$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afa908b9-5ae8-3bbd-83c8-0bc21ab2d75d.roa File: afa908b9-5ae8-3bbd-83c8-0bc21ab2d75d.roa (raw, json) Hash identifier: v82Mbnr4AqDyo0QbnLYuLuBxUrrwfRoOX2ooaGCxqvA= Subject key identifier: FD:A5:7D:9E:A5:4B:69:46:D3:5E:55:E5:E3:1D:B9:67:11:BF:3A:B4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA5AA649E139E127637F0F300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afa908b9-5ae8-3bbd-83c8-0bc21ab2d75d.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 19905 IP address blocks: 173.17.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:64:9e:13:9e:12:76:37:f0:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=76696eb8-58f5-42a3-bfb0-197f209e1acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:58:f9:41:dc:3a:dc:89:31:ee:78:a8:87: 5b:6c:aa:b0:19:29:c2:ed:ec:c3:99:18:13:45:11: a3:f9:cc:cf:18:a1:19:ef:06:f6:bd:b8:fd:7d:45: b5:7e:f5:24:58:08:ed:4c:27:8a:ba:e7:be:c4:dd: d2:31:10:59:2d:2b:10:d9:b5:fd:01:ab:0b:15:4a: 9d:e4:45:ed:45:b5:77:85:e4:9c:08:cb:3a:d7:02: b2:d4:a2:84:d8:2f:51:9a:cd:8f:48:d5:f0:df:a4: 38:fa:d9:4e:cd:ee:1f:30:f1:46:07:62:81:11:b1: 67:cb:73:77:cb:aa:7b:32:60:dd:df:85:69:7f:06: 85:8d:7c:f6:97:c7:cb:8b:c5:2d:2c:53:5f:1b:81: 51:5d:a9:21:b4:f8:1c:08:d1:66:b2:8a:3a:88:17: 41:27:02:55:cc:22:58:cc:56:38:09:d7:72:c4:b9: d0:d1:81:ed:2f:96:24:b0:4c:cf:ce:bc:e6:c7:00: af:28:05:1c:eb:05:c0:66:5f:ff:26:f9:8f:03:80: ba:bb:26:fc:e6:76:4a:8f:61:5c:3b:82:8f:05:4e: a9:28:09:a0:98:9d:2f:ea:37:d9:88:6e:63:24:18: 84:28:f2:d0:6b:58:6a:82:6e:23:2b:9d:b6:ab:f3: ea:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A5:7D:9E:A5:4B:69:46:D3:5E:55:E5:E3:1D:B9:67:11:BF:3A:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afa908b9-5ae8-3bbd-83c8-0bc21ab2d75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:ae:16:01:f1:59:3b:c8:ca:a4:2f:78:7c:65:6b:9d:03:73: af:96:6d:17:9d:b8:f8:b4:01:07:ba:1b:16:21:eb:c7:d4:63: b3:d9:84:8f:b6:36:a4:73:ed:2d:86:c4:9a:ec:15:aa:ba:5e: 60:49:6b:7e:c2:41:40:a2:05:df:6d:50:3c:a2:9d:ab:32:a8: fa:4c:95:98:e5:1a:83:7a:5a:ec:c7:e5:35:64:ec:6b:8b:0a: b3:cd:ce:55:41:29:81:7e:5e:36:b6:dc:e9:3d:3e:eb:bc:27: 99:3f:ef:02:a0:2b:c2:ed:87:57:c3:71:4e:0e:5f:4a:47:0d: 9d:c5:3a:6c:14:37:6d:30:bc:aa:27:01:c3:63:a1:b6:1b:98: 79:66:98:70:a4:c2:de:69:b8:ff:22:c7:6a:44:dc:65:ad:f9: bf:79:76:1c:b8:59:cb:b3:d3:2a:00:d0:c2:01:f1:25:7e:dd: de:bb:2e:82:37:b6:62:89:96:f4:12:11:a2:b9:eb:8a:27:44: 41:f6:6d:e0:df:34:e4:33:fa:b7:00:e4:8e:bd:ad:f2:d3:07: 49:f9:ba:7f:16:77:da:17:1a:19:ef:01:26:0a:35:fd:d1:68: f4:f4:88:99:7e:61:44:58:11:b5:e0:3d:23:b5:b6:dc:31:6d: e7:42:11:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqmSeE54Sdjfw8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk NzY2OTZlYjgtNThmNS00MmEzLWJmYjAtMTk3ZjIwOWUxYWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobBY+UHcOtyJMe54qIdbbKqwGSnC7ezDmRgT RRGj+czPGKEZ7wb2vbj9fUW1fvUkWAjtTCeKuue+xN3SMRBZLSsQ2bX9AasLFUqd 5EXtRbV3heScCMs61wKy1KKE2C9Rms2PSNXw36Q4+tlOze4fMPFGB2KBEbFny3N3 y6p7MmDd34VpfwaFjXz2l8fLi8UtLFNfG4FRXakhtPgcCNFmsoo6iBdBJwJVzCJY zFY4CddyxLnQ0YHtL5YksEzPzrzmxwCvKAUc6wXAZl//JvmPA4C6uyb85nZKj2Fc O4KPBU6pKAmgmJ0v6jfZiG5jJBiEKPLQa1hqgm4jK522q/PqnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2lfZ6lS2lG015V5eMduWcRvzq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWZhOTA4YjktNWFlOC0z YmJkLTgzYzgtMGJjMjFhYjJkNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRHEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKuFgHxWTvIyqQveHxla50Dc6+WbReduPi0AQe6GxYh68fUY7PZhI+2 NqRz7S2GxJrsFaq6XmBJa37CQUCiBd9tUDyinasyqPpMlZjlGoN6WuzH5TVk7GuL CrPNzlVBKYF+Xja23Ok9Puu8J5k/7wKgK8Lth1fDcU4OX0pHDZ3FOmwUN20wvKon AcNjobYbmHlmmHCkwt5puP8ix2pE3GWt+b95dhy4Wcuz0yoA0MIB8SV+3d67LoI3 tmKJlvQSEaK564onREH2beDfNOQz+rcA5I69rfLTB0n5un8Wd9oXGhnvASYKNf3R aPT0iJl+YURYEbXgPSO1ttwxbedCEXQ= -----END CERTIFICATE-----Generated at Tue Jul 28 22:05:03 2026 by rpki-client