJBuQqKv0+NILbXnpcRK7k2gjUXLCMZVuaUrTQRjZMyr aQybmxMGsB59onnHDQeVc3mvWCPeW6QVSTbvTdc5AB9md9P0BvCsKOOhLaGZ5ffM g4MX4FThIKD8dzfF3RCs5zqXITjSc2lqBmsilaZJi0Xt4ZpUuqCTo7B/0uXQ7YXy EgvH1acK4Fc2dBf5bVf5GY0YeHlIFAA= -----END CERTIFICATE-----Generated at Fri Oct 16 00:18:23 2026 by rpki-client