$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/faebdaa0-0295-3d7a-8f32-37286b8a7a2a.roa File: faebdaa0-0295-3d7a-8f32-37286b8a7a2a.roa (raw, json) Hash identifier: B3k7Bh3pwoyLFm2FJ4CMXdG9CopA6G080zk3oMvQnaA= Subject key identifier: 70:90:6D:93:06:5C:36:60:44:57:E1:1E:1A:C2:0F:51:B6:0A:55:D8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F7FD586CD242AE7EEB4B27F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/faebdaa0-0295-3d7a-8f32-37286b8a7a2a.roa Signing time: Wed 14 Oct 2026 12:33:20 +0000 ROA not before: Wed 14 Oct 2026 12:33:20 +0000 ROA not after: Tue 12 Jan 2027 13:33:20 +0000 asID: 19905 IP address blocks: 173.27.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:d5:86:cd:24:2a:e7:ee:b4:b2:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 14 12:33:20 2026 GMT Not After : Jan 12 13:33:20 2027 GMT Subject: CN=ffebcbbe-0e3b-435f-b290-dc4b3791dff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fd:3e:f9:46:09:a1:7a:a8:5a:95:c9:73:c8: 24:c0:97:f1:06:04:a6:a5:3f:f3:96:14:2e:98:3d: b9:06:1b:59:4a:75:a4:cd:09:c3:d6:a9:9f:8e:f3: e8:2f:0a:d4:c2:c6:71:4a:4e:81:04:e1:a9:52:21: c3:e3:28:55:43:c7:29:8a:20:51:50:92:8e:49:77: fb:f6:24:2e:76:36:d6:92:f7:09:2e:a8:7a:6d:ee: 6c:28:4b:db:7a:f0:29:3f:98:21:c0:5d:cd:15:98: 9e:aa:3f:39:ea:d5:95:16:e2:3a:86:51:86:be:7c: 24:08:44:e5:ca:02:ae:8a:bc:07:0c:25:5c:bd:c5: 1d:b8:23:16:55:e1:0f:56:60:f1:81:cb:5b:bd:da: a8:54:4d:43:7b:e8:d2:81:71:e1:1e:20:67:8b:17: 53:32:0f:f9:5a:9f:c7:0d:fb:99:1a:b0:50:c6:27: ed:6b:fa:24:42:84:4c:91:5a:f6:29:6a:3f:d9:ad: cd:87:e9:f8:71:b0:8a:7f:5e:f9:62:9a:ef:66:72: 7e:4d:d0:ff:c6:7e:32:8b:ea:42:e6:e0:b0:93:1b: f5:3e:33:69:87:f5:51:32:95:a2:68:08:cd:48:74: f0:c2:34:a9:3d:a4:9a:9f:35:61:db:19:81:e6:b6: 3f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:90:6D:93:06:5C:36:60:44:57:E1:1E:1A:C2:0F:51:B6:0A:55:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/faebdaa0-0295-3d7a-8f32-37286b8a7a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:3b:7c:73:be:ee:14:36:43:30:25:37:41:49:f5:ca:ac:6f: ae:29:fd:cc:d1:8f:cd:bd:9e:4f:f2:f0:e0:e4:21:08:e0:a1: 58:a3:66:a6:8e:e3:cb:b2:91:d9:57:32:13:93:27:38:7a:ce: 7e:3a:9b:cb:6c:5e:66:74:ed:15:61:05:5a:73:d2:c0:60:68: b6:7b:e8:65:14:ca:5c:aa:ee:a2:25:81:90:9f:17:a0:6a:a7: 5a:96:0f:c3:29:49:12:d1:a3:eb:ce:8b:b0:97:f4:bc:23:61: bc:af:7b:77:a7:5d:6c:3b:08:a5:82:a6:ab:df:e1:22:6b:6c: 8b:bb:9b:57:c6:97:d0:6e:ff:61:9d:bf:92:a6:28:8f:e2:d8: 6a:81:d8:3d:d1:f3:03:a3:75:1a:17:dc:e9:66:d8:0f:dd:74: 76:9b:c1:14:8e:73:41:ec:6d:db:ca:b9:55:8f:61:eb:69:3f: 63:fd:b9:4c:9c:dd:d8:89:17:e2:40:27:3d:32:c2:28:f8:2b: 36:4b:57:55:f8:74:d3:6a:7c:b8:85:e1:21:c0:54:71:cc:59: 8a:4b:de:27:9a:8d:12:cb:9b:e8:b9:bf:0e:25:ee:e9:da:3b: 69:2c:75:01:bf:6b:0b:fb:4a:3c:93:71:e8:98:01:2e:5a:6c: 3a:4c:f0:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/1YbNJCrn7rSyf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAxNDEyMzMyMFoXDTI3MDExMjEzMzMyMFowLzEtMCsGA1UEAxMk ZmZlYmNiYmUtMGUzYi00MzVmLWIyOTAtZGM0YjM3OTFkZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP0++UYJoXqoWpXJc8gkwJfxBgSmpT/zlhQu mD25BhtZSnWkzQnD1qmfjvPoLwrUwsZxSk6BBOGpUiHD4yhVQ8cpiiBRUJKOSXf7 9iQudjbWkvcJLqh6be5sKEvbevApP5ghwF3NFZieqj856tWVFuI6hlGGvnwkCETl ygKuirwHDCVcvcUduCMWVeEPVmDxgctbvdqoVE1De+jSgXHhHiBnixdTMg/5Wp/H DfuZGrBQxifta/okQoRMkVr2KWo/2a3Nh+n4cbCKf175YprvZnJ+TdD/xn4yi+pC 5uCwkxv1PjNph/VRMpWiaAjNSHTwwjSpPaSanzVh2xmB5rY/kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCQbZMGXDZgRFfhHhrCD1G2ClXYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmFlYmRhYTAtMDI5NS0z ZDdhLThmMzItMzcyODZiOGE3YTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY7fHO+7hQ2QzAlN0FJ9cqsb64p/czRj829nk/y8ODkIQjgoVijZqaO 48uykdlXMhOTJzh6zn46m8tsXmZ07RVhBVpz0sBgaLZ76GUUylyq7qIlgZCfF6Bq p1qWD8MpSRLRo+vOi7CX9LwjYbyve3enXWw7CKWCpqvf4SJrbIu7m1fGl9Bu/2Gd v5KmKI/i2GqB2D3R8wOjdRoX3Olm2A/ddHabwRSOc0HsbdvKuVWPYetpP2P9uUyc 3diJF+JAJz0ywij4KzZLV1X4dNNqfLiF4SHAVHHMWYpL3ieajRLLm+i5vw4l7una O2ksdQG/awv7SjyTceiYAS5abDpM8AQ= -----END CERTIFICATE-----Generated at Sat Oct 17 06:11:52 2026 by rpki-client