$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a129c02-1e6f-3d04-bc89-3a9c9d672b58.roa File: 9a129c02-1e6f-3d04-bc89-3a9c9d672b58.roa (raw, json) Hash identifier: RyEbdZvAyK2mlLQxxNqagm3qDh8qs380gCHWOjjjagw= Subject key identifier: 3A:D6:EF:22:92:8D:2E:D4:FB:B3:57:3A:5C:27:56:1C:41:B2:EF:66 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F093CD42A3A6566ED41AAEF40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a129c02-1e6f-3d04-bc89-3a9c9d672b58.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.17.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d4:2a:3a:65:66:ed:41:aa:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=7a4f9d8a-4952-4f71-bed0-ade945a29ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8e:2b:fd:fb:19:2a:6a:b6:56:bd:75:7f:a2: 2b:9c:c9:95:cc:03:c7:d0:b8:fa:ce:ef:f5:64:09: 2c:a1:88:58:b3:b9:5e:d3:44:eb:f2:3f:d4:3e:08: 69:6f:62:05:00:6b:be:b2:3a:a7:d3:3f:b5:33:f7: a8:77:2a:18:8c:d9:66:23:27:bc:0d:d4:a6:da:6f: 86:f5:89:04:bf:87:e7:e0:de:7c:4a:54:f1:c3:ad: a0:59:7a:80:1a:e0:ff:97:7d:36:2f:e0:83:f9:ab: 16:75:79:32:af:9e:0f:df:03:db:e5:35:ca:d7:d5: da:66:f9:1a:b9:91:9d:1c:f3:b0:37:46:b9:a3:da: 1b:b1:a0:9c:5d:1d:7e:c4:32:b1:bf:48:ae:8a:13: 95:8f:7c:91:4b:0f:ff:72:ec:aa:6f:46:03:00:9a: 2e:2f:18:30:d3:f7:67:69:a0:0e:cd:da:42:4c:fa: 22:79:45:e8:d1:1b:74:62:43:9d:59:aa:a1:05:fd: 10:c7:4e:1d:09:39:bc:86:ef:4b:6a:03:1f:ad:47: 0c:cc:9b:fc:82:fe:fc:3b:de:e0:c7:6e:cd:08:b2: c9:61:9a:e1:f1:35:a7:4f:4b:ab:86:29:08:85:83: 64:29:a7:bb:9c:29:db:94:4b:22:e6:1f:0b:c4:4b: 3a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D6:EF:22:92:8D:2E:D4:FB:B3:57:3A:5C:27:56:1C:41:B2:EF:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a129c02-1e6f-3d04-bc89-3a9c9d672b58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:56:39:e2:ae:c4:11:4e:0f:f4:d7:c2:cc:18:11:34:07:63: 70:20:32:ff:63:e8:95:7b:72:22:b4:f3:4c:8b:2b:42:b7:ee: f9:05:2a:65:69:9f:74:d9:8c:5f:81:c2:9a:dd:42:c4:59:79: 52:dd:33:0e:98:78:90:eb:d4:8f:9f:85:e5:b1:42:44:b0:d8: d2:f9:c9:5a:2b:27:e3:d2:a8:5a:78:f0:4a:57:83:5c:96:11: 73:61:2f:d0:88:e4:52:3d:6a:fd:26:5e:27:cd:58:7f:49:10: f0:ab:20:cf:17:3e:e7:4c:ec:fe:5b:89:44:52:f8:54:52:a3: 78:bc:84:3f:c7:0f:97:34:8b:f4:62:91:bc:dd:dc:6c:9e:39: 1e:96:b8:19:49:09:7d:ec:62:05:c1:de:92:53:4a:39:96:27: 2b:c7:78:0c:b4:18:5e:61:73:aa:60:e9:e4:7f:e6:e3:11:0d: a8:3b:86:a2:cd:be:da:87:bd:51:bd:76:84:51:b3:e2:17:44: e7:4c:5d:eb:5f:8a:7e:a6:ea:41:e7:2e:9e:05:dd:f9:ed:fd: 8e:a5:a1:27:f2:cd:7d:73:66:86:7b:90:ee:8a:e2:d6:5a:5a: 15:03:b8:b2:3d:d4:4a:b1:67:54:7f:e8:de:32:44:ae:c1:09: ca:c4:89:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNQqOmVm7UGq70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk N2E0ZjlkOGEtNDk1Mi00ZjcxLWJlZDAtYWRlOTQ1YTI5YWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA344r/fsZKmq2Vr11f6IrnMmVzAPH0Lj6zu/1 ZAksoYhYs7le00Tr8j/UPghpb2IFAGu+sjqn0z+1M/eodyoYjNlmIye8DdSm2m+G 9YkEv4fn4N58SlTxw62gWXqAGuD/l302L+CD+asWdXkyr54P3wPb5TXK19XaZvka uZGdHPOwN0a5o9obsaCcXR1+xDKxv0iuihOVj3yRSw//cuyqb0YDAJouLxgw0/dn aaAOzdpCTPoieUXo0Rt0YkOdWaqhBf0Qx04dCTm8hu9LagMfrUcMzJv8gv78O97g x27NCLLJYZrh8TWnT0urhikIhYNkKae7nCnblEsi5h8LxEs6OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrW7yKSjS7U+7NXOlwnVhxBsu9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWExMjljMDItMWU2Zi0z ZDA0LWJjODktM2E5YzlkNjcyYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxWOeKuxBFOD/TXwswYETQHY3AgMv9j6JV7ciK080yLK0K37vkFKmVp n3TZjF+BwprdQsRZeVLdMw6YeJDr1I+fheWxQkSw2NL5yVorJ+PSqFp48EpXg1yW EXNhL9CI5FI9av0mXifNWH9JEPCrIM8XPudM7P5biURS+FRSo3i8hD/HD5c0i/Ri kbzd3GyeOR6WuBlJCX3sYgXB3pJTSjmWJyvHeAy0GF5hc6pg6eR/5uMRDag7hqLN vtqHvVG9doRRs+IXROdMXetfin6m6kHnLp4F3fnt/Y6loSfyzX1zZoZ7kO6K4tZa WhUDuLI91EqxZ1R/6N4yRK7BCcrEiZg= -----END CERTIFICATE-----Generated at Tue Sep 22 12:11:52 2026 by rpki-client