$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cabd0177-885c-3977-9aa4-30716d63c1e7.roa File: cabd0177-885c-3977-9aa4-30716d63c1e7.roa (raw, json) Hash identifier: FBF6THAKcns+b6whgfTBDGM/isc7HVBViu+PDsojkoQ= Subject key identifier: AF:B8:57:84:90:5A:39:77:3E:F7:A1:C4:65:D4:2A:F9:7B:C2:19:49 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D64821D8221ED66FDABC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cabd0177-885c-3977-9aa4-30716d63c1e7.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 19905 IP address blocks: 173.19.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:64:82:1d:82:21:ed:66:fd:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=200ca041-d78f-42ab-a8c8-ce54ebcc64c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:da:17:39:d5:c6:f0:89:cf:d2:05:5a:5d:e1: 07:43:8f:69:b4:a5:7d:d8:56:ce:1a:92:9f:18:05: d3:fa:b7:ce:ae:1e:fb:e5:25:17:29:01:0f:8c:2c: b0:d0:01:a2:af:b6:98:5e:41:e1:95:74:da:19:aa: 50:76:2e:81:80:2e:6c:25:89:6d:c3:8f:5b:99:c2: ed:e3:f2:5a:da:98:38:87:92:1b:52:f3:ff:dd:76: 78:07:21:1c:8d:9e:af:b8:9a:b1:7b:13:ea:24:8a: 5c:19:5a:40:36:5b:d6:c9:71:38:50:54:d8:ef:53: 96:68:28:3c:f8:9d:f4:26:e2:27:c1:6a:21:88:ec: 2e:db:f9:36:b7:9f:a5:f8:ee:01:d9:6c:8f:ef:7e: 2e:cc:1a:61:80:d9:d6:17:52:4b:70:6e:71:a3:81: 1b:75:64:a5:06:d9:ce:f8:a8:b8:c9:6c:0e:fc:e4: db:7e:2f:45:24:2e:a6:bd:37:c3:74:f5:21:63:18: 8d:1d:b5:a7:04:07:61:52:9e:e5:58:c5:25:7a:da: 43:e9:75:6f:24:eb:c2:d9:c3:bd:ae:b6:82:52:c4: 2e:11:77:1c:d8:ae:e9:31:bb:44:98:c5:08:8e:b7: 4b:90:0a:bb:d1:d6:81:64:92:e9:9c:84:e9:92:ab: cd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B8:57:84:90:5A:39:77:3E:F7:A1:C4:65:D4:2A:F9:7B:C2:19:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cabd0177-885c-3977-9aa4-30716d63c1e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b9:70:a7:e5:86:39:10:58:ad:74:7e:16:25:0f:4c:13:0a: 95:29:8d:bc:cc:8d:f4:12:cb:8f:b3:c0:fb:cb:a0:d9:af:43: ec:bb:af:f4:75:6c:a6:87:06:a8:e4:f9:d3:e4:c6:d1:5b:78: 94:a4:3d:e9:84:83:b6:3c:62:7a:27:c1:44:9e:58:36:19:9a: a0:5c:5e:69:8f:20:60:32:9b:cf:e6:84:fc:fa:9a:6a:2b:95: 7c:72:29:e1:86:d0:7d:1e:e0:96:81:2b:a7:c6:98:54:1f:a1: 29:6d:0d:7a:5a:ee:23:32:61:1d:fa:60:1f:62:23:ad:8d:e8: 93:2d:85:25:0b:78:4e:5f:e1:9e:3b:43:32:04:e6:f3:b6:e5: 2f:d7:90:a3:06:11:0e:83:70:99:a0:c0:19:bd:a6:56:fb:db: 2d:01:e2:06:65:39:4d:d9:1f:91:3f:a0:5e:d7:67:c0:20:5d: 0d:59:4c:7e:7a:61:72:d9:56:b5:be:57:fe:d9:62:bb:fa:c4: 1e:b8:b5:27:2b:3e:4c:b8:6e:60:9f:9f:5c:07:b3:d6:57:09: 3e:f0:4e:24:7c:00:83:05:3d:63:97:ae:a1:94:a3:55:3e:a9: 6c:e1:20:93:64:e9:1f:c6:48:4f:d3:78:92:d5:f6:a8:4a:82: 05:cd:d1:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWSCHYIh7Wb9q8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MjAwY2EwNDEtZDc4Zi00MmFiLWE4YzgtY2U1NGViY2M2NGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtoXOdXG8InP0gVaXeEHQ49ptKV92FbOGpKf GAXT+rfOrh775SUXKQEPjCyw0AGir7aYXkHhlXTaGapQdi6BgC5sJYltw49bmcLt 4/Ja2pg4h5IbUvP/3XZ4ByEcjZ6vuJqxexPqJIpcGVpANlvWyXE4UFTY71OWaCg8 +J30JuInwWohiOwu2/k2t5+l+O4B2WyP734uzBphgNnWF1JLcG5xo4EbdWSlBtnO +Ki4yWwO/OTbfi9FJC6mvTfDdPUhYxiNHbWnBAdhUp7lWMUletpD6XVvJOvC2cO9 rraCUsQuEXcc2K7pMbtEmMUIjrdLkAq70daBZJLpnITpkqvNUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+4V4SQWjl3PvehxGXUKvl7whlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2FiZDAxNzctODg1Yy0z OTc3LTlhYTQtMzA3MTZkNjNjMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi5cKflhjkQWK10fhYlD0wTCpUpjbzMjfQSy4+zwPvLoNmvQ+y7r/R1 bKaHBqjk+dPkxtFbeJSkPemEg7Y8YnonwUSeWDYZmqBcXmmPIGAym8/mhPz6mmor lXxyKeGG0H0e4JaBK6fGmFQfoSltDXpa7iMyYR36YB9iI62N6JMthSULeE5f4Z47 QzIE5vO25S/XkKMGEQ6DcJmgwBm9plb72y0B4gZlOU3ZH5E/oF7XZ8AgXQ1ZTH56 YXLZVrW+V/7ZYrv6xB64tScrPky4bmCfn1wHs9ZXCT7wTiR8AIMFPWOXrqGUo1U+ qWzhIJNk6R/GSE/TeJLV9qhKggXN0Sw= -----END CERTIFICATE-----Generated at Mon Oct 12 12:45:12 2026 by rpki-client