$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba8cd25f-bad6-3cd1-8cca-ee5f2a9ca2da.roa File: ba8cd25f-bad6-3cd1-8cca-ee5f2a9ca2da.roa (raw, json) Hash identifier: DwObYJdUKFkgImNUQE7bmtqJngYc1DfeSUupGKJmJuU= Subject key identifier: F6:7A:40:73:C7:C4:F0:6D:06:BE:C8:71:57:85:A1:6A:6D:5B:BD:D8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F480D63D7CC1994CB055E3D70 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba8cd25f-bad6-3cd1-8cca-ee5f2a9ca2da.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.27.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:63:d7:cc:19:94:cb:05:5e:3d:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=c3dd0696-b7c4-4902-9007-a4e0f7548648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:74:af:7f:5d:82:4b:8e:5c:40:4e:c1:74:77: 41:bb:cf:80:2f:30:51:68:c9:ca:aa:ab:a8:52:8a: be:33:e0:82:23:7a:76:ed:8b:14:4c:77:32:d5:87: f1:2c:9a:dd:3c:97:0d:36:15:b1:18:2b:7d:10:8d: 39:87:30:a5:fd:e9:be:91:8a:97:fe:82:91:9e:be: 72:81:67:de:47:36:0a:5e:4b:0b:0a:74:92:16:b2: 27:bc:16:17:e2:ec:8c:9c:96:2d:18:42:4e:c9:53: cc:ed:9f:4b:0e:2f:f6:07:65:b6:e3:40:c3:1b:cd: ac:c4:17:7b:17:25:c9:1e:ca:af:84:01:cd:c6:53: d0:48:a8:55:fd:03:e4:2f:1c:98:3f:da:98:98:dd: df:c6:62:11:b4:59:f5:7d:29:60:d2:c1:13:df:d6: a2:cc:ac:5a:8a:b5:6d:be:a4:d4:db:4f:66:d7:de: c5:2d:ff:f7:ac:17:88:e6:78:dd:0e:28:53:f9:72: 3c:40:26:2b:3b:92:5e:3b:71:b4:3b:68:88:e0:15: 47:04:b7:d5:c6:24:9b:82:a8:6f:7f:00:c8:d9:2a: 14:88:bb:96:e7:d1:c3:fc:23:c3:0f:25:12:c6:27: a3:8a:37:97:9e:6f:63:db:4b:d0:d0:d3:33:3c:64: 8b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7A:40:73:C7:C4:F0:6D:06:BE:C8:71:57:85:A1:6A:6D:5B:BD:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba8cd25f-bad6-3cd1-8cca-ee5f2a9ca2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:c8:08:17:66:86:1a:d3:c1:77:1c:87:6a:10:6b:7e:4c:ed: 8e:ea:23:63:4b:bd:74:01:70:f8:c8:71:41:9b:16:69:ac:e4: 43:af:c0:55:48:10:7a:b7:48:6e:0a:4b:93:eb:7f:0d:8d:c3: 6b:af:a0:68:f0:48:51:9a:23:79:21:50:3e:64:8d:b7:cb:f4: 55:c8:9c:a6:10:b2:62:a3:f4:c1:56:c2:06:fe:2b:7c:ed:3a: e8:db:f6:96:c7:86:29:ca:24:99:c8:96:86:cc:4c:43:6e:79: 38:64:a2:14:6d:34:0e:7f:f5:48:06:27:76:20:6a:3c:7d:ef: bc:ce:ef:52:59:73:15:d6:8e:20:7c:15:c2:cd:42:da:a4:03: a0:2b:a5:24:90:04:a8:a4:a1:17:5c:9a:9a:4e:53:5b:65:3d: f7:16:05:df:dd:f5:17:1a:19:a4:65:f5:94:5e:d5:a3:93:d3: 65:dc:01:fd:aa:37:b4:a4:fe:7a:2e:8d:5b:c8:b2:c2:81:1d: 0f:3c:ed:6d:66:2c:8d:5d:ea:5e:f7:fb:34:98:0f:8d:60:56: 8c:0b:07:00:e9:ed:33:07:63:80:a9:e2:93:1d:aa:64:f6:77: 22:c0:5d:f8:55:fb:44:bc:31:66:d3:ef:a2:a6:f7:bd:60:9d: ec:07:77:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWPXzBmUywVePXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk YzNkZDA2OTYtYjdjNC00OTAyLTkwMDctYTRlMGY3NTQ4NjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnSvf12CS45cQE7BdHdBu8+ALzBRaMnKqquo Uoq+M+CCI3p27YsUTHcy1YfxLJrdPJcNNhWxGCt9EI05hzCl/em+kYqX/oKRnr5y gWfeRzYKXksLCnSSFrInvBYX4uyMnJYtGEJOyVPM7Z9LDi/2B2W240DDG82sxBd7 FyXJHsqvhAHNxlPQSKhV/QPkLxyYP9qYmN3fxmIRtFn1fSlg0sET39aizKxairVt vqTU209m197FLf/3rBeI5njdDihT+XI8QCYrO5JeO3G0O2iI4BVHBLfVxiSbgqhv fwDI2SoUiLuW59HD/CPDDyUSxiejijeXnm9j20vQ0NMzPGSLAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZ6QHPHxPBtBr7IcVeFoWptW73YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmE4Y2QyNWYtYmFkNi0z Y2QxLThjY2EtZWU1ZjJhOWNhMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHICBdmhhrTwXcch2oQa35M7Y7qI2NLvXQBcPjIcUGbFmms5EOvwFVI EHq3SG4KS5Prfw2Nw2uvoGjwSFGaI3khUD5kjbfL9FXInKYQsmKj9MFWwgb+K3zt Oujb9pbHhinKJJnIlobMTENueThkohRtNA5/9UgGJ3Ygajx977zO71JZcxXWjiB8 FcLNQtqkA6ArpSSQBKikoRdcmppOU1tlPfcWBd/d9RcaGaRl9ZRe1aOT02XcAf2q N7Sk/noujVvIssKBHQ887W1mLI1d6l73+zSYD41gVowLBwDp7TMHY4Cp4pMdqmT2 dyLAXfhV+0S8MWbT76Km971gnewHd0o= -----END CERTIFICATE-----Generated at Sun Oct 11 17:10:58 2026 by rpki-client