$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaf7b2d7-e032-30d7-965b-1e801f16705e.roa File: aaf7b2d7-e032-30d7-965b-1e801f16705e.roa (raw, json) Hash identifier: dWQizKPbFKb56IGuonGv6ovYRmzNmW4sh4L/q0Qlvi0= Subject key identifier: 86:EC:5A:71:76:B5:36:AA:6C:A5:90:38:FC:0B:40:AB:62:68:F6:3F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F7FD523FB706C0FBADE669AE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaf7b2d7-e032-30d7-965b-1e801f16705e.roa Signing time: Wed 14 Oct 2026 12:32:34 +0000 ROA not before: Wed 14 Oct 2026 12:32:34 +0000 ROA not after: Tue 12 Jan 2027 13:32:34 +0000 asID: 19905 IP address blocks: 173.25.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:d5:23:fb:70:6c:0f:ba:de:66:9a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 14 12:32:34 2026 GMT Not After : Jan 12 13:32:34 2027 GMT Subject: CN=621c7a64-5d30-4240-87ae-2682cf14f663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9c:79:af:d6:cc:47:fb:21:f6:ee:a3:36:75: 80:12:b2:51:fb:81:ce:59:3a:de:83:da:28:ac:f2: c4:94:97:ee:16:5f:98:f2:96:a2:de:1a:d0:61:aa: 4c:8f:27:ab:ec:84:52:04:44:da:af:f5:6b:28:eb: 55:b8:14:6e:4b:42:1d:0c:c3:b4:e8:86:29:a5:11: 5d:3a:b2:3e:b8:c0:97:c1:5a:de:05:62:8f:5c:87: 57:89:91:b4:32:63:28:0c:f4:76:05:b3:31:29:70: 01:44:7a:31:79:96:49:21:99:e7:b9:45:db:d6:49: f8:a8:0f:5d:5f:73:f5:fa:47:13:c8:e3:b7:3c:72: d6:98:fd:f7:97:85:4c:f4:b5:5a:c3:9f:b5:ef:db: 44:e8:90:bb:03:84:da:3d:d5:47:bb:1f:0e:92:dc: a6:47:00:4c:34:0e:f6:ec:7f:21:f6:98:90:03:10: 8f:29:d5:39:13:6d:6e:b3:a3:1f:e2:ed:76:1a:24: f3:34:2c:05:60:78:7d:94:83:c7:12:58:b0:0a:f6: 3f:52:b6:9b:5a:08:3b:75:63:55:56:7e:a1:ab:fa: dc:f9:86:7a:e5:eb:de:c8:93:dd:b2:ae:e4:73:c5: 78:68:33:75:da:65:09:fe:47:ee:3c:05:96:72:0b: 85:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EC:5A:71:76:B5:36:AA:6C:A5:90:38:FC:0B:40:AB:62:68:F6:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaf7b2d7-e032-30d7-965b-1e801f16705e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:82:50:64:5d:55:72:49:12:c1:ca:40:23:6e:81:3d:f6:5b: 24:73:0e:e4:f5:28:44:29:14:9b:43:b2:9a:7e:a3:79:3e:64: 79:89:cb:42:64:7b:38:95:bf:e4:fe:9f:89:61:19:57:67:70: 41:ee:9b:1e:2b:d2:b6:48:24:d9:4e:9b:be:90:d5:f9:3b:65: 07:23:04:ed:a1:aa:94:75:77:03:16:41:44:89:9a:e7:e0:bd: d2:7c:92:0b:a3:6d:52:20:da:69:10:a7:79:65:e0:2d:bf:59: 08:6d:d2:09:9d:51:65:ef:ae:a1:3a:b7:7e:dc:bb:2e:4e:42: a0:8c:7a:28:13:06:d5:24:20:c9:1f:9a:fb:58:d9:a6:8a:9b: 9b:a8:3b:31:1a:6d:90:52:f9:53:c9:77:23:0e:ee:16:f1:74: 07:e1:75:88:12:6d:54:d6:5c:35:02:9c:44:ef:ac:48:ac:84: 35:29:4d:c1:27:77:e9:95:81:14:b9:2a:d4:3d:bc:24:01:a5: 21:f1:ee:ff:3c:78:b6:18:49:73:eb:a7:82:8d:8c:9d:82:53: 64:01:91:af:a7:04:31:44:2c:8e:af:b7:1a:e4:74:29:42:f7: 5b:56:49:f3:cb:cc:9b:66:c4:ec:26:02:98:28:49:5c:7a:9e: e8:0f:d1:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/1SP7cGwPut5mmuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAxNDEyMzIzNFoXDTI3MDExMjEzMzIzNFowLzEtMCsGA1UEAxMk NjIxYzdhNjQtNWQzMC00MjQwLTg3YWUtMjY4MmNmMTRmNjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJx5r9bMR/sh9u6jNnWAErJR+4HOWTreg9oo rPLElJfuFl+Y8pai3hrQYapMjyer7IRSBETar/VrKOtVuBRuS0IdDMO06IYppRFd OrI+uMCXwVreBWKPXIdXiZG0MmMoDPR2BbMxKXABRHoxeZZJIZnnuUXb1kn4qA9d X3P1+kcTyOO3PHLWmP33l4VM9LVaw5+179tE6JC7A4TaPdVHux8OktymRwBMNA72 7H8h9piQAxCPKdU5E21us6Mf4u12GiTzNCwFYHh9lIPHEliwCvY/UrabWgg7dWNV Vn6hq/rc+YZ65eveyJPdsq7kc8V4aDN12mUJ/kfuPAWWcguFyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbsWnF2tTaqbKWQOPwLQKtiaPY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWFmN2IyZDctZTAzMi0z MGQ3LTk2NWItMWU4MDFmMTY3MDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKCUGRdVXJJEsHKQCNugT32WyRzDuT1KEQpFJtDspp+o3k+ZHmJy0Jk eziVv+T+n4lhGVdncEHumx4r0rZIJNlOm76Q1fk7ZQcjBO2hqpR1dwMWQUSJmufg vdJ8kgujbVIg2mkQp3ll4C2/WQht0gmdUWXvrqE6t37cuy5OQqCMeigTBtUkIMkf mvtY2aaKm5uoOzEabZBS+VPJdyMO7hbxdAfhdYgSbVTWXDUCnETvrEishDUpTcEn d+mVgRS5KtQ9vCQBpSHx7v88eLYYSXPrp4KNjJ2CU2QBka+nBDFELI6vtxrkdClC 91tWSfPLzJtmxOwmApgoSVx6nugP0eI= -----END CERTIFICATE-----Generated at Sun Oct 18 01:55:17 2026 by rpki-client