$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfc19e3b-3cce-3e25-8c9e-59abbe4975a4.roa File: cfc19e3b-3cce-3e25-8c9e-59abbe4975a4.roa (raw, json) Hash identifier: al5YuOGahAYIiR8ayg8E9H+TlSsKDLOiVQt33cTkQaU= Subject key identifier: A4:B9:FE:CB:CA:C0:65:FD:6A:93:DC:AE:BF:0F:21:6C:AF:49:ED:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F7FD5B8593F033D11E195B480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfc19e3b-3cce-3e25-8c9e-59abbe4975a4.roa Signing time: Wed 14 Oct 2026 12:33:44 +0000 ROA not before: Wed 14 Oct 2026 12:33:44 +0000 ROA not after: Tue 12 Jan 2027 13:33:44 +0000 asID: 19905 IP address blocks: 173.19.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:d5:b8:59:3f:03:3d:11:e1:95:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 14 12:33:44 2026 GMT Not After : Jan 12 13:33:44 2027 GMT Subject: CN=d7fa34c3-fda5-431f-b36f-b660d74a1e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ba:0b:d6:03:f0:62:54:4a:73:a0:7e:25:21: 96:4e:fa:a1:66:6d:12:44:53:32:c1:49:c5:d6:eb: 68:7f:1a:5a:11:af:91:54:d3:c4:e8:c8:78:19:d3: 4f:b8:ed:d7:47:63:ce:40:9b:f5:68:0d:e1:77:75: c1:8c:c2:9b:aa:c5:3f:91:ed:2b:36:42:41:29:6b: 61:1a:9f:3f:7e:b8:ae:81:82:9f:da:d8:64:e6:c8: 20:fd:6e:47:b0:6e:b9:78:ad:76:f4:34:66:eb:06: 8d:93:ac:86:b5:1d:4e:ea:2f:f7:ae:95:a0:aa:34: fb:bb:ea:61:fd:0b:56:fc:ee:81:74:e0:90:a9:35: c2:29:52:29:f8:3b:f2:55:f1:79:d2:5c:22:69:79: ea:34:1c:74:9b:02:4a:b4:f7:a8:fa:e1:e9:24:78: e2:e5:32:32:da:f2:d9:bb:2c:ce:84:08:95:a3:ad: 0f:50:d5:7c:0d:a3:1d:b9:52:a5:3b:19:5d:03:c7: b3:31:34:49:99:66:40:5e:6a:5e:bc:c4:15:63:7e: c0:bf:07:64:83:2c:10:4c:fa:8d:be:56:e3:8c:59: cb:e8:8b:7c:06:5d:14:c2:1f:64:ef:c4:f7:e0:bd: 64:6d:fa:7a:29:d9:18:15:2b:14:0a:b6:4e:00:41: e9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B9:FE:CB:CA:C0:65:FD:6A:93:DC:AE:BF:0F:21:6C:AF:49:ED:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfc19e3b-3cce-3e25-8c9e-59abbe4975a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:08:41:86:e2:61:2a:1b:37:0c:77:a2:64:bc:6b:1a:0d:b2: de:2f:5e:8e:9b:4b:d0:f3:02:ce:7a:ef:9a:b4:23:8d:8c:10: 90:80:32:a0:be:f1:ce:de:69:80:4e:70:dd:51:5a:b8:ac:21: bd:8e:b9:5f:4f:4b:c6:d8:1c:45:96:56:70:88:ba:6b:7d:19: 56:b1:2c:ee:15:99:bc:f2:58:db:f4:e3:cf:a4:d1:a7:06:54: 47:a6:10:49:4e:d0:73:82:82:e1:de:13:92:fa:37:fa:65:c0: 9b:92:87:05:c5:23:e1:36:93:34:93:27:23:03:77:29:8c:73: 8c:2c:4b:ee:28:9a:7f:70:8c:fb:3d:8d:72:5e:34:8e:a2:78: c9:98:c9:78:08:25:98:8c:65:e3:ba:a5:56:1b:ab:26:1c:f0: 82:de:76:94:d5:06:53:a7:de:7f:5e:47:89:f9:3d:aa:d9:06: 82:89:68:c6:e5:8e:31:e7:3c:54:04:f2:4c:80:f7:10:6f:3e: da:7d:86:0e:d9:6a:00:5e:e5:76:f9:94:67:d1:b4:8c:21:b2: 3b:5b:ef:ee:c7:fe:c3:34:16:90:ae:c2:34:62:fa:2a:47:54: 3c:8e:0e:36:a8:b6:67:42:a7:86:1a:89:5c:4b:95:73:08:ac: d9:a6:8d:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/1bhZPwM9EeGVtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAxNDEyMzM0NFoXDTI3MDExMjEzMzM0NFowLzEtMCsGA1UEAxMk ZDdmYTM0YzMtZmRhNS00MzFmLWIzNmYtYjY2MGQ3NGExZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7oL1gPwYlRKc6B+JSGWTvqhZm0SRFMywUnF 1utofxpaEa+RVNPE6Mh4GdNPuO3XR2POQJv1aA3hd3XBjMKbqsU/ke0rNkJBKWth Gp8/friugYKf2thk5sgg/W5HsG65eK129DRm6waNk6yGtR1O6i/3rpWgqjT7u+ph /QtW/O6BdOCQqTXCKVIp+DvyVfF50lwiaXnqNBx0mwJKtPeo+uHpJHji5TIy2vLZ uyzOhAiVo60PUNV8DaMduVKlOxldA8ezMTRJmWZAXmpevMQVY37AvwdkgywQTPqN vlbjjFnL6It8Bl0Uwh9k78T34L1kbfp6KdkYFSsUCrZOAEHpLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKS5/svKwGX9apPcrr8PIWyvSe1yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ZjMTllM2ItM2NjZS0z ZTI1LThjOWUtNTlhYmJlNDk3NWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYIQYbiYSobNwx3omS8axoNst4vXo6bS9DzAs5675q0I42MEJCAMqC+ 8c7eaYBOcN1RWrisIb2OuV9PS8bYHEWWVnCIumt9GVaxLO4VmbzyWNv048+k0acG VEemEElO0HOCguHeE5L6N/plwJuShwXFI+E2kzSTJyMDdymMc4wsS+4omn9wjPs9 jXJeNI6ieMmYyXgIJZiMZeO6pVYbqyYc8ILedpTVBlOn3n9eR4n5ParZBoKJaMbl jjHnPFQE8kyA9xBvPtp9hg7ZagBe5Xb5lGfRtIwhsjtb7+7H/sM0FpCuwjRi+ipH VDyODjaotmdCp4YaiVxLlXMIrNmmjfE= -----END CERTIFICATE-----Generated at Mon Oct 19 05:35:24 2026 by rpki-client