$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3940a3e1-5d70-326f-bad5-a36f816cf324.roa File: 3940a3e1-5d70-326f-bad5-a36f816cf324.roa (raw, json) Hash identifier: R8z7b5kkJMA2NXwJIhj+YRHGKR4WGLTdKUXl5dQScdU= Subject key identifier: D4:3D:86:37:B3:89:AC:44:BC:23:A8:81:F2:5C:9A:45:A7:75:1C:0B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F480D6134E265998B219A36C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3940a3e1-5d70-326f-bad5-a36f816cf324.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.17.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:61:34:e2:65:99:8b:21:9a:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=fd27087b-48d0-4836-8f2e-8085be3d26ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:0d:d4:2e:aa:96:df:fb:fc:c7:a6:75:77: 40:06:51:a2:d6:2f:a6:9f:0e:a0:68:6d:5c:f6:26: 45:d2:ea:24:88:29:9b:2b:9b:3b:a2:32:a8:c8:8a: 1c:13:70:d2:c2:d9:ee:9f:51:60:22:bc:4c:d6:16: 5d:ae:de:69:fa:e4:56:a0:d2:3b:2a:57:c7:4d:bb: 8d:78:54:de:18:e2:b6:39:ce:e5:ef:ac:fe:9e:15: bb:19:ec:23:25:a9:07:fc:a2:28:57:f6:8a:27:73: d8:b8:14:5d:45:82:44:49:26:9a:ba:08:26:03:4f: 5f:24:1e:63:4f:a6:4b:11:d5:9d:76:80:cb:6c:b4: 3f:66:5b:8c:bd:5d:0a:5f:2d:c0:dc:e8:26:16:1e: 7b:6f:b9:b3:3d:a4:cb:a2:70:86:e0:7a:39:af:15: 48:87:c7:5e:a4:84:62:13:24:1c:02:be:6d:08:90: 8d:74:6d:54:d4:94:80:cc:51:be:be:1a:41:54:b9: 57:77:14:ca:37:21:65:c2:12:19:76:d0:af:7e:dd: 98:0b:a0:b4:d5:85:6f:45:3e:3c:85:72:c3:53:3e: 9a:35:8d:fb:e0:f7:f0:9d:69:90:46:6e:62:6d:5e: 07:be:eb:3f:1b:55:c9:c8:21:28:65:3d:68:af:68: 72:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3D:86:37:B3:89:AC:44:BC:23:A8:81:F2:5C:9A:45:A7:75:1C:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3940a3e1-5d70-326f-bad5-a36f816cf324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:54:51:cf:f8:2d:3c:b9:3e:38:03:45:04:3d:7b:11:e9:b4: 19:e3:de:d7:b1:1c:37:83:cf:98:01:49:ef:b4:23:47:f6:82: 24:26:ef:66:75:57:ee:1d:2c:6a:44:8d:58:16:25:55:92:4b: 0a:1b:cd:46:72:30:7e:08:c3:5c:1a:7f:3e:1b:30:6b:b1:02: 1d:e6:e2:91:98:ca:ad:71:8f:1a:72:9f:dc:2d:5b:85:68:13: f7:a2:24:1d:bd:3d:58:04:44:97:e5:9e:26:e9:54:e6:95:9e: 29:81:a0:7b:79:5a:9d:97:cc:e1:81:2f:38:ff:e0:84:df:8d: 43:3c:1a:0b:a5:53:53:36:16:e5:71:4a:b3:f6:e3:88:26:75: 9d:98:29:48:cb:80:15:6e:23:ea:ab:c3:9a:85:c6:9d:5c:63: a3:c5:85:58:88:14:32:44:79:0e:be:46:56:7f:ab:84:f0:6e: 8d:3f:f4:2f:38:78:fe:ad:87:8d:bd:92:3d:cc:aa:43:a7:f2: 94:9b:d0:73:cb:6b:23:cc:34:10:49:df:97:54:77:e9:46:13: 32:88:fb:bd:92:0e:14:0f:98:b5:ac:b3:19:5a:e1:70:bc:bf: 18:52:27:c9:b5:4e:b5:2d:e9:9b:d3:02:72:38:23:d4:b9:27: ba:0c:6b:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWE04mWZiyGaNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZmQyNzA4N2ItNDhkMC00ODM2LThmMmUtODA4NWJlM2QyNmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskgN1C6qlt/7/MemdXdABlGi1i+mnw6gaG1c 9iZF0uokiCmbK5s7ojKoyIocE3DSwtnun1FgIrxM1hZdrt5p+uRWoNI7KlfHTbuN eFTeGOK2Oc7l76z+nhW7GewjJakH/KIoV/aKJ3PYuBRdRYJESSaauggmA09fJB5j T6ZLEdWddoDLbLQ/ZluMvV0KXy3A3OgmFh57b7mzPaTLonCG4Ho5rxVIh8depIRi EyQcAr5tCJCNdG1U1JSAzFG+vhpBVLlXdxTKNyFlwhIZdtCvft2YC6C01YVvRT48 hXLDUz6aNY374PfwnWmQRm5ibV4Hvus/G1XJyCEoZT1or2hylwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQ9hjeziaxEvCOogfJcmkWndRwLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzk0MGEzZTEtNWQ3MC0z MjZmLWJhZDUtYTM2ZjgxNmNmMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrREYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENUUc/4LTy5PjgDRQQ9exHptBnj3texHDeDz5gBSe+0I0f2giQm72Z1 V+4dLGpEjVgWJVWSSwobzUZyMH4Iw1wafz4bMGuxAh3m4pGYyq1xjxpyn9wtW4Vo E/eiJB29PVgERJflnibpVOaVnimBoHt5Wp2XzOGBLzj/4ITfjUM8GgulU1M2FuVx SrP244gmdZ2YKUjLgBVuI+qrw5qFxp1cY6PFhViIFDJEeQ6+RlZ/q4Twbo0/9C84 eP6th429kj3MqkOn8pSb0HPLayPMNBBJ35dUd+lGEzKI+72SDhQPmLWssxla4XC8 vxhSJ8m1TrUt6ZvTAnI4I9S5J7oMa6E= -----END CERTIFICATE-----Generated at Sun Sep 27 16:45:18 2026 by rpki-client