$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/3b18a822-fde6-3f20-a26e-9b8a1b88e430.roa File: 3b18a822-fde6-3f20-a26e-9b8a1b88e430.roa (raw, json) Hash identifier: xpMivEYDGVAj0au34UA56YvOd9ukwtbMFpAQWIMXKeQ= Subject key identifier: BB:C5:2D:2F:7D:20:69:D4:93:87:45:18:98:B9:F9:10:78:44:9F:1B Certificate issuer: /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62 Certificate serial: 010D0C9F4328584F7BB311350D281317D0C05780 Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/3b18a822-fde6-3f20-a26e-9b8a1b88e430.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 25655 IP address blocks: 173.241.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:11:35:0d:28:13:17:d0:c0:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=5933089d-0f0d-4115-af28-1bf976f37982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bf:6d:d3:45:0b:98:9e:2f:1b:a8:0f:62:6e: ef:93:f2:82:34:8a:3c:94:b2:f1:df:d5:75:35:26: aa:e8:5a:c4:d4:28:45:f9:f3:d0:81:a1:72:be:cc: a6:b1:e7:ae:86:c8:1a:73:cc:47:9b:77:07:f2:1c: 8b:ee:32:71:b2:a2:48:34:6b:39:46:bc:fd:02:97: 88:88:b3:d5:fb:61:0e:dc:fa:da:df:a8:f4:88:36: a6:73:72:60:c7:11:25:5f:f4:cc:b2:84:ed:61:65: 86:4a:61:e9:77:c2:f0:4c:c4:d2:df:04:cc:5d:df: a0:28:73:1a:5a:71:d1:88:c2:b9:de:5e:c4:22:cd: c2:31:6a:7f:20:b7:82:4a:a3:dd:cb:0a:2f:86:6e: 72:d4:c9:b8:f0:80:ba:d0:fe:4d:a1:b2:69:9f:40: eb:b1:f6:d8:86:ea:1f:7d:2d:e4:77:72:d2:3d:9a: 09:f6:5d:a2:93:dd:11:50:df:90:ad:ea:a8:a1:63: b1:e5:69:60:e7:3d:a0:19:22:73:03:a6:91:bf:fc: d5:bf:7b:4d:5d:36:fc:a7:02:79:b5:d2:84:5d:aa: d1:dd:b2:8c:8d:60:f6:ab:a4:16:78:03:8b:91:72: d7:ae:d3:46:70:ab:01:12:06:14:70:89:20:c7:70: e8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C5:2D:2F:7D:20:69:D4:93:87:45:18:98:B9:F9:10:78:44:9F:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/3b18a822-fde6-3f20-a26e-9b8a1b88e430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl X509v3 Authority Key Identifier: keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer sbgp-ipAddrBlock: critical IPv4: 173.241.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:42:4c:0e:ec:26:30:0e:de:5c:31:d0:84:12:be:0a:57:9d: c8:f3:f9:77:c5:18:eb:92:3e:0f:4a:28:fd:fc:37:4e:db:93: cc:86:c6:24:b0:3a:95:5f:db:ab:ee:71:c2:50:6d:55:0a:45: fe:82:89:6b:77:19:4c:fe:21:05:2d:c4:9e:75:45:0a:73:3c: 3f:1c:23:8e:4b:25:42:08:78:2c:f3:e5:2b:78:5f:2c:90:0f: b2:ee:d0:8e:b9:90:47:be:93:4f:52:ff:34:59:92:86:aa:b5: b2:7a:9e:b2:da:cd:6b:73:97:5a:71:ec:76:9d:d5:b5:b0:94: 42:18:62:75:7f:99:f4:27:c3:3a:f7:46:3b:96:4a:45:b1:04: ae:7d:d2:02:a3:d5:86:dc:f4:58:26:90:0e:72:fe:f6:a3:8e: 21:59:4c:8f:b1:98:10:61:61:47:67:19:1d:a4:10:d9:ab:9f: 33:8c:74:58:51:06:f0:37:1a:80:94:c4:52:48:f6:19:89:39: fd:53:0c:fb:28:b3:6c:21:a4:75:a2:bc:b3:69:aa:03:ee:48: 74:a6:9d:d7:e1:c5:df:c2:5c:91:e2:15:11:bd:8b:8c:d0:56: 07:21:87:d4:51:2a:31:c5:0b:0f:7c:f6:08:42:a1:0d:f6:83: 5a:2b:34:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97sxE1DSgTF9DAV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhOTQ0Y2QtNTFhOC00ZDEwLWFlNTctNzI0ZGUyNmEx ZDYyMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NTkzMzA4OWQtMGYwZC00MTE1LWFmMjgtMWJmOTc2ZjM3OTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4b9t00ULmJ4vG6gPYm7vk/KCNIo8lLLx39V1 NSaq6FrE1ChF+fPQgaFyvsymseeuhsgac8xHm3cH8hyL7jJxsqJINGs5Rrz9ApeI iLPV+2EO3Pra36j0iDamc3JgxxElX/TMsoTtYWWGSmHpd8LwTMTS3wTMXd+gKHMa WnHRiMK53l7EIs3CMWp/ILeCSqPdywovhm5y1Mm48IC60P5NobJpn0DrsfbYhuof fS3kd3LSPZoJ9l2ik90RUN+QreqooWOx5Wlg5z2gGSJzA6aRv/zVv3tNXTb8pwJ5 tdKEXarR3bKMjWD2q6QWeAOLkXLXrtNGcKsBEgYUcIkgx3Do9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvFLS99IGnUk4dFGJi5+RB4RJ8bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5 NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRkZTI2YTFkNjIvM2IxOGE4MjItZmRlNi0z ZjIwLWEyNmUtOWI4YTFiODhlNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzNhOTQ0Y2QtNTFhOC00ZDEwLWFl NTctNzI0ZGUyNmExZDYyL2MzYTk0NGNkLTUxYTgtNGQxMC1hZTU3LTcyNGRlMjZh MWQ2Mi5jcmwwHwYDVR0jBBgwFoAUqGCfuRfF6i7M/i9bQ1PRwl+tfbUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jM2E5NDRjZC01MWE4LTRkMTAtYWU1Ny03MjRk ZTI2YTFkNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfGZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxCTA7sJjAO3lwx0IQSvgpXncjz+XfFGOuSPg9KKP38N07bk8yGxiSw OpVf26vuccJQbVUKRf6CiWt3GUz+IQUtxJ51RQpzPD8cI45LJUIIeCzz5St4XyyQ D7Lu0I65kEe+k09S/zRZkoaqtbJ6nrLazWtzl1px7Had1bWwlEIYYnV/mfQnwzr3 RjuWSkWxBK590gKj1Ybc9FgmkA5y/vajjiFZTI+xmBBhYUdnGR2kENmrnzOMdFhR BvA3GoCUxFJI9hmJOf1TDPsos2whpHWivLNpqgPuSHSmndfhxd/CXJHiFRG9i4zQ Vgchh9RRKjHFCw989ghCoQ32g1orNJ4= -----END CERTIFICATE-----Generated at Wed Oct 28 18:54:59 2026 by rpki-client