$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c25c0ba-c383-3180-ad8e-4fbc76ca1086.roa File: 1c25c0ba-c383-3180-ad8e-4fbc76ca1086.roa (raw, json) Hash identifier: UNjPebZJwaEfVVrIYRVJgCZlTyKvunwpKUEX5CfPh0o= Subject key identifier: CF:CC:2C:F3:0B:5B:56:28:48:01:1A:73:99:47:30:05:A3:80:7C:2F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49729840F4F2DD99A12EF000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c25c0ba-c383-3180-ad8e-4fbc76ca1086.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.17.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:98:40:f4:f2:dd:99:a1:2e:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1cef1d61-37cd-4857-b3e8-26b98c73a03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b3:4b:ee:0d:06:b8:4a:e9:8d:e5:8e:00:36: 12:9c:1e:eb:7d:dc:c1:f5:66:72:93:de:9b:bb:c3: 77:9c:ad:87:f6:aa:ce:2b:29:d7:be:e9:f8:b3:33: d9:08:25:e1:a0:2f:3d:fe:2d:63:17:5f:48:ab:cf: 64:00:0e:95:88:ba:74:83:33:91:46:78:57:07:68: 5f:12:19:8d:87:a3:5b:8a:75:f0:a3:8e:b8:cc:7c: c3:ed:3d:c4:51:a7:13:49:bc:36:30:69:c7:07:72: 2a:07:7e:79:ea:fb:9e:43:25:65:bb:37:b2:02:1d: 34:7a:7a:e9:37:a2:82:ea:19:4e:93:54:7c:02:04: 67:5e:41:d4:c2:96:53:7b:bc:ad:94:68:be:9e:f2: 1d:c7:5b:10:4e:03:7b:e9:ac:34:03:05:88:ee:e3: 03:ab:44:0d:32:d9:d0:02:93:b4:45:91:0b:f8:34: 24:81:69:ac:c2:7e:fa:3e:1f:5e:34:10:e1:c1:d8: 93:a1:2f:e7:51:3c:12:bb:1c:ff:ee:d4:f8:a2:71: ea:92:a8:2d:7e:11:10:60:b1:55:3d:13:10:cd:5c: e9:66:59:4f:3c:94:96:3c:b5:f3:05:40:f7:b9:cc: 87:bc:4a:9d:a9:b1:9f:5c:c2:cd:76:d2:3f:96:a6: 99:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CC:2C:F3:0B:5B:56:28:48:01:1A:73:99:47:30:05:A3:80:7C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c25c0ba-c383-3180-ad8e-4fbc76ca1086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:f2:6b:69:5b:98:51:a3:49:f8:55:c7:e2:bc:ea:a4:78:39: cf:79:db:0f:c1:a5:9f:fc:81:cf:9b:57:0e:18:c1:4f:98:12: e5:7a:7f:34:2f:61:5a:66:5c:8a:77:15:56:93:6d:a1:d3:f4: 99:5e:7b:eb:68:61:48:34:d3:18:84:22:9f:03:57:f5:49:a3: 97:68:ff:0d:6e:cf:ed:13:f5:f2:f9:d4:b9:17:4e:d5:9e:c3: 17:5d:d0:31:08:91:8a:1a:2c:e5:9f:4d:83:55:10:ee:14:59: 96:a9:cc:67:e0:7a:45:f2:af:41:78:a7:63:a6:c8:a7:47:e9: 6a:a6:c2:c3:92:b5:5c:38:d5:23:30:e7:54:be:49:21:06:b8: b9:e6:67:97:23:04:e7:d3:c1:4b:f2:0e:99:f7:b7:8b:8c:d8: 15:32:f7:ef:e3:0f:b4:aa:59:84:8c:5f:ee:4c:15:e4:40:5d: a4:04:84:07:b6:90:f3:cf:c5:32:04:99:76:8b:62:31:4d:4a: 86:8a:bd:f1:7c:4f:7b:bb:e3:b9:11:53:03:5a:31:0a:81:1c: 67:5d:34:bb:61:8e:30:b3:ed:23:60:63:9e:85:31:9f:66:95: 0e:55:9e:64:7b:13:2c:01:68:b0:9e:f6:9a:c3:c3:bc:39:82: f0:0e:c4:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcphA9PLdmaEu8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWNlZjFkNjEtMzdjZC00ODU3LWIzZTgtMjZiOThjNzNhMDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27NL7g0GuErpjeWOADYSnB7rfdzB9WZyk96b u8N3nK2H9qrOKynXvun4szPZCCXhoC89/i1jF19Iq89kAA6ViLp0gzORRnhXB2hf EhmNh6NbinXwo464zHzD7T3EUacTSbw2MGnHB3IqB3556vueQyVluzeyAh00enrp N6KC6hlOk1R8AgRnXkHUwpZTe7ytlGi+nvIdx1sQTgN76aw0AwWI7uMDq0QNMtnQ ApO0RZEL+DQkgWmswn76Ph9eNBDhwdiToS/nUTwSuxz/7tT4onHqkqgtfhEQYLFV PRMQzVzpZllPPJSWPLXzBUD3ucyHvEqdqbGfXMLNdtI/lqaZKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/MLPMLW1YoSAEac5lHMAWjgHwvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWMyNWMwYmEtYzM4My0z MTgwLWFkOGUtNGZiYzc2Y2ExMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrREIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnya2lbmFGjSfhVx+K86qR4Oc952w/BpZ/8gc+bVw4YwU+YEuV6fzQv YVpmXIp3FVaTbaHT9Jlee+toYUg00xiEIp8DV/VJo5do/w1uz+0T9fL51LkXTtWe wxdd0DEIkYoaLOWfTYNVEO4UWZapzGfgekXyr0F4p2OmyKdH6WqmwsOStVw41SMw 51S+SSEGuLnmZ5cjBOfTwUvyDpn3t4uM2BUy9+/jD7SqWYSMX+5MFeRAXaQEhAe2 kPPPxTIEmXaLYjFNSoaKvfF8T3u747kRUwNaMQqBHGddNLthjjCz7SNgY56FMZ9m lQ5VnmR7EywBaLCe9prDw7w5gvAOxEk= -----END CERTIFICATE-----Generated at Mon Sep 28 11:11:58 2026 by rpki-client