$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfabafe3-7463-3fa8-8663-620bcced1c28.roa File: cfabafe3-7463-3fa8-8663-620bcced1c28.roa (raw, json) Hash identifier: TT9Z0QRggLCOXJ8iemv0Bq28RxaoVULly79Z7XpS5QI= Subject key identifier: 99:B1:AE:30:B6:B0:66:B0:4F:8E:16:B7:8E:6B:C7:E9:11:3B:02:DC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F2ABD2D5519278DE879EC9600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfabafe3-7463-3fa8-8663-620bcced1c28.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.17.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:2d:55:19:27:8d:e8:79:ec:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=b06ef5d1-6f33-4351-87e1-6836671eab96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:14:5c:09:b8:21:91:b3:1e:96:e9:82:e6: 31:45:b1:c5:12:cd:89:f9:7d:31:15:45:99:76:84: 14:4e:4f:00:73:f0:df:8e:df:80:23:b2:6b:2c:e6: 25:60:53:c5:a3:f8:0d:44:22:d1:19:b3:0c:77:5b: b2:f2:a9:45:ea:14:89:7b:60:e8:ca:bc:69:4b:ae: 5f:08:94:a4:10:31:88:91:7a:3f:07:3f:01:c7:99: f8:97:9d:df:9f:ed:a4:82:86:f0:63:14:80:68:c7: be:4f:ca:ec:9a:11:38:03:fb:e2:0f:81:48:0f:73: a0:85:8a:c7:a5:d4:84:70:ec:3e:a7:a9:34:67:52: 82:bb:48:de:81:08:26:a1:65:5b:c0:3c:db:9c:78: f2:ee:a5:a7:a5:e7:35:d2:d7:ce:d7:e7:0b:44:fd: c5:4c:b9:c1:d0:9b:ea:fe:8a:9b:8a:67:d9:c7:b0: 1d:91:2c:8b:fe:a0:3b:67:99:4e:73:7c:2a:96:fd: 4c:41:a9:ac:7e:89:9e:e9:06:28:14:5b:07:c7:17: b8:fc:21:d1:e9:8c:ea:59:25:7e:f7:cf:b7:2e:44: fb:8e:64:bb:82:2b:b7:37:e8:29:7e:c5:39:19:26: e9:ea:56:63:02:13:8c:c1:0a:b1:2a:25:7e:d0:17: 85:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B1:AE:30:B6:B0:66:B0:4F:8E:16:B7:8E:6B:C7:E9:11:3B:02:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfabafe3-7463-3fa8-8663-620bcced1c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:3e:e0:d9:bd:4d:67:1b:28:ce:69:d6:a3:1d:39:12:a3:2a: 14:67:20:7b:6f:29:70:b9:7b:fe:bf:15:96:46:d7:75:03:ab: b5:3a:9e:0f:b1:df:1a:ff:ba:2c:21:86:55:f6:4a:c8:da:f5: 5c:c2:5f:c6:de:a0:e9:62:8e:c3:84:3c:0e:e2:23:22:6b:88: 2f:21:a6:ac:9a:3e:db:e5:ed:0b:c3:6a:f0:fc:8e:0d:f5:ac: 68:30:d4:cf:17:79:00:ab:92:91:55:d6:8a:07:da:cb:19:64: 93:40:25:11:a5:75:a5:03:a7:0a:ba:53:82:7a:77:19:7f:13: 20:10:5c:d4:82:82:12:bd:39:77:67:5b:a4:97:6f:d4:0a:7a: 61:cb:47:19:a0:8e:09:16:65:c8:87:2c:94:10:f6:d0:da:d2: 62:e0:73:e2:0a:2c:91:b2:c9:88:13:ce:22:45:dc:91:5d:77: fa:47:4f:70:af:5b:55:6d:18:a5:5c:3c:4d:d3:8b:b2:e4:66: 2c:ce:0f:41:4b:76:bf:4a:d7:52:e6:9e:d6:44:cf:4d:6d:a4: 23:53:a0:eb:0e:a4:73:2a:73:bb:2d:3f:0d:b8:da:78:64:6a: 3b:09:35:9c:13:a1:cd:f8:d4:14:75:29:e6:e1:0b:2f:2c:7f: 8c:1d:8e:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvS1VGSeN6HnslgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YjA2ZWY1ZDEtNmYzMy00MzUxLTg3ZTEtNjgzNjY3MWVhYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhUUXAm4IZGzHpbpguYxRbHFEs2J+X0xFUWZ doQUTk8Ac/Dfjt+AI7JrLOYlYFPFo/gNRCLRGbMMd1uy8qlF6hSJe2DoyrxpS65f CJSkEDGIkXo/Bz8Bx5n4l53fn+2kgobwYxSAaMe+T8rsmhE4A/viD4FID3OghYrH pdSEcOw+p6k0Z1KCu0jegQgmoWVbwDzbnHjy7qWnpec10tfO1+cLRP3FTLnB0Jvq /oqbimfZx7AdkSyL/qA7Z5lOc3wqlv1MQamsfome6QYoFFsHxxe4/CHR6YzqWSV+ 98+3LkT7jmS7giu3N+gpfsU5GSbp6lZjAhOMwQqxKiV+0BeFcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmxrjC2sGawT44Wt45rx+kROwLcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ZhYmFmZTMtNzQ2My0z ZmE4LTg2NjMtNjIwYmNjZWQxYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrREYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4+4Nm9TWcbKM5p1qMdORKjKhRnIHtvKXC5e/6/FZZG13UDq7U6ng+x 3xr/uiwhhlX2Ssja9VzCX8beoOlijsOEPA7iIyJriC8hpqyaPtvl7QvDavD8jg31 rGgw1M8XeQCrkpFV1ooH2ssZZJNAJRGldaUDpwq6U4J6dxl/EyAQXNSCghK9OXdn W6SXb9QKemHLRxmgjgkWZciHLJQQ9tDa0mLgc+IKLJGyyYgTziJF3JFdd/pHT3Cv W1VtGKVcPE3Ti7LkZizOD0FLdr9K11LmntZEz01tpCNToOsOpHMqc7stPw242nhk ajsJNZwToc341BR1KebhCy8sf4wdjt8= -----END CERTIFICATE-----Generated at Sun Sep 27 07:48:39 2026 by rpki-client