$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4915dc82-961f-38c9-9e86-0b74bac453dc.roa File: 4915dc82-961f-38c9-9e86-0b74bac453dc.roa (raw, json) Hash identifier: +hXc/hSjJ9WwVP1TV8wH7tbbQD9pilEpylZrAM7mkKQ= Subject key identifier: 1E:3D:4B:C6:2C:98:77:81:95:A4:A2:58:48:F8:13:9D:3C:E1:55:3B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DE0D5F0B9DD2F72BA7D40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4915dc82-961f-38c9-9e86-0b74bac453dc.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.17.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e0:d5:f0:b9:dd:2f:72:ba:7d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=4c02ad4a-896d-46bc-b1db-5f51dd18814f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ea:e3:7a:a0:ca:e7:3c:56:c2:b4:4a:ad:ba: 6e:17:d0:a4:df:3f:98:d2:88:f3:df:48:3b:73:9b: b0:2c:98:8e:fe:8c:57:29:9a:5c:17:f0:fc:b7:62: 02:6e:f7:ba:a1:4e:9d:32:ba:9b:83:a9:76:95:22: c6:09:db:f5:51:0d:27:7d:1b:42:c4:e7:dd:ed:fd: 2b:83:5e:88:ad:05:99:fb:39:cc:89:89:61:01:82: e4:80:b3:2c:48:ce:75:44:34:32:65:60:49:01:b8: f8:c7:9e:93:79:10:7d:62:70:7d:21:82:33:91:3a: 26:36:ad:27:6d:d9:44:9e:b4:48:f3:e2:72:46:38: 71:f7:8c:aa:c3:6f:9f:03:c0:84:1f:b3:59:8a:4b: 9b:b1:4f:6f:65:ef:e1:30:50:59:41:d8:2f:18:f9: 00:6b:06:28:de:83:2f:2a:06:70:80:9d:e4:82:77: 0c:d3:cd:7b:5a:80:29:22:d5:da:13:a4:c0:e1:56: 60:bd:b5:c2:7d:77:47:58:06:58:86:9d:a5:44:e7: e7:8a:65:87:c5:9d:f5:52:85:73:e5:20:3a:43:a3: d4:4d:54:6f:e4:9d:c2:f5:18:55:5f:e8:43:5b:1c: 1d:cf:2d:80:fa:99:b2:1b:8c:61:e8:b8:f5:c3:13: cb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3D:4B:C6:2C:98:77:81:95:A4:A2:58:48:F8:13:9D:3C:E1:55:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4915dc82-961f-38c9-9e86-0b74bac453dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:06:6e:38:48:31:f3:b8:76:51:4b:bc:4c:c5:08:20:1f:34: 33:92:be:a5:a9:1f:ff:97:8b:2b:14:da:09:c0:6b:32:65:90: ac:7c:7c:39:db:84:85:ba:8c:fe:42:db:e1:00:23:24:e5:f1: 89:67:c4:40:62:0f:02:1e:bd:3e:f1:0e:26:23:f5:5b:4e:0e: 72:c5:ca:44:8b:dd:b1:1c:35:ae:25:19:3f:d9:55:ac:1a:b2: e4:62:d2:97:29:e5:a2:25:48:c2:c2:38:a3:d5:59:cc:ff:94: 38:14:da:9d:18:a7:77:c7:eb:2a:1a:1a:6d:96:8e:77:fc:ff: 19:73:05:94:e2:bb:83:2a:78:ee:2b:3c:a9:c6:3b:d2:80:16: 77:fe:0e:9e:8e:df:42:7c:d3:83:e8:19:13:75:61:7f:e9:3c: 31:31:10:7a:86:75:b6:7d:dc:23:09:ee:bc:49:d7:6e:b3:1f: 8c:94:a9:45:b1:8f:48:2e:3d:35:46:b1:30:be:a0:bc:d5:e0: 83:55:b1:37:bc:02:2c:76:22:9a:08:de:89:d8:30:39:e9:3a: 59:52:12:ce:dc:2e:e5:6c:1b:77:25:ec:24:99:7c:2b:eb:ac: 1b:6b:8a:85:a7:8c:7d:fd:52:58:d3:d0:a5:c3:23:d8:f1:38: 1d:ec:52:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeDV8LndL3K6fUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NGMwMmFkNGEtODk2ZC00NmJjLWIxZGItNWY1MWRkMTg4MTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjerjeqDK5zxWwrRKrbpuF9Ck3z+Y0ojz30g7 c5uwLJiO/oxXKZpcF/D8t2ICbve6oU6dMrqbg6l2lSLGCdv1UQ0nfRtCxOfd7f0r g16IrQWZ+znMiYlhAYLkgLMsSM51RDQyZWBJAbj4x56TeRB9YnB9IYIzkTomNq0n bdlEnrRI8+JyRjhx94yqw2+fA8CEH7NZikubsU9vZe/hMFBZQdgvGPkAawYo3oMv KgZwgJ3kgncM0817WoApItXaE6TA4VZgvbXCfXdHWAZYhp2lROfnimWHxZ31UoVz 5SA6Q6PUTVRv5J3C9RhVX+hDWxwdzy2A+pmyG4xh6Lj1wxPLPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB49S8YsmHeBlaSiWEj4E5084VU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDkxNWRjODItOTYxZi0z OGM5LTllODYtMGI3NGJhYzQ1M2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRExMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4GbjhIMfO4dlFLvEzFCCAfNDOSvqWpH/+XiysU2gnAazJlkKx8fDnb hIW6jP5C2+EAIyTl8YlnxEBiDwIevT7xDiYj9VtODnLFykSL3bEcNa4lGT/ZVawa suRi0pcp5aIlSMLCOKPVWcz/lDgU2p0Yp3fH6yoaGm2Wjnf8/xlzBZTiu4MqeO4r PKnGO9KAFnf+Dp6O30J804PoGRN1YX/pPDExEHqGdbZ93CMJ7rxJ126zH4yUqUWx j0guPTVGsTC+oLzV4INVsTe8Aix2IpoI3onYMDnpOllSEs7cLuVsG3cl7CSZfCvr rBtrioWnjH39UljT0KXDI9jxOB3sUgs= -----END CERTIFICATE-----Generated at Tue Oct 6 22:17:45 2026 by rpki-client