$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e25daedd-e177-3828-acc1-56a58c64c6c0.roa File: e25daedd-e177-3828-acc1-56a58c64c6c0.roa (raw, json) Hash identifier: cLv282JoUmYHC5MtBkc/6IvYoiL+Q9eWvCYXw7qJ0Wg= Subject key identifier: 3E:F7:03:9D:F3:BF:40:36:46:CB:E5:6D:61:63:A8:BC:3D:52:67:86 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D66264040C66589B67480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e25daedd-e177-3828-acc1-56a58c64c6c0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.17.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:66:26:40:40:c6:65:89:b6:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=78985a27-2374-44d2-b92c-698546a8dde8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d2:3a:84:46:0e:9c:8f:9f:1a:b7:6f:3c:d8: 78:b2:7b:76:a7:94:ca:0a:00:79:38:3b:86:24:d6: ae:59:02:cf:bc:a9:4c:cc:80:b2:b8:8a:99:96:d5: c3:e5:0c:8d:48:27:00:be:ed:ea:08:14:4b:e8:61: 8f:31:30:ac:53:f3:8c:ba:40:ee:fe:92:13:fa:0f: 9b:67:bc:d6:03:69:aa:b7:16:ed:33:a6:b2:14:14: 03:9f:a7:9a:71:e2:56:10:c2:3d:67:14:f6:0b:bf: d1:fc:31:3e:5c:1b:fc:2d:fe:c1:04:39:dc:b8:a2: f1:b8:3f:a6:c7:c5:75:3a:f2:17:4f:a7:57:17:38: 76:ce:b9:de:96:66:f8:82:bb:84:70:57:22:7f:06: e5:cd:19:02:57:03:fe:dd:f3:15:2b:61:f7:73:6a: c0:14:59:16:33:57:d3:6c:63:55:a5:da:a5:03:e2: f0:26:d2:8e:10:f1:89:30:a7:77:fe:0a:93:d2:b5: b1:74:84:52:50:23:79:f2:6a:dd:d4:12:07:fa:d7: c1:f0:8c:ec:32:99:49:21:0f:50:a3:ba:e7:1a:db: f1:ea:0f:29:8c:90:90:7b:5d:e7:a8:a0:cc:59:01: d2:f4:09:99:9f:7d:e8:2c:4a:4c:e2:96:d4:d1:5a: 5a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F7:03:9D:F3:BF:40:36:46:CB:E5:6D:61:63:A8:BC:3D:52:67:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e25daedd-e177-3828-acc1-56a58c64c6c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:34:3d:d7:17:6c:54:4c:d4:01:7e:84:e2:8e:96:b6:0a:ce: 57:8c:16:97:4d:e6:f6:b1:91:a5:b5:83:55:c6:d9:12:2f:62: ea:16:64:6a:06:31:63:44:4b:28:6b:79:92:60:83:ae:c9:08: d0:96:4f:42:ea:6e:0c:ac:0d:5a:f4:b8:8f:ed:45:05:c4:35: 00:65:30:6b:71:a5:14:12:c3:2e:3d:e7:f6:17:8c:09:c1:7b: 2b:8f:06:4c:7a:19:ff:04:81:73:d3:f7:6d:e4:5b:11:0e:30: 47:d7:50:76:f3:71:a8:52:58:27:47:c4:93:f6:37:51:a8:a8: 28:bb:e7:07:8e:71:fa:2c:73:72:9a:fb:8d:5f:a7:c5:da:7d: 08:c0:1c:ef:a0:e3:0c:11:59:a6:3b:7b:bc:f9:31:b7:50:48: fe:af:e7:cd:55:09:96:a9:45:e8:5b:70:82:38:3e:b9:3a:48: 6a:79:62:4c:1e:66:5d:99:e4:e1:e9:72:7a:b1:2c:57:fa:9f: 2a:06:0b:86:61:f0:00:3b:74:07:9d:0a:09:8a:03:54:5b:2f: 4f:f4:05:83:a3:d8:a3:e4:44:96:5a:1b:f9:a1:58:ea:e4:0a: d9:1f:37:30:0c:be:3c:98:c6:96:47:61:5d:e8:f5:ef:06:13: 30:c1:12:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWYmQEDGZYm2dIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk Nzg5ODVhMjctMjM3NC00NGQyLWI5MmMtNjk4NTQ2YThkZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdI6hEYOnI+fGrdvPNh4snt2p5TKCgB5ODuG JNauWQLPvKlMzICyuIqZltXD5QyNSCcAvu3qCBRL6GGPMTCsU/OMukDu/pIT+g+b Z7zWA2mqtxbtM6ayFBQDn6eaceJWEMI9ZxT2C7/R/DE+XBv8Lf7BBDncuKLxuD+m x8V1OvIXT6dXFzh2zrnelmb4gruEcFcifwblzRkCVwP+3fMVK2H3c2rAFFkWM1fT bGNVpdqlA+LwJtKOEPGJMKd3/gqT0rWxdIRSUCN58mrd1BIH+tfB8IzsMplJIQ9Q o7rnGtvx6g8pjJCQe13nqKDMWQHS9AmZn33oLEpM4pbU0VpaSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD73A53zv0A2RsvlbWFjqLw9UmeGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTI1ZGFlZGQtZTE3Ny0z ODI4LWFjYzEtNTZhNThjNjRjNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArREnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACA0PdcXbFRM1AF+hOKOlrYKzleMFpdN5vaxkaW1g1XG2RIvYuoWZGoG MWNESyhreZJgg67JCNCWT0LqbgysDVr0uI/tRQXENQBlMGtxpRQSwy495/YXjAnB eyuPBkx6Gf8EgXPT923kWxEOMEfXUHbzcahSWCdHxJP2N1GoqCi75weOcfosc3Ka +41fp8XafQjAHO+g4wwRWaY7e7z5MbdQSP6v581VCZapRehbcII4Prk6SGp5Ykwe Zl2Z5OHpcnqxLFf6nyoGC4Zh8AA7dAedCgmKA1RbL0/0BYOj2KPkRJZaG/mhWOrk CtkfNzAMvjyYxpZHYV3o9e8GEzDBEvQ= -----END CERTIFICATE-----Generated at Sat Sep 26 08:04:18 2026 by rpki-client