$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11f27597-d806-3234-a0b0-0eb93499f4d2.roa File: 11f27597-d806-3234-a0b0-0eb93499f4d2.roa (raw, json) Hash identifier: rdnJtcXH2o8ElEYZUtLv8PyeluziaEte+Yb6NvuCP4w= Subject key identifier: AA:EF:96:D5:57:8B:7B:1F:02:33:40:91:95:28:F0:A9:28:EC:7B:6C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498782B4F9BA6C85AE15E700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11f27597-d806-3234-a0b0-0eb93499f4d2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.17.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:82:b4:f9:ba:6c:85:ae:15:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f77e969b-4538-4c52-b3d7-a30d8892fd0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:90:24:4a:d6:26:01:b3:81:73:ef:7e:07:f7: 53:d2:0d:ee:f0:f6:3a:45:11:7d:ce:85:39:ac:77: 96:9c:81:7e:4b:b7:1a:af:59:6a:05:ce:c2:f4:98: 4f:3f:ea:f9:51:97:cd:2f:e8:de:5d:66:de:a7:1e: 13:d4:5c:17:22:da:a3:7c:86:c5:62:9c:c1:be:11: f9:ed:e1:0c:48:89:9a:08:26:58:14:69:bb:97:69: 4d:af:76:f0:f1:b3:a6:ce:b4:5f:ac:48:2a:5d:94: 59:3b:70:24:79:1e:3e:07:7f:3f:5b:43:45:08:0c: d6:05:00:b4:fb:a4:77:02:7e:84:fb:4e:18:9d:af: 28:18:b4:3d:fa:29:f1:69:07:4d:01:2b:8c:2e:12: 38:91:29:2a:60:b9:9e:ed:5d:1a:ff:d2:6b:ee:dd: 08:07:8c:13:51:06:7c:6b:fb:ec:b5:88:1f:10:66: b5:66:da:86:72:42:f1:dd:f8:99:f1:b1:d1:6e:87: 01:e5:74:83:7d:ab:2f:78:46:b7:5f:3c:74:4e:1d: 35:1d:cc:3b:ce:e8:14:93:4b:44:c7:86:65:c2:ec: 70:fe:b0:3f:f9:bc:6f:03:85:0c:bb:96:aa:c1:68: 66:45:c4:a0:25:06:5a:d9:95:db:cd:5e:35:39:52: bd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EF:96:D5:57:8B:7B:1F:02:33:40:91:95:28:F0:A9:28:EC:7B:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11f27597-d806-3234-a0b0-0eb93499f4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:63:12:cf:22:65:38:97:31:b3:02:a1:b7:f3:83:ac:9e:c8: cc:47:95:3f:df:9d:45:48:4b:2b:98:85:ec:5c:90:29:0b:a1: 84:65:e1:3e:9c:25:01:58:d1:55:e5:66:28:99:d6:4f:03:7c: 64:3d:a8:5e:60:77:38:43:b2:23:6c:49:c3:d2:6e:41:b4:d2: 9e:20:c6:e1:32:21:92:0e:6c:d7:65:df:4b:ca:3f:60:ee:36: 8a:9e:b2:2b:a4:a2:9b:11:0c:c4:66:db:53:80:6d:39:b3:7a: 66:15:b3:e2:69:90:70:86:3e:1c:86:dc:d9:35:e6:95:91:16: 59:25:d2:41:1b:dc:2f:8a:3b:b1:8e:7e:97:30:d4:29:63:b1: e6:28:89:48:90:a7:b6:c3:5e:19:1a:26:29:2a:86:a4:16:16: 4a:c7:53:42:ff:10:1b:2f:cf:7f:3a:c2:80:33:37:b5:b9:98: c2:ce:b5:d1:f1:84:d2:72:c3:1c:5e:cf:0c:2a:eb:c3:d2:af: c6:65:f6:ad:5d:f7:0f:f0:5d:b8:99:3d:81:bf:13:45:41:22: b5:39:e7:57:d1:df:ef:98:21:0b:18:e3:a0:8b:19:19:5b:09: 54:10:75:eb:f0:76:78:cc:c6:54:cb:62:97:2d:7b:92:11:c7: 3f:46:04:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh4K0+bpsha4V5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Zjc3ZTk2OWItNDUzOC00YzUyLWIzZDctYTMwZDg4OTJmZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5AkStYmAbOBc+9+B/dT0g3u8PY6RRF9zoU5 rHeWnIF+S7car1lqBc7C9JhPP+r5UZfNL+jeXWbepx4T1FwXItqjfIbFYpzBvhH5 7eEMSImaCCZYFGm7l2lNr3bw8bOmzrRfrEgqXZRZO3AkeR4+B38/W0NFCAzWBQC0 +6R3An6E+04Yna8oGLQ9+inxaQdNASuMLhI4kSkqYLme7V0a/9Jr7t0IB4wTUQZ8 a/vstYgfEGa1ZtqGckLx3fiZ8bHRbocB5XSDfasveEa3Xzx0Th01Hcw7zugUk0tE x4Zlwuxw/rA/+bxvA4UMu5aqwWhmRcSgJQZa2ZXbzV41OVK9PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrvltVXi3sfAjNAkZUo8Kko7HtsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTFmMjc1OTctZDgwNi0z MjM0LWEwYjAtMGViOTM0OTlmNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRHMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVjEs8iZTiXMbMCobfzg6yeyMxHlT/fnUVISyuYhexckCkLoYRl4T6c JQFY0VXlZiiZ1k8DfGQ9qF5gdzhDsiNsScPSbkG00p4gxuEyIZIObNdl30vKP2Du NoqesiukopsRDMRm21OAbTmzemYVs+JpkHCGPhyG3Nk15pWRFlkl0kEb3C+KO7GO fpcw1CljseYoiUiQp7bDXhkaJikqhqQWFkrHU0L/EBsvz386woAzN7W5mMLOtdHx hNJywxxezwwq68PSr8Zl9q1d9w/wXbiZPYG/E0VBIrU551fR3++YIQsY46CLGRlb CVQQdevwdnjMxlTLYpcte5IRxz9GBLc= -----END CERTIFICATE-----Generated at Tue Sep 29 00:58:18 2026 by rpki-client