$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24927ac0-57fd-3657-99af-1a39e1c9e829.roa File: 24927ac0-57fd-3657-99af-1a39e1c9e829.roa (raw, json) Hash identifier: YIFeuE2P2kyHJ0vvXY7gbWlsEirpIFpm3Ui5hmPHWO4= Subject key identifier: 2D:44:A0:FA:77:FB:E2:C2:FC:FA:F7:2E:CC:62:6C:8A:44:18:BA:E5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F23C250C6C44C156B188E1B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24927ac0-57fd-3657-99af-1a39e1c9e829.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.17.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:50:c6:c4:4c:15:6b:18:8e:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=10b2b80e-1d36-46c3-a7c2-4f91703b0931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:26:08:30:5b:14:8b:b8:8a:c1:bc:52:2f:b9: 07:b3:0d:9c:1b:cd:36:d2:aa:1f:35:e7:ad:c7:b7: aa:46:41:c8:85:ee:98:22:97:07:14:90:5b:b4:cc: 7d:80:95:d3:64:4e:45:76:04:6f:b4:c5:ef:32:12: 52:08:b1:02:83:0a:0f:92:c7:04:08:11:07:31:e0: f5:b1:7a:c5:20:7d:3a:79:a4:45:cd:7d:07:7c:27: 8b:cb:ce:00:9e:bc:de:e1:77:d5:4a:5c:0b:73:b2: 55:d9:fc:9b:63:42:24:e8:fa:09:bc:9c:70:dd:b9: 84:c5:97:44:dc:6c:56:75:4a:d6:77:97:cf:c4:4a: c7:e1:2f:22:69:47:c9:4b:1e:ff:6f:3d:3b:79:36: d3:4a:99:03:14:1e:c5:c6:83:1c:25:34:65:44:df: 46:ee:31:1f:4f:2a:3f:9e:11:d3:bd:49:16:41:23: 35:8c:c7:09:ea:69:04:3f:d2:54:39:91:9f:1c:7a: ad:29:56:bb:30:f6:f3:6f:ff:14:4e:87:99:46:3a: 61:a7:67:94:da:08:fc:ae:db:a2:3d:f4:20:83:9b: 72:42:70:7c:2e:b4:60:d9:0c:77:99:10:e9:3b:5d: 99:68:98:72:92:93:a1:c3:83:47:2c:a2:f7:c5:de: b2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:44:A0:FA:77:FB:E2:C2:FC:FA:F7:2E:CC:62:6C:8A:44:18:BA:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24927ac0-57fd-3657-99af-1a39e1c9e829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ec:97:5f:ad:b3:69:75:b7:fa:b9:f6:a0:f5:a1:22:11:2e: a4:8d:a6:f0:bc:1f:de:ea:0e:9e:5b:1f:07:cd:fd:20:b2:e2: d3:88:a3:c7:19:2f:e3:c9:b2:c7:d6:15:43:59:a4:0b:0f:65: d1:97:00:89:07:70:87:fa:80:20:46:d3:ec:c9:e5:59:ec:36: 0a:52:9c:32:84:a7:31:72:6a:c1:93:dc:e9:ed:df:ac:31:78: 7f:b3:d3:56:7e:69:48:f0:72:2f:d2:a5:be:4c:60:b0:1e:1d: 7d:66:d4:71:24:3b:21:0c:4b:d8:8b:36:1e:d6:49:9a:c0:c2: b0:40:5c:a7:46:68:09:9e:48:1b:6b:b7:1d:90:ec:d9:db:60: f6:8e:1e:ca:43:5c:83:41:92:8b:c0:0d:95:54:68:0d:7d:13: 80:01:a9:83:50:50:70:62:6c:9c:4b:54:93:6e:29:7c:50:e2: cc:e5:e6:dd:bd:19:bb:67:78:d9:1e:bc:0e:4f:60:e3:09:0f: e7:fe:22:37:c2:85:ca:db:7f:3f:71:88:03:47:ac:bc:42:a2: 3c:5b:4a:6d:7d:03:d6:df:6c:30:7c:e5:c6:84:f5:53:9c:5d: fc:8f:88:a4:bb:ea:22:37:4e:96:64:72:1b:a2:bb:ff:21:64: b7:28:09:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwlDGxEwVaxiOGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MTBiMmI4MGUtMWQzNi00NmMzLWE3YzItNGY5MTcwM2IwOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiYIMFsUi7iKwbxSL7kHsw2cG8020qofNeet x7eqRkHIhe6YIpcHFJBbtMx9gJXTZE5FdgRvtMXvMhJSCLECgwoPkscECBEHMeD1 sXrFIH06eaRFzX0HfCeLy84Anrze4XfVSlwLc7JV2fybY0Ik6PoJvJxw3bmExZdE 3GxWdUrWd5fPxErH4S8iaUfJSx7/bz07eTbTSpkDFB7FxoMcJTRlRN9G7jEfTyo/ nhHTvUkWQSM1jMcJ6mkEP9JUOZGfHHqtKVa7MPbzb/8UToeZRjphp2eU2gj8rtui PfQgg5tyQnB8LrRg2Qx3mRDpO12ZaJhykpOhw4NHLKL3xd6yRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1EoPp3++LC/Pr3LsxibIpEGLrlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjQ5MjdhYzAtNTdmZC0z NjU3LTk5YWYtMWEzOWUxYzllODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRElMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvsl1+ts2l1t/q59qD1oSIRLqSNpvC8H97qDp5bHwfN/SCy4tOIo8cZ L+PJssfWFUNZpAsPZdGXAIkHcIf6gCBG0+zJ5VnsNgpSnDKEpzFyasGT3Ont36wx eH+z01Z+aUjwci/Spb5MYLAeHX1m1HEkOyEMS9iLNh7WSZrAwrBAXKdGaAmeSBtr tx2Q7NnbYPaOHspDXINBkovADZVUaA19E4ABqYNQUHBibJxLVJNuKXxQ4szl5t29 GbtneNkevA5PYOMJD+f+IjfChcrbfz9xiANHrLxCojxbSm19A9bfbDB85caE9VOc XfyPiKS76iI3TpZkchuiu/8hZLcoCf0= -----END CERTIFICATE-----Generated at Mon Sep 28 14:35:02 2026 by rpki-client