$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89df7e89-e17e-3cc7-8308-423e4f78f192.roa File: 89df7e89-e17e-3cc7-8308-423e4f78f192.roa (raw, json) Hash identifier: q/pGyQS7q0cbi6mKPYY8j2Je9c3E9pgzBIDkEAgdYf8= Subject key identifier: 20:34:20:C9:20:21:E9:6F:F4:39:75:C2:47:26:98:79:EA:9F:48:E2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CAE085B138AB771D8DC394580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89df7e89-e17e-3cc7-8308-423e4f78f192.roa Signing time: Wed 28 Jan 2026 23:22:08 +0000 ROA not before: Wed 28 Jan 2026 23:22:08 +0000 ROA not after: Tue 28 Apr 2026 22:22:08 +0000 asID: 19905 IP address blocks: 173.17.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:08:5b:13:8a:b7:71:d8:dc:39:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 28 23:22:08 2026 GMT Not After : Apr 28 22:22:08 2026 GMT Subject: CN=f2ee0307-a918-42da-9940-495a9e546e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c2:1a:8d:0c:c2:09:34:c7:3f:3e:4b:38:ab: 98:ec:93:c2:7a:84:fd:72:66:05:9f:dc:74:a4:ca: 67:87:b2:a6:bb:b5:d4:c1:34:45:0a:e3:11:ea:3a: 32:04:9b:ff:79:45:68:2c:14:cd:31:5c:87:93:b0: 0f:42:7c:43:4a:47:09:3f:ba:94:5a:0e:d1:d9:26: ad:9f:57:38:3b:01:76:d7:87:fc:55:c5:83:cb:c7: 0f:13:c0:ef:92:78:c8:33:7f:92:c9:82:85:ee:00: 2e:7e:1b:90:0f:0a:65:a5:1a:eb:1b:1b:76:d5:5b: e6:6e:ab:e1:1c:ec:66:c7:e3:fc:ec:76:d9:c0:ea: 09:bd:6d:a4:b0:7d:20:c7:b5:1f:0b:28:31:88:4e: 2c:79:3b:dc:34:31:d2:2d:f2:6f:67:7e:a4:db:63: 46:f3:92:62:f6:cd:f3:01:40:1d:11:67:d0:4c:45: 34:03:be:47:78:3c:5d:fc:b5:a8:44:71:45:5b:40: 01:5d:c8:30:55:bb:d8:bd:8b:3c:79:47:91:bd:4b: 20:4b:72:ff:29:d6:f2:5a:92:4f:80:a9:47:2c:9b: 7b:55:5b:2d:0b:b7:27:9d:b9:78:28:0a:66:a2:ca: ca:59:6f:96:2e:0b:a3:33:85:a3:eb:45:ec:37:91: d8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:34:20:C9:20:21:E9:6F:F4:39:75:C2:47:26:98:79:EA:9F:48:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89df7e89-e17e-3cc7-8308-423e4f78f192.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:75:4a:1a:f3:06:a2:07:7a:bb:32:8a:aa:69:9c:13:d6:65: b5:5a:c2:76:11:eb:c8:0f:5e:10:d8:3b:9b:77:2a:29:63:3d: 45:02:5d:b1:8c:76:33:a4:65:f1:c6:94:10:a4:76:31:03:95: 0d:07:07:66:8d:ce:10:19:09:1e:01:11:63:d6:ed:95:e7:82: ea:99:22:d8:23:c5:af:4e:e6:f8:d2:13:45:59:ea:77:72:89: dc:4f:2a:e1:e8:a4:3e:95:6a:a8:84:6a:93:a1:09:4c:90:80: 24:fc:e2:a4:67:35:64:8a:bd:89:17:a7:a1:9b:90:71:27:3c: 72:78:41:c8:b3:da:db:c3:9b:d7:72:3d:15:70:a6:3a:1f:49: 30:2a:88:1c:cc:27:41:f7:e3:d0:ca:99:69:9e:e1:d0:39:73: 3b:f1:f8:9d:c4:08:b7:04:05:23:ab:bc:50:46:33:fc:e2:c5: 09:eb:b4:59:1e:b9:70:d0:7a:8f:e8:14:11:c0:1c:76:98:15: 73:ec:73:04:55:83:61:03:f5:80:f2:c3:35:f9:65:fa:96:c2: f9:60:50:0a:d2:6d:89:a8:07:d9:6b:57:a0:87:69:48:b3:1d: ee:93:8a:62:54:82:6e:20:af:51:8f:af:d8:87:e9:17:92:1e: 71:c9:9b:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuCFsTirdx2Nw5RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyODIzMjIwOFoXDTI2MDQyODIyMjIwOFowLzEtMCsGA1UEAxMk ZjJlZTAzMDctYTkxOC00MmRhLTk5NDAtNDk1YTllNTQ2ZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcIajQzCCTTHPz5LOKuY7JPCeoT9cmYFn9x0 pMpnh7Kmu7XUwTRFCuMR6joyBJv/eUVoLBTNMVyHk7APQnxDSkcJP7qUWg7R2Sat n1c4OwF214f8VcWDy8cPE8DvknjIM3+SyYKF7gAufhuQDwplpRrrGxt21Vvmbqvh HOxmx+P87HbZwOoJvW2ksH0gx7UfCygxiE4seTvcNDHSLfJvZ36k22NG85Ji9s3z AUAdEWfQTEU0A75HeDxd/LWoRHFFW0ABXcgwVbvYvYs8eUeRvUsgS3L/KdbyWpJP gKlHLJt7VVstC7cnnbl4KApmosrKWW+WLgujM4Wj60XsN5HYHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA0IMkgIelv9Dl1wkcmmHnqn0jiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODlkZjdlODktZTE3ZS0z Y2M3LTgzMDgtNDIzZTRmNzhmMTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrREAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR1ShrzBqIHersyiqppnBPWZbVawnYR68gPXhDYO5t3KiljPUUCXbGM djOkZfHGlBCkdjEDlQ0HB2aNzhAZCR4BEWPW7ZXnguqZItgjxa9O5vjSE0VZ6ndy idxPKuHopD6VaqiEapOhCUyQgCT84qRnNWSKvYkXp6GbkHEnPHJ4Qciz2tvDm9dy PRVwpjofSTAqiBzMJ0H349DKmWme4dA5czvx+J3ECLcEBSOrvFBGM/zixQnrtFke uXDQeo/oFBHAHHaYFXPscwRVg2ED9YDywzX5ZfqWwvlgUArSbYmoB9lrV6CHaUiz He6TimJUgm4gr1GPr9iH6ReSHnHJm+8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:32:32 2026 by rpki-client