$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a8a18f9-c721-352b-bef4-076e7a0beaf9.roa File: 3a8a18f9-c721-352b-bef4-076e7a0beaf9.roa (raw, json) Hash identifier: ds+wm4HfSLHDKXx869KzKv9mCzbS0RT6o2HWEwPWlzo= Subject key identifier: 7D:B0:23:0A:70:FE:68:08:06:EE:F9:21:E0:B8:75:66:A9:47:83:B3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D4D0A91B73859972BBA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a8a18f9-c721-352b-bef4-076e7a0beaf9.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 19905 IP address blocks: 173.17.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:4d:0a:91:b7:38:59:97:2b:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=892d0fa6-ecfb-49ac-841d-f55b69001f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:65:e8:4a:9e:42:7c:8e:28:6b:6c:65:0c:90: 84:ff:d5:98:e3:65:58:1c:40:8a:52:69:64:b1:10: cf:d5:1d:49:0e:20:bc:34:f8:9d:03:39:3f:75:31: 53:31:47:fd:36:25:63:70:55:c6:6e:a4:4d:2e:de: 9b:49:83:88:54:c8:3b:8a:f5:46:a5:92:26:3e:91: a8:df:0d:8e:8e:8d:3c:f2:aa:bc:14:b0:ad:68:86: 7f:ba:b1:b0:08:1d:2a:65:5a:01:1d:b9:3e:e3:50: 78:c9:d1:d8:6d:d4:07:2e:a7:6c:6a:a8:cf:98:41: 92:68:8f:21:33:a2:b6:31:60:aa:bc:fe:2f:85:55: 50:e7:a5:f9:1e:41:fb:74:fd:7c:3f:b7:aa:91:b0: fa:2c:54:b6:b1:38:ea:9f:44:11:f7:6d:1e:07:43: cc:27:0f:0a:71:24:12:61:25:69:94:ee:8c:a8:52: 05:e1:1a:03:c8:32:41:d5:20:1b:f7:5a:c4:3d:ee: af:94:60:33:4b:f7:a6:a9:48:7e:a5:05:db:e4:ff: 05:52:be:c9:20:c0:da:84:7b:94:69:1e:8f:2d:42: fc:0a:15:f0:18:00:01:6c:3f:e9:c7:58:66:26:71: 0a:ba:28:5f:18:52:4c:88:0d:93:68:68:f7:6f:a6: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B0:23:0A:70:FE:68:08:06:EE:F9:21:E0:B8:75:66:A9:47:83:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a8a18f9-c721-352b-bef4-076e7a0beaf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:fe:03:55:e9:ee:9c:02:7a:73:d5:d7:74:d2:47:ba:8e:77: 48:21:f3:7e:b7:87:fa:3c:07:6e:a7:7c:6a:02:39:c9:7e:fc: 15:10:01:f5:3f:e0:6e:e8:ce:64:f7:24:a8:8d:bd:98:07:03: 9c:2d:77:bc:06:2f:f0:87:b7:75:bd:12:3c:d0:ae:11:a1:16: 4c:d8:95:23:1b:99:98:d5:6d:1e:f6:e2:72:58:35:16:34:a1: 47:09:c8:fc:1b:df:8e:4c:52:86:d2:b2:f8:15:ad:14:17:16: 67:e1:2e:21:2a:be:0a:cf:74:34:81:5c:3a:ee:52:85:b6:1a: 72:97:88:af:8c:05:e6:b0:ff:ee:d3:54:e8:d2:ee:b2:91:e2: 57:bb:d4:39:d1:ea:95:f0:d7:67:6f:e1:a9:1c:c3:b7:52:f9: 78:fd:9f:75:fa:01:fd:c2:bf:2b:44:41:8d:87:97:9c:10:d6: 9f:f4:76:9c:e7:d9:fa:04:3d:2d:4e:4d:98:e2:95:08:ce:06: 4d:39:b8:34:ad:e1:5b:0d:51:89:b5:05:56:aa:1f:3f:b9:ef: dc:16:35:9e:a9:7f:8c:37:b2:20:a3:f9:6b:2e:60:78:e9:3d: 46:30:7d:4b:78:9a:40:14:00:9d:55:b6:3b:af:f8:f9:82:68: ef:ac:f9:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPU0Kkbc4WZcrugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODkyZDBmYTYtZWNmYi00OWFjLTg0MWQtZjU1YjY5MDAxZjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2XoSp5CfI4oa2xlDJCE/9WY42VYHECKUmlk sRDP1R1JDiC8NPidAzk/dTFTMUf9NiVjcFXGbqRNLt6bSYOIVMg7ivVGpZImPpGo 3w2Ojo088qq8FLCtaIZ/urGwCB0qZVoBHbk+41B4ydHYbdQHLqdsaqjPmEGSaI8h M6K2MWCqvP4vhVVQ56X5HkH7dP18P7eqkbD6LFS2sTjqn0QR920eB0PMJw8KcSQS YSVplO6MqFIF4RoDyDJB1SAb91rEPe6vlGAzS/emqUh+pQXb5P8FUr7JIMDahHuU aR6PLUL8ChXwGAABbD/px1hmJnEKuihfGFJMiA2TaGj3b6YCdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2wIwpw/mgIBu75IeC4dWapR4OzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2E4YTE4ZjktYzcyMS0z NTJiLWJlZjQtMDc2ZTdhMGJlYWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABj+A1Xp7pwCenPV13TSR7qOd0gh8363h/o8B26nfGoCOcl+/BUQAfU/ 4G7ozmT3JKiNvZgHA5wtd7wGL/CHt3W9EjzQrhGhFkzYlSMbmZjVbR724nJYNRY0 oUcJyPwb345MUobSsvgVrRQXFmfhLiEqvgrPdDSBXDruUoW2GnKXiK+MBeaw/+7T VOjS7rKR4le71DnR6pXw12dv4akcw7dS+Xj9n3X6Af3CvytEQY2Hl5wQ1p/0dpzn 2foEPS1OTZjilQjOBk05uDSt4VsNUYm1BVaqHz+579wWNZ6pf4w3siCj+WsuYHjp PUYwfUt4mkAUAJ1Vtjuv+PmCaO+s+c8= -----END CERTIFICATE-----Generated at Sat Sep 26 10:40:12 2026 by rpki-client