$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0457d7e0-606a-30b5-8f58-4bce9307b509.roa File: 0457d7e0-606a-30b5-8f58-4bce9307b509.roa (raw, json) Hash identifier: QFQzs27vsg1Ex1T9MK9P7ZaBhxCRQSMeUzK5E55zL24= Subject key identifier: 03:7B:AE:E8:8E:CC:F0:35:57:F9:5B:A4:44:D9:C2:F6:C7:B1:1C:34 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F480D355B17B4BE7C84632680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0457d7e0-606a-30b5-8f58-4bce9307b509.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.17.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:35:5b:17:b4:be:7c:84:63:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=7b1de988-c5c1-4d84-99f5-2b17bdc6eb88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:db:af:1d:f8:f7:52:23:a3:48:e4:96:3e:61: d1:db:12:d6:52:05:26:34:be:07:bd:4e:d5:63:89: a2:8c:7b:90:d5:7d:06:c1:b7:a2:bc:d0:8e:d6:be: 10:23:4d:27:97:c0:3a:74:b5:71:63:39:5b:b5:f9: c0:4c:de:4a:ea:7c:0d:09:81:a1:9f:14:01:c8:8f: a4:58:b0:9b:3a:7e:57:71:90:bb:05:a1:66:51:11: e1:b9:73:1c:6d:1a:6c:a7:7f:49:43:d3:0c:7b:ad: 64:b2:18:bf:4d:af:a0:01:fb:3e:8c:9c:6a:18:cd: f9:5f:5d:6e:d2:f7:24:50:7f:33:4a:89:97:96:6d: 41:de:7d:a8:b8:33:91:c5:30:1f:84:64:55:d2:55: 50:1b:05:38:c9:59:bc:b2:a7:ef:41:07:c3:79:b8: c3:c3:fa:db:56:2b:ae:c8:1e:7b:aa:7a:09:7c:f6: 7c:98:f6:5d:c0:8e:03:32:55:86:73:6a:86:c3:79: c5:82:5d:ee:69:da:9d:bb:7f:70:a3:b1:65:a1:0a: 82:93:c5:5c:2d:30:ce:68:7d:f5:3e:81:52:16:65: 1c:b4:88:e9:30:6c:c7:64:45:ac:5e:e6:40:f7:e0: 1f:84:f6:ab:ce:15:70:e8:56:df:d5:38:18:83:79: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7B:AE:E8:8E:CC:F0:35:57:F9:5B:A4:44:D9:C2:F6:C7:B1:1C:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0457d7e0-606a-30b5-8f58-4bce9307b509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6a:e1:bd:8b:74:2d:5f:b2:87:08:5b:08:46:03:f7:8c:59: 26:c9:5e:c0:2c:cc:95:ca:bb:47:56:fb:80:bb:26:a5:2d:df: 66:ab:aa:2d:35:60:da:a5:88:c4:4a:37:61:d5:69:8e:f1:54: 91:29:1e:96:fd:cd:41:1b:e7:78:24:23:41:40:47:b4:26:3b: f0:0e:05:c1:60:b8:83:bc:1a:33:10:f9:88:dd:04:34:82:6c: b5:1e:6c:df:93:09:ba:62:2c:7d:74:7b:9a:e3:bc:b3:ea:72: 48:13:34:19:0d:d3:ac:8f:cc:f1:14:06:71:f2:96:8b:3c:5e: 45:48:01:a5:70:f6:b5:a6:40:97:62:b4:84:68:8c:b1:59:db: 08:de:a8:98:2d:32:22:9e:55:22:50:7d:27:16:15:73:1a:84: 73:ca:eb:cf:6c:f5:f0:dd:d7:d7:03:8a:8f:47:f6:d9:53:19: 99:7b:43:33:97:63:22:5a:5c:52:83:e5:05:53:fc:25:38:a4: 89:4a:91:8b:4f:d9:d0:56:64:8c:a1:8c:74:10:f8:f1:88:29: 53:78:07:18:3f:cf:4d:46:bf:98:aa:9d:08:1b:74:65:9f:aa: a8:1d:b5:b4:f5:6a:6c:99:70:73:c5:89:a2:8a:40:12:6c:4c: b1:44:9b:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDTVbF7S+fIRjJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk N2IxZGU5ODgtYzVjMS00ZDg0LTk5ZjUtMmIxN2JkYzZlYjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNuvHfj3UiOjSOSWPmHR2xLWUgUmNL4HvU7V Y4mijHuQ1X0GwbeivNCO1r4QI00nl8A6dLVxYzlbtfnATN5K6nwNCYGhnxQByI+k WLCbOn5XcZC7BaFmURHhuXMcbRpsp39JQ9MMe61kshi/Ta+gAfs+jJxqGM35X11u 0vckUH8zSomXlm1B3n2ouDORxTAfhGRV0lVQGwU4yVm8sqfvQQfDebjDw/rbViuu yB57qnoJfPZ8mPZdwI4DMlWGc2qGw3nFgl3uadqdu39wo7FloQqCk8VcLTDOaH31 PoFSFmUctIjpMGzHZEWsXuZA9+AfhParzhVw6Fbf1TgYg3kRWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN7ruiOzPA1V/lbpETZwvbHsRw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDQ1N2Q3ZTAtNjA2YS0z MGI1LThmNTgtNGJjZTkzMDdiNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRG+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNq4b2LdC1fsocIWwhGA/eMWSbJXsAszJXKu0dW+4C7JqUt32arqi01 YNqliMRKN2HVaY7xVJEpHpb9zUEb53gkI0FAR7QmO/AOBcFguIO8GjMQ+YjdBDSC bLUebN+TCbpiLH10e5rjvLPqckgTNBkN06yPzPEUBnHylos8XkVIAaVw9rWmQJdi tIRojLFZ2wjeqJgtMiKeVSJQfScWFXMahHPK689s9fDd19cDio9H9tlTGZl7QzOX YyJaXFKD5QVT/CU4pIlKkYtP2dBWZIyhjHQQ+PGIKVN4Bxg/z01Gv5iqnQgbdGWf qqgdtbT1amyZcHPFiaKKQBJsTLFEm6g= -----END CERTIFICATE-----Generated at Sat Sep 26 07:36:07 2026 by rpki-client