$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d002945b-9216-338f-a914-46f9e063f0e1.roa File: d002945b-9216-338f-a914-46f9e063f0e1.roa (raw, json) Hash identifier: prtE3Y7HtPc3SzbkRzDnDxcGzD1+YB1Hyd6ocTtsNYM= Subject key identifier: 27:95:F2:E3:B1:8C:05:1C:AE:37:D7:C4:2F:47:F0:F9:AC:A2:97:84 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F09267073A73EEBF424AF5E20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d002945b-9216-338f-a914-46f9e063f0e1.roa Signing time: Wed 02 Sep 2026 00:15:11 +0000 ROA not before: Wed 02 Sep 2026 00:15:11 +0000 ROA not after: Tue 01 Dec 2026 01:15:11 +0000 asID: 30036 IP address blocks: 173.17.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:26:70:73:a7:3e:eb:f4:24:af:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 2 00:15:11 2026 GMT Not After : Dec 1 01:15:11 2026 GMT Subject: CN=ea800439-5768-4f01-9872-9fac27851607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c5:aa:c5:f8:fd:5d:ac:56:b5:47:82:e5:b1: f5:b9:aa:d9:3e:56:81:45:02:67:20:d5:5e:77:fe: 5f:88:61:2d:8c:b2:31:23:b3:3d:2d:0a:f4:f8:72: 56:db:ce:4f:a7:e6:b3:11:e8:78:ff:ee:c8:ad:60: 9b:2e:eb:c2:3c:ef:df:6d:8f:cd:fe:40:0c:dd:09: 11:f9:cc:64:4d:1e:ff:54:39:57:ce:4b:d3:81:99: b2:6f:fc:fe:aa:bc:76:9d:f2:32:9e:90:10:4a:9b: 5c:ca:e8:76:bc:d5:1e:65:bf:43:55:e1:6f:c0:80: a3:40:55:60:2d:a4:1f:72:02:4a:89:d5:43:13:8d: ee:2a:10:f1:35:65:d7:64:fc:36:a0:15:53:97:17: 17:05:a4:17:f7:b1:69:97:66:98:06:f0:b5:59:c5: 1d:7b:3f:e1:26:eb:31:1d:aa:57:96:4c:29:ef:c1: ad:e8:19:b5:0b:c2:16:41:95:52:04:1a:5e:3a:f8: 10:91:ce:9f:bd:87:4d:0d:f3:15:a4:da:d3:2a:eb: 73:e4:8b:54:ad:9e:19:8c:8e:10:70:fa:09:bc:25: db:a3:f9:93:ec:24:79:d2:8d:d7:bf:7d:06:2f:b7: 5b:93:ee:e9:91:b0:32:ed:70:e1:b0:27:0c:3f:07: 7a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:95:F2:E3:B1:8C:05:1C:AE:37:D7:C4:2F:47:F0:F9:AC:A2:97:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d002945b-9216-338f-a914-46f9e063f0e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:3a:aa:92:60:40:bd:e1:97:bd:74:46:ea:77:9d:27:5a:c9: 4e:c4:d0:97:1e:d1:37:57:3f:4a:31:3d:5e:96:55:1a:3b:b1: d8:ef:cc:c8:ac:c9:e7:33:87:78:dc:08:be:f3:85:83:f8:38: b3:5f:b3:41:b6:a7:5d:76:e3:2e:8a:7b:d4:2d:83:b4:e5:04: 14:00:eb:01:99:5e:3b:7e:e0:71:c6:57:d0:a2:64:e8:88:92: d8:60:5e:5d:b7:cb:b2:67:25:2a:15:91:bf:0d:f0:59:d7:65: 5c:01:8b:86:81:54:00:75:33:e7:a7:ed:f6:6e:db:fe:c1:c0: d3:b2:f8:37:c6:20:78:13:73:b9:0e:9a:5b:02:bf:96:e6:5e: 26:59:2d:57:7b:b7:08:c9:db:81:26:6f:c4:e3:f8:c1:27:f4: 20:3a:f4:42:12:c6:05:f0:1c:64:98:a9:95:2c:76:28:dc:a4: ca:29:f3:f3:aa:d4:2d:17:74:b8:5f:e7:42:ba:68:59:e6:37: 3f:f4:79:35:ee:44:43:0c:fb:2c:cc:07:6d:ba:33:dd:aa:6c: e3:5f:74:fd:65:44:11:d6:14:b2:24:6a:a8:68:69:26:7b:56: 2f:a4:9d:48:ec:ae:e8:a2:81:29:f8:8f:17:d1:b8:e9:8d:3a: f4:3e:3b:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JJnBzpz7r9CSvXiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwMjAwMTUxMVoXDTI2MTIwMTAxMTUxMVowLzEtMCsGA1UEAxMk ZWE4MDA0MzktNTc2OC00ZjAxLTk4NzItOWZhYzI3ODUxNjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMWqxfj9XaxWtUeC5bH1uarZPlaBRQJnINVe d/5fiGEtjLIxI7M9LQr0+HJW285Pp+azEeh4/+7IrWCbLuvCPO/fbY/N/kAM3QkR +cxkTR7/VDlXzkvTgZmyb/z+qrx2nfIynpAQSptcyuh2vNUeZb9DVeFvwICjQFVg LaQfcgJKidVDE43uKhDxNWXXZPw2oBVTlxcXBaQX97Fpl2aYBvC1WcUdez/hJusx HapXlkwp78Gt6Bm1C8IWQZVSBBpeOvgQkc6fvYdNDfMVpNrTKutz5ItUrZ4ZjI4Q cPoJvCXbo/mT7CR50o3Xv30GL7dbk+7pkbAy7XDhsCcMPwd69wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeV8uOxjAUcrjfXxC9H8PmsopeEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDAwMjk0NWItOTIxNi0z MzhmLWE5MTQtNDZmOWUwNjNmMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADU6qpJgQL3hl710Rup3nSdayU7E0Jce0TdXP0oxPV6WVRo7sdjvzMis yeczh3jcCL7zhYP4OLNfs0G2p1124y6Ke9Qtg7TlBBQA6wGZXjt+4HHGV9CiZOiI kthgXl23y7JnJSoVkb8N8FnXZVwBi4aBVAB1M+en7fZu2/7BwNOy+DfGIHgTc7kO mlsCv5bmXiZZLVd7twjJ24Emb8Tj+MEn9CA69EISxgXwHGSYqZUsdijcpMop8/Oq 1C0XdLhf50K6aFnmNz/0eTXuREMM+yzMB226M92qbONfdP1lRBHWFLIkaqhoaSZ7 Vi+knUjsruiigSn4jxfRuOmNOvQ+Oz8= -----END CERTIFICATE-----Generated at Tue Sep 22 22:53:23 2026 by rpki-client