$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17f7a371-944c-3840-88a6-6e9aedd000b2.roa File: 17f7a371-944c-3840-88a6-6e9aedd000b2.roa (raw, json) Hash identifier: XvPqZYMvrhS1+osoFDtvzIvTG4aOcHUNDjDQSrN3zJc= Subject key identifier: 66:7A:6F:8B:55:D2:89:01:76:FA:98:91:B9:05:8F:12:80:72:8D:2D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F2EED27BE8B29A163D4D25880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17f7a371-944c-3840-88a6-6e9aedd000b2.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.23.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:27:be:8b:29:a1:63:d4:d2:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=b6aacf07-3217-4854-b605-31ecdc2e49dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:b3:5e:d2:1b:2a:05:b2:17:24:f5:46:92: 80:ce:4b:2e:86:b6:dd:8b:03:6b:8e:64:41:7d:7b: 62:04:ea:98:1f:12:bb:d2:49:ab:fa:bb:dd:95:3a: ed:e2:93:d2:2c:38:bb:ad:78:40:53:64:fc:db:95: 3f:13:2d:aa:69:f3:16:1b:aa:5e:c1:08:05:31:4d: 8d:ec:70:46:e9:f9:a2:69:3e:39:e3:2d:c9:e8:65: 33:6e:28:98:e2:2a:3b:40:71:72:b3:7f:22:7b:c9: 9b:a3:fd:49:fd:06:39:47:25:72:72:c7:7e:8b:cf: 18:aa:b8:04:68:1f:4d:31:36:b7:36:19:92:29:e9: 0a:68:c7:e1:eb:12:98:b3:be:c1:24:47:57:2e:83: 5b:fa:7f:49:84:d7:27:7a:1a:25:51:9b:8f:1f:63: d0:cf:10:6d:28:68:0b:51:7e:e8:28:51:e5:d0:00: 6d:58:bd:b3:10:d5:1f:6a:37:ab:9d:60:af:aa:50: 2c:6b:3e:f0:31:0b:4e:a9:dd:ce:ae:ac:17:a9:59: 75:ee:3e:36:7e:9f:2d:d4:f2:25:c5:5f:9a:92:fe: 18:6f:1c:d1:e6:b0:f1:28:ee:7b:5e:40:4d:6d:23: dd:f1:7f:92:8c:5e:0a:7d:59:7f:fd:c4:e8:eb:c0: 46:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7A:6F:8B:55:D2:89:01:76:FA:98:91:B9:05:8F:12:80:72:8D:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/17f7a371-944c-3840-88a6-6e9aedd000b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a8:8f:03:aa:b5:45:90:43:3b:b2:db:9a:87:23:b0:27:4e: 13:cc:40:fc:f2:8a:76:25:f9:b7:2c:83:a6:5a:13:86:60:07: 37:1e:97:f0:ef:46:84:4f:bd:00:b1:74:9b:de:42:4f:af:de: 21:f0:a1:20:d3:94:2c:f1:f1:43:a5:5c:49:8e:99:40:ca:d8: d5:34:53:24:73:38:06:d7:6c:8a:58:ee:86:34:e5:5f:2c:c8: 38:f8:27:ef:15:9e:8e:63:31:ff:aa:13:81:62:76:3f:0d:f8: 57:89:b0:c8:30:52:3c:39:13:4f:74:48:76:5c:c7:d7:07:19: 08:66:d9:f3:39:41:09:73:e8:40:73:03:12:77:5e:63:53:8c: 53:66:d6:8a:1f:8c:bf:54:09:b6:87:02:50:1d:e6:02:73:ea: 79:7b:36:48:91:bb:14:a4:df:23:f7:94:ac:4c:59:f8:8e:74: b1:f0:90:ad:12:8f:01:07:6e:56:fd:c8:cd:e0:97:d5:26:1c: 35:c2:ef:dd:6d:9c:1c:ed:d0:03:19:a5:72:fb:70:5e:3b:9d: a3:90:a0:5b:7f:0e:be:d6:86:79:2e:9e:ca:92:99:12:03:9d: 51:76:8b:6c:f1:95:e0:42:0d:01:92:ce:85:e6:8d:68:e2:28: b9:69:01:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7Se+iymhY9TSWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk YjZhYWNmMDctMzIxNy00ODU0LWI2MDUtMzFlY2RjMmU0OWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojuzXtIbKgWyFyT1RpKAzksuhrbdiwNrjmRB fXtiBOqYHxK70kmr+rvdlTrt4pPSLDi7rXhAU2T825U/Ey2qafMWG6pewQgFMU2N 7HBG6fmiaT454y3J6GUzbiiY4io7QHFys38ie8mbo/1J/QY5RyVycsd+i88YqrgE aB9NMTa3NhmSKekKaMfh6xKYs77BJEdXLoNb+n9JhNcneholUZuPH2PQzxBtKGgL UX7oKFHl0ABtWL2zENUfajernWCvqlAsaz7wMQtOqd3OrqwXqVl17j42fp8t1PIl xV+akv4YbxzR5rDxKO57XkBNbSPd8X+SjF4KfVl//cTo68BGrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZ6b4tV0okBdvqYkbkFjxKAco0tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTdmN2EzNzEtOTQ0Yy0z ODQwLTg4YTYtNmU5YWVkZDAwMGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRc0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2ojwOqtUWQQzuy25qHI7AnThPMQPzyinYl+bcsg6ZaE4ZgBzcel/Dv RoRPvQCxdJveQk+v3iHwoSDTlCzx8UOlXEmOmUDK2NU0UyRzOAbXbIpY7oY05V8s yDj4J+8Vno5jMf+qE4Fidj8N+FeJsMgwUjw5E090SHZcx9cHGQhm2fM5QQlz6EBz AxJ3XmNTjFNm1oofjL9UCbaHAlAd5gJz6nl7NkiRuxSk3yP3lKxMWfiOdLHwkK0S jwEHblb9yM3gl9UmHDXC791tnBzt0AMZpXL7cF47naOQoFt/Dr7WhnkunsqSmRID nVF2i2zxleBCDQGSzoXmjWjiKLlpAbw= -----END CERTIFICATE-----Generated at Sat Sep 26 08:56:37 2026 by rpki-client