$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a201e5a0-6e5b-3594-b96f-fe6a8e6f600b.roa File: a201e5a0-6e5b-3594-b96f-fe6a8e6f600b.roa (raw, json) Hash identifier: UzfEqFKodvKW4mjI49iXmfvdlktyI+hVxAIm/oN3q+k= Subject key identifier: EB:2A:42:D3:25:C5:BF:77:3E:CE:DE:68:02:57:86:B1:4E:46:57:74 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974C47CD2158EF5D5F9C680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a201e5a0-6e5b-3594-b96f-fe6a8e6f600b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.17.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:c4:7c:d2:15:8e:f5:d5:f9:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7d0b8b35-a57e-4bce-beac-5383b114a232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:22:d2:16:6f:f1:b4:cc:13:6e:d3:0a:a1: 25:39:48:00:2c:85:2b:8e:b3:63:5a:fd:2e:13:d9: 32:dc:ac:92:eb:11:e4:d3:7c:44:4b:02:12:62:3e: 0f:a4:e2:4f:44:15:76:4c:61:04:89:50:a0:d4:db: d2:a0:23:bf:1c:9c:56:81:7f:6f:24:32:77:38:b7: 26:3b:36:40:01:f4:99:29:2a:59:e7:d1:11:a6:64: 07:39:f5:1e:96:a1:53:5c:05:3c:32:19:0e:c0:f4: 65:ab:58:61:8b:72:b8:bc:91:7b:f9:62:4e:6e:11: 8f:76:2a:d2:fa:05:85:60:64:39:31:3c:4e:d7:24: fb:a4:a4:2e:4a:53:d2:95:28:95:90:1a:76:d0:7e: 66:fd:5f:13:da:08:b2:0f:26:f8:a3:41:75:d6:d3: 14:93:59:76:7b:f6:c2:12:c9:c5:62:47:e3:ea:3d: 3a:b8:d2:e8:63:e1:f3:a4:be:9a:70:24:7d:67:54: fa:5a:ed:51:37:bb:2a:db:9a:ea:6f:a0:4d:b6:4c: 7b:48:2f:d2:10:89:0f:70:a0:18:19:ab:c9:fc:9c: f9:01:c0:28:68:02:13:5c:55:b4:e9:bc:1e:1f:45: af:c3:ae:6a:f3:10:75:b0:fa:14:a5:c7:71:cc:ba: 83:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2A:42:D3:25:C5:BF:77:3E:CE:DE:68:02:57:86:B1:4E:46:57:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a201e5a0-6e5b-3594-b96f-fe6a8e6f600b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ae:78:42:00:ae:95:d3:a3:0d:68:f2:5e:7f:5b:b5:41:cb: b0:c0:3a:ab:58:00:31:bd:0b:4f:ab:f7:8a:de:4d:59:74:1d: 47:ce:f7:d1:56:e9:cd:7a:3d:f3:04:81:47:29:61:1e:45:1c: b0:cc:a3:56:4a:c2:b2:60:29:4c:78:2b:2a:bc:4f:c4:e8:4a: 25:6b:ca:db:66:18:8b:28:4c:90:db:81:00:8b:00:14:a8:03: f7:90:8b:f5:49:3a:fe:46:f6:78:ad:94:6b:57:7a:24:47:2a: 5d:7f:50:e6:f3:2d:49:a0:5f:ca:84:21:a6:59:89:76:49:36: fb:69:82:6f:71:71:28:46:e5:ab:5b:70:74:c6:bb:5d:6e:9e: 61:0a:51:2a:97:f4:45:1f:c1:78:03:7f:12:4f:54:52:23:7c: f5:5a:d9:fc:2a:70:a9:d7:17:b0:8e:7c:d9:29:a9:3b:eb:d8: a6:85:08:1e:6a:58:ac:02:3f:ec:62:19:39:a7:61:1b:dc:ca: 04:ce:04:cc:1b:a7:a6:c3:49:b7:49:0e:39:f7:5a:75:2d:b7: 5e:e0:2c:61:19:d4:97:0b:ed:c7:d7:ba:41:08:e8:7a:c7:3e: 0e:a8:43:62:35:f4:f9:17:8d:16:f0:d3:e9:f2:fd:4f:45:a8: 74:1b:c0:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdMR80hWO9dX5xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2QwYjhiMzUtYTU3ZS00YmNlLWJlYWMtNTM4M2IxMTRhMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutEi0hZv8bTME27TCqElOUgALIUrjrNjWv0u E9ky3KyS6xHk03xESwISYj4PpOJPRBV2TGEEiVCg1NvSoCO/HJxWgX9vJDJ3OLcm OzZAAfSZKSpZ59ERpmQHOfUelqFTXAU8MhkOwPRlq1hhi3K4vJF7+WJObhGPdirS +gWFYGQ5MTxO1yT7pKQuSlPSlSiVkBp20H5m/V8T2giyDyb4o0F11tMUk1l2e/bC EsnFYkfj6j06uNLoY+HzpL6acCR9Z1T6Wu1RN7sq25rqb6BNtkx7SC/SEIkPcKAY GavJ/Jz5AcAoaAITXFW06bweH0Wvw65q8xB1sPoUpcdxzLqDeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsqQtMlxb93Ps7eaAJXhrFORld0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIwMWU1YTAtNmU1Yi0z NTk0LWI5NmYtZmU2YThlNmY2MDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmueEIArpXTow1o8l5/W7VBy7DAOqtYADG9C0+r94reTVl0HUfO99FW 6c16PfMEgUcpYR5FHLDMo1ZKwrJgKUx4Kyq8T8ToSiVryttmGIsoTJDbgQCLABSo A/eQi/VJOv5G9nitlGtXeiRHKl1/UObzLUmgX8qEIaZZiXZJNvtpgm9xcShG5atb cHTGu11unmEKUSqX9EUfwXgDfxJPVFIjfPVa2fwqcKnXF7COfNkpqTvr2KaFCB5q WKwCP+xiGTmnYRvcygTOBMwbp6bDSbdJDjn3WnUtt17gLGEZ1JcL7cfXukEI6HrH Pg6oQ2I19PkXjRbw0+ny/U9FqHQbwBE= -----END CERTIFICATE-----Generated at Sat Sep 26 18:01:56 2026 by rpki-client