$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab109a64-37d0-3d2a-bc7a-f389d499e8f4.roa File: ab109a64-37d0-3d2a-bc7a-f389d499e8f4.roa (raw, json) Hash identifier: rqvzwV0IGjCkrIhoWNa7Et7kbvi0j1007RVJvVIp5D4= Subject key identifier: 71:19:39:B7:40:30:4E:B2:BE:D3:AF:6A:E9:36:FF:8A:EC:42:FE:0D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D64752028D50D0312BC00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab109a64-37d0-3d2a-bc7a-f389d499e8f4.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.19.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:64:75:20:28:d5:0d:03:12:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=54c9ef89-ab7c-4900-83b8-11152f20aa91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:69:d5:db:48:e9:4d:51:72:df:a1:02:f9:f3: 46:ab:26:6a:2b:f2:19:64:41:fb:e2:b7:d7:90:24: 9f:c8:7e:e0:ab:c9:05:59:83:89:90:cd:40:c0:af: 02:34:9f:c1:ad:0d:f2:6a:e2:b4:4f:68:f9:41:83: 48:d4:e0:81:c8:79:83:c6:75:42:6d:1d:60:e8:a9: a1:ac:7d:fd:f0:6e:1c:d8:0a:b5:70:63:83:96:e4: 2e:7b:1b:04:10:10:82:a9:b5:96:48:2c:c9:2d:1a: b0:cb:f2:ef:44:39:c4:94:bf:3d:17:91:73:6d:8d: 0d:5c:83:73:78:c3:68:f8:a3:44:c3:81:07:9a:09: 66:1f:2b:b9:1d:8b:31:63:29:ed:b3:08:00:64:ff: 29:f7:12:78:86:62:b5:67:3e:62:71:bc:dc:6e:bf: 16:b3:9c:49:6a:47:c0:67:e2:36:5e:b5:f8:9b:5e: c3:49:7d:f7:ff:64:45:dd:cb:ef:23:27:1a:e3:e8: 28:bd:31:79:86:c1:5c:f6:5f:84:63:90:b1:9f:17: 63:1b:df:77:d4:d7:d6:52:7a:3f:15:84:69:b7:04: a4:7a:d2:3a:35:84:8b:12:ec:aa:39:fb:bd:76:0f: f0:09:fe:36:a7:82:5c:72:70:72:f8:7b:1d:a2:73: 10:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:19:39:B7:40:30:4E:B2:BE:D3:AF:6A:E9:36:FF:8A:EC:42:FE:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ab109a64-37d0-3d2a-bc7a-f389d499e8f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:20:20:d4:66:31:09:1f:a0:35:a1:16:ed:b5:13:cc:14:22: 9d:1f:0a:55:db:7f:c9:a6:71:1c:41:84:f9:f0:cc:96:ee:bc: b0:06:05:0d:90:c9:2e:31:d6:2c:99:b3:2f:40:ca:56:45:45: 88:eb:c3:81:e7:a5:d3:02:53:7a:60:47:ad:17:a6:42:18:be: 09:88:23:0d:f9:0a:5b:9b:0c:e8:58:11:3c:f8:77:9f:a7:f8: 32:43:d3:57:4c:98:d4:e8:57:74:49:5f:56:9c:16:85:51:60: 1d:4f:24:83:14:1d:94:27:9b:78:04:a3:00:c0:fb:6a:86:d3: 3b:db:2f:8b:bf:fd:ea:7a:e7:6c:02:66:2c:42:24:84:04:c4: 95:8e:c8:c1:05:58:1d:e3:df:23:ae:83:55:72:99:4d:bc:f0: aa:c3:62:09:ed:77:40:42:e4:12:8c:d5:3c:4e:9c:34:64:63: 14:5c:08:98:c7:9b:e8:e0:9e:ef:90:29:45:b0:00:98:10:96: 1e:58:eb:06:d7:1a:f5:42:02:40:7e:19:be:30:1a:ed:aa:da: ac:bd:69:f5:dc:26:09:6c:51:dd:a5:3b:81:9f:ba:6b:9d:3e: 4f:e0:59:09:b0:fd:bc:b7:39:0f:4e:5a:9e:18:76:85:c0:2f: 1a:8b:57:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWR1ICjVDQMSvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NTRjOWVmODktYWI3Yy00OTAwLTgzYjgtMTExNTJmMjBhYTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WnV20jpTVFy36EC+fNGqyZqK/IZZEH74rfX kCSfyH7gq8kFWYOJkM1AwK8CNJ/BrQ3yauK0T2j5QYNI1OCByHmDxnVCbR1g6Kmh rH398G4c2Aq1cGODluQuexsEEBCCqbWWSCzJLRqwy/LvRDnElL89F5FzbY0NXINz eMNo+KNEw4EHmglmHyu5HYsxYyntswgAZP8p9xJ4hmK1Zz5icbzcbr8Ws5xJakfA Z+I2XrX4m17DSX33/2RF3cvvIyca4+govTF5hsFc9l+EY5CxnxdjG9931NfWUno/ FYRptwSketI6NYSLEuyqOfu9dg/wCf42p4JccnBy+HsdonMQxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEZObdAME6yvtOvauk2/4rsQv4NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWIxMDlhNjQtMzdkMC0z ZDJhLWJjN2EtZjM4OWQ0OTllOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsgINRmMQkfoDWhFu21E8wUIp0fClXbf8mmcRxBhPnwzJbuvLAGBQ2Q yS4x1iyZsy9AylZFRYjrw4HnpdMCU3pgR60XpkIYvgmIIw35ClubDOhYETz4d5+n +DJD01dMmNToV3RJX1acFoVRYB1PJIMUHZQnm3gEowDA+2qG0zvbL4u//ep652wC ZixCJIQExJWOyMEFWB3j3yOug1VymU288KrDYgntd0BC5BKM1TxOnDRkYxRcCJjH m+jgnu+QKUWwAJgQlh5Y6wbXGvVCAkB+Gb4wGu2q2qy9afXcJglsUd2lO4Gfumud Pk/gWQmw/by3OQ9OWp4YdoXALxqLV74= -----END CERTIFICATE-----Generated at Mon Oct 12 11:09:53 2026 by rpki-client