$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa File: 8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa (raw, json) Hash identifier: Yd2hyEjEtdK2758k2ddHHCqwoqiKBytJ3NhRsTagTWc= Subject key identifier: 00:40:29:54:3C:3B:A5:33:74:04:0C:66:54:B3:99:F6:85:CB:AE:D8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D5D0992B63AAF600B0740 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.17.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5d:09:92:b6:3a:af:60:0b:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=051fa9e7-a6a7-4b11-abe3-5bb9a93d0ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:be:27:fe:85:29:86:f9:77:ac:19:ac:b1:43: 8b:bd:4a:79:f4:e7:44:ae:eb:c1:06:21:0d:b5:04: 75:91:5f:4d:c2:ab:fd:99:6b:17:c8:2a:54:73:26: 72:8f:af:55:12:13:29:fc:16:ee:7c:aa:da:49:47: 3e:aa:be:25:53:b6:eb:9e:ef:73:4c:d0:6c:62:b6: 6d:aa:85:b2:f3:d7:fe:a8:4e:f9:01:17:f8:05:01: bf:17:96:64:ad:2a:80:96:2c:40:68:13:c2:45:c8: f4:50:3f:65:64:7e:11:60:17:46:4e:bb:eb:06:0b: 44:33:cd:09:3f:26:71:54:52:97:46:99:69:68:1c: bd:7e:66:1c:8f:56:75:97:b3:7d:c2:6a:af:ee:0e: 6c:84:0a:2c:e0:02:68:2d:2c:9e:9d:38:78:a0:1e: 6e:f3:26:82:97:89:84:d1:95:de:91:b1:47:3c:f6: 9d:79:27:19:f5:f2:e5:c9:c3:ba:39:c8:9b:3a:3b: 64:81:d1:4a:5d:a9:1d:a3:19:6c:ec:21:d0:f8:04: d2:bd:cf:d2:db:6c:ef:e9:43:2a:bb:e8:03:ca:70: 54:04:7f:10:28:a9:d4:3d:44:40:88:b5:0c:f2:99: ff:35:03:76:a0:8a:2d:89:48:30:31:d5:63:92:7b: 88:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:40:29:54:3C:3B:A5:33:74:04:0C:66:54:B3:99:F6:85:CB:AE:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:a5:9d:c4:25:3c:3b:b2:fa:9f:c1:49:23:0e:54:93:67:32: 8d:f5:8b:ff:8d:3a:69:71:e4:01:01:5e:6f:58:5a:33:f0:d5: e8:16:fc:0f:6b:2f:46:a7:d0:f6:26:ba:06:d2:8b:1b:0d:25: a9:fb:5e:07:c1:2b:ce:be:d5:f9:23:d9:b2:a6:3f:e7:37:04: 3b:1f:04:92:82:ff:77:ce:08:84:36:81:00:28:8c:d0:0c:02: 60:38:25:50:ce:f3:e6:86:4f:24:cf:8f:67:56:d2:e9:6d:03: d5:33:92:cc:90:a7:21:ba:24:17:b9:6d:3d:dc:c3:55:43:c7: 3d:9e:67:e0:3a:ad:c9:ee:e0:c3:06:74:9d:9b:8e:c1:1b:1a: 49:50:8f:e6:20:c2:d3:2d:2d:13:a6:f3:ae:7a:fd:4e:68:bb: 43:97:89:d1:48:17:5f:63:8a:ed:22:09:53:93:6a:9c:96:18: a7:0c:cf:10:84:87:ae:64:92:3e:73:5c:88:91:3e:27:8a:92: 57:46:6d:ec:f8:a5:65:ac:27:5e:26:e5:e7:5f:a3:43:65:fa: 66:e5:f5:68:a4:29:c2:48:4c:53:32:99:19:5e:d1:f7:df:c0: 8d:c1:15:20:11:da:8d:93:d3:96:0e:a4:62:55:26:14:2c:74: ec:87:d1:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPV0JkrY6r2ALB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDUxZmE5ZTctYTZhNy00YjExLWFiZTMtNWJiOWE5M2QwZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8L4n/oUphvl3rBmssUOLvUp59OdEruvBBiEN tQR1kV9Nwqv9mWsXyCpUcyZyj69VEhMp/BbufKraSUc+qr4lU7brnu9zTNBsYrZt qoWy89f+qE75ARf4BQG/F5ZkrSqAlixAaBPCRcj0UD9lZH4RYBdGTrvrBgtEM80J PyZxVFKXRplpaBy9fmYcj1Z1l7N9wmqv7g5shAos4AJoLSyenTh4oB5u8yaCl4mE 0ZXekbFHPPadeScZ9fLlycO6OcibOjtkgdFKXakdoxls7CHQ+ATSvc/S22zv6UMq u+gDynBUBH8QKKnUPURAiLUM8pn/NQN2oIotiUgwMdVjknuIVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABAKVQ8O6UzdAQMZlSzmfaFy67YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGUxMmNmYWItMzZhYy0z YjI4LThkZGEtOWYyMjMyYmVmYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+lncQlPDuy+p/BSSMOVJNnMo31i/+NOmlx5AEBXm9YWjPw1egW/A9r L0an0PYmugbSixsNJan7XgfBK86+1fkj2bKmP+c3BDsfBJKC/3fOCIQ2gQAojNAM AmA4JVDO8+aGTyTPj2dW0ultA9UzksyQpyG6JBe5bT3cw1VDxz2eZ+A6rcnu4MMG dJ2bjsEbGklQj+YgwtMtLROm8656/U5ou0OXidFIF19jiu0iCVOTapyWGKcMzxCE h65kkj5zXIiRPieKkldGbez4pWWsJ14m5edfo0Nl+mbl9WikKcJITFMymRle0fff wI3BFSAR2o2T05YOpGJVJhQsdOyH0Ro= -----END CERTIFICATE-----Generated at Sun Sep 27 08:22:12 2026 by rpki-client