$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b265247-9563-319b-85d7-b24107caa5f8.roa File: 3b265247-9563-319b-85d7-b24107caa5f8.roa (raw, json) Hash identifier: +MCucDnkqbMAnIvR35MZaoybQBqc10cBF4FZYBFOBvA= Subject key identifier: 53:9E:DB:75:06:6D:F9:0E:59:5A:02:1C:C1:E8:2C:CA:B4:80:85:2D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4987B7E68B60A01972474380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b265247-9563-319b-85d7-b24107caa5f8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.17.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:b7:e6:8b:60:a0:19:72:47:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d9d960dd-8be9-47b5-9919-ce7835085da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:54:45:0d:a5:80:5c:90:f0:e1:af:1e:77:46: 03:ea:e6:2d:52:9b:d7:fc:b7:96:1a:ce:8c:4b:0b: b8:34:1a:c2:ca:d5:51:3a:b5:fe:7d:bb:67:a2:81: 38:57:66:04:ee:88:bb:26:68:41:e9:bc:62:23:9f: dd:af:c6:95:10:7a:e0:83:24:c7:5f:ec:3a:50:6b: ee:23:68:83:6d:92:70:64:40:f0:46:ca:4c:67:9e: b1:cb:a8:fc:51:82:fb:92:4b:89:2d:c3:c9:bd:bf: e8:a7:62:8e:c7:b6:f7:9e:56:c3:d0:03:da:5d:ab: 53:39:4c:31:0b:37:82:4f:ee:f2:f1:c4:0f:08:12: a3:eb:be:34:9d:98:c7:48:58:aa:c2:0a:e8:78:52: c6:39:d7:db:d7:1c:b6:5f:e8:b8:a9:02:d5:e0:1b: e2:e3:d0:fc:a4:be:ef:1c:c5:84:dd:7d:66:3a:20: f9:1d:3c:c3:a5:23:ab:2a:fe:e0:c3:4e:e2:da:11: cf:6c:63:73:ef:06:73:88:93:24:59:02:49:d7:53: 28:c6:da:20:bc:ef:7b:6e:40:e0:c2:75:d4:a3:a7: 1d:3d:97:b1:18:cb:42:b0:57:5a:81:85:c4:68:68: 85:e2:e2:8e:50:8d:69:95:14:38:54:a2:2f:bd:00: 84:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9E:DB:75:06:6D:F9:0E:59:5A:02:1C:C1:E8:2C:CA:B4:80:85:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b265247-9563-319b-85d7-b24107caa5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7f:20:76:4a:58:9c:59:de:5f:12:6d:73:94:06:a6:8d:db: 02:8e:41:1f:ba:12:24:83:3f:e1:bc:8d:af:a8:1d:d6:b7:fc: ee:4b:0d:ef:73:14:73:c7:ce:93:09:1d:86:f2:a7:3a:6b:9e: 41:56:a5:1d:9f:a1:94:68:0f:1b:c5:71:a8:5f:24:b4:a0:c9: 4f:e8:07:c8:2b:a8:39:e5:40:3d:7e:38:53:ba:e3:74:35:15: da:3b:b2:b7:23:a4:b9:5c:a8:28:03:7e:59:ac:f5:22:85:ef: 2a:6d:37:11:c7:13:b9:50:fc:4d:ca:96:02:50:b5:be:10:78: 0e:e4:6a:5d:5e:a3:f0:1a:4d:26:77:70:0d:c7:94:3e:9d:4b: 44:e9:e0:db:4d:a6:e2:09:35:0f:96:77:c4:04:ac:5c:e4:7a: 72:b6:2d:19:43:0a:23:79:70:88:4e:6e:17:f1:5e:9c:fc:8f: f0:02:13:c7:08:3e:51:5f:dd:b1:c6:da:80:1b:00:f8:58:70: b9:7f:56:1e:b9:66:a8:db:1f:23:ca:cf:f4:1b:fd:a0:22:1a: 22:ed:05:96:33:88:74:30:d9:c3:f0:eb:1d:c9:91:2c:0b:f7: 28:c3:8d:2c:87:b1:40:29:ba:a8:5c:2f:85:8e:94:c9:5a:97: 18:82:c3:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh7fmi2CgGXJHQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDlkOTYwZGQtOGJlOS00N2I1LTk5MTktY2U3ODM1MDg1ZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lRFDaWAXJDw4a8ed0YD6uYtUpvX/LeWGs6M Swu4NBrCytVROrX+fbtnooE4V2YE7oi7JmhB6bxiI5/dr8aVEHrggyTHX+w6UGvu I2iDbZJwZEDwRspMZ56xy6j8UYL7kkuJLcPJvb/op2KOx7b3nlbD0APaXatTOUwx CzeCT+7y8cQPCBKj6740nZjHSFiqwgroeFLGOdfb1xy2X+i4qQLV4Bvi49D8pL7v HMWE3X1mOiD5HTzDpSOrKv7gw07i2hHPbGNz7wZziJMkWQJJ11MoxtogvO97bkDg wnXUo6cdPZexGMtCsFdagYXEaGiF4uKOUI1plRQ4VKIvvQCEGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOe23UGbfkOWVoCHMHoLMq0gIUtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2IyNjUyNDctOTU2My0z MTliLTg1ZDctYjI0MTA3Y2FhNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArREmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl/IHZKWJxZ3l8SbXOUBqaN2wKOQR+6EiSDP+G8ja+oHda3/O5LDe9z FHPHzpMJHYbypzprnkFWpR2foZRoDxvFcahfJLSgyU/oB8grqDnlQD1+OFO643Q1 Fdo7srcjpLlcqCgDflms9SKF7yptNxHHE7lQ/E3KlgJQtb4QeA7kal1eo/AaTSZ3 cA3HlD6dS0Tp4NtNpuIJNQ+Wd8QErFzkenK2LRlDCiN5cIhObhfxXpz8j/ACE8cI PlFf3bHG2oAbAPhYcLl/Vh65ZqjbHyPKz/Qb/aAiGiLtBZYziHQw2cPw6x3JkSwL 9yjDjSyHsUApuqhcL4WOlMlalxiCw5c= -----END CERTIFICATE-----Generated at Sun Sep 27 07:24:48 2026 by rpki-client