$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afabeb14-ea97-3105-9a55-818daa5a9fe4.roa File: afabeb14-ea97-3105-9a55-818daa5a9fe4.roa (raw, json) Hash identifier: bm9xBUPJtTZCNOUETS69LGzpai50+oy146cw8Nl7il8= Subject key identifier: E4:3B:29:3E:19:A7:61:2A:B7:C5:36:1F:F0:3A:2A:F4:AA:35:BF:A1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F23C24FB69F20A540F2457C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afabeb14-ea97-3105-9a55-818daa5a9fe4.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.17.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:4f:b6:9f:20:a5:40:f2:45:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=32506713-9820-406b-ba26-a3950556cc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:52:e8:69:73:20:a5:28:47:b0:c6:20:76: 85:25:97:30:4c:6b:07:ae:f9:d6:7e:94:f7:9e:8f: 0a:c9:83:d7:0a:f2:1c:2d:ba:e0:fc:a3:c7:d9:fd: 80:77:68:13:11:42:e8:b0:b0:7c:fd:72:c3:b3:ca: 90:71:7c:56:0f:6d:37:bd:98:a8:6d:dd:84:41:e0: 02:66:03:1c:67:4c:43:38:f1:05:37:ba:2d:be:3f: d1:fb:b7:21:ec:f0:0f:c2:56:65:1b:f4:ec:34:c3: 31:74:29:dc:60:9d:89:54:6c:9f:2b:fb:a1:7d:31: 15:9b:56:af:67:61:43:46:d1:17:66:c2:51:60:96: 22:29:35:27:87:2a:8a:c9:5e:4f:c4:b2:f0:ad:93: a0:26:47:c9:83:fb:44:e1:a4:7c:10:bc:5f:67:7b: e5:8e:44:6c:32:e4:b8:dc:81:2c:03:bf:60:d3:3a: 76:1a:e9:63:1e:e6:b3:54:bb:1b:7b:12:fe:18:41: 0c:87:d6:4b:27:71:28:a3:00:6d:6f:20:86:92:5a: 1c:50:0f:65:55:3d:8c:92:f5:c7:d2:4d:f7:82:7a: 96:23:f0:ef:27:77:aa:b8:3a:c9:6e:e6:25:cf:7b: 68:f4:fe:0d:49:4f:b6:1b:56:da:bc:51:09:66:9f: 24:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3B:29:3E:19:A7:61:2A:B7:C5:36:1F:F0:3A:2A:F4:AA:35:BF:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/afabeb14-ea97-3105-9a55-818daa5a9fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5d:95:8f:1a:be:12:ae:48:f0:8e:be:6d:18:27:28:9d:27: 62:b9:9e:f1:93:6b:43:59:2e:03:0c:18:99:9b:5a:1a:cb:14: 7d:45:e8:9d:28:02:25:84:f1:31:37:fd:f5:1d:12:a5:33:3c: 3d:d3:35:f0:61:4a:b9:31:f4:ba:22:b8:9d:29:f3:da:f9:c0: ac:a2:a0:68:9f:1e:17:dc:fd:2b:5f:bd:8e:3e:2c:f3:d5:e8: 93:4d:52:58:a0:95:99:af:9e:2a:16:95:22:a6:c2:52:93:75: 1d:56:ef:ea:ca:80:ed:00:b9:b1:01:70:5b:c7:0f:45:15:46: 4f:a7:41:0f:75:36:9e:4c:dd:9f:e0:0f:ad:24:79:3c:88:70: f5:51:4e:7f:32:d4:ec:ae:08:bb:37:20:ff:57:40:4c:8a:c4: 3a:c9:b0:16:ea:ef:8e:fe:cc:bd:a1:60:6d:38:bb:c3:9c:46: a2:63:00:c5:86:42:7f:e8:1b:12:7f:3a:41:be:d8:47:67:cf: 9d:37:f4:ef:39:2e:94:5c:57:fd:78:7c:f6:3e:5f:25:0e:1f: 49:e6:e3:25:d7:52:aa:ef:5b:e4:07:8e:d6:38:f7:f8:08:91: 0f:12:ba:16:6a:8d:90:0c:7a:9e:5d:71:74:0b:85:13:1c:7b: ec:93:b6:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwk+2nyClQPJFfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MzI1MDY3MTMtOTgyMC00MDZiLWJhMjYtYTM5NTA1NTZjYzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsClS6GlzIKUoR7DGIHaFJZcwTGsHrvnWfpT3 no8KyYPXCvIcLbrg/KPH2f2Ad2gTEULosLB8/XLDs8qQcXxWD203vZiobd2EQeAC ZgMcZ0xDOPEFN7otvj/R+7ch7PAPwlZlG/TsNMMxdCncYJ2JVGyfK/uhfTEVm1av Z2FDRtEXZsJRYJYiKTUnhyqKyV5PxLLwrZOgJkfJg/tE4aR8ELxfZ3vljkRsMuS4 3IEsA79g0zp2GuljHuazVLsbexL+GEEMh9ZLJ3EoowBtbyCGklocUA9lVT2MkvXH 0k33gnqWI/DvJ3equDrJbuYlz3to9P4NSU+2G1bavFEJZp8k3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQ7KT4Zp2Eqt8U2H/A6KvSqNb+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWZhYmViMTQtZWE5Ny0z MTA1LTlhNTUtODE4ZGFhNWE5ZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAldlY8avhKuSPCOvm0YJyidJ2K5nvGTa0NZLgMMGJmbWhrLFH1F6J0o AiWE8TE3/fUdEqUzPD3TNfBhSrkx9LoiuJ0p89r5wKyioGifHhfc/StfvY4+LPPV 6JNNUliglZmvnioWlSKmwlKTdR1W7+rKgO0AubEBcFvHD0UVRk+nQQ91Np5M3Z/g D60keTyIcPVRTn8y1OyuCLs3IP9XQEyKxDrJsBbq747+zL2hYG04u8OcRqJjAMWG Qn/oGxJ/OkG+2Ednz5039O85LpRcV/14fPY+XyUOH0nm4yXXUqrvW+QHjtY49/gI kQ8SuhZqjZAMep5dcXQLhRMce+yTtuA= -----END CERTIFICATE-----Generated at Fri Sep 25 05:34:29 2026 by rpki-client