$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4830e6da-24de-3bac-ae25-3a9a5beeb1a8.roa File: 4830e6da-24de-3bac-ae25-3a9a5beeb1a8.roa (raw, json) Hash identifier: p+ZXtYNr/BBTSwOkfaQGakSSW3mH8M4/5+j6/4VUCRE= Subject key identifier: F5:3F:83:7B:77:58:85:6D:13:EA:91:73:4A:C7:F5:2F:CC:C6:9B:EB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4989644F065710B5EE9C0300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4830e6da-24de-3bac-ae25-3a9a5beeb1a8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.17.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:64:4f:06:57:10:b5:ee:9c:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=08968198-77d5-4402-aa53-00dc99d2b9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8a:2a:cb:8b:b4:2b:af:22:e3:8e:32:b4:24: 58:84:af:e6:82:81:db:4b:36:5b:90:b4:64:a2:2d: 1d:91:bb:98:fb:e3:4a:e8:3f:bc:b8:f4:52:bf:fe: 70:cc:16:f6:43:08:5a:9b:25:b5:71:15:c2:92:82: 07:0a:16:79:54:4f:b3:25:44:cf:fb:25:35:ed:9b: a6:12:ff:1c:b6:66:93:e6:95:16:a6:0a:6d:61:ef: bd:10:51:3d:f6:cd:32:77:07:5b:c2:f0:c2:dd:6b: 9f:a5:f6:73:47:60:a9:09:fb:9b:9c:fc:fd:09:10: e5:8d:66:63:06:24:04:c6:d4:7a:47:e7:47:c6:18: 21:a9:59:3b:91:09:d1:4b:8c:44:d8:b9:0f:89:11: 90:59:41:97:58:a4:91:d1:1c:87:1e:24:67:d6:e5: 38:6e:f4:be:51:61:cb:82:26:9b:9d:62:9e:53:e9: 32:01:91:19:4d:83:28:b7:09:a6:76:ce:2d:e7:cf: 1f:c6:f5:3f:0a:e6:15:ae:f0:29:d1:52:58:c2:6d: ea:74:7a:af:f4:94:b5:a2:c8:70:cc:dc:3a:7e:fc: e0:e3:3b:1a:cd:59:4e:99:c4:88:c8:56:97:de:2e: 4a:32:04:4f:cf:8d:74:5a:b2:26:c6:be:cb:45:00: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:3F:83:7B:77:58:85:6D:13:EA:91:73:4A:C7:F5:2F:CC:C6:9B:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4830e6da-24de-3bac-ae25-3a9a5beeb1a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:38:09:0a:96:9f:3c:3a:f2:11:07:54:75:9a:80:ea:19:e9: d4:d7:78:e2:95:82:b4:94:10:ce:79:1b:15:c8:9f:19:bf:67: ae:21:1a:8e:67:78:49:f2:32:98:2a:fb:c7:df:ef:70:8e:0d: 2b:cb:e5:29:03:83:8e:2c:77:ad:e4:2f:e4:1a:bb:23:ae:9b: 61:ca:f9:85:e5:ae:0a:cb:59:51:6d:eb:6b:e4:02:f1:e0:14: 42:3b:9a:80:18:95:36:88:33:c3:fc:b3:db:4e:e2:7e:7f:b7: bd:06:40:fb:58:95:b2:d3:18:35:6e:f6:a0:ed:1a:b2:c9:e8: 1c:5e:25:f6:7b:27:fa:ca:72:16:55:b4:dc:0d:d2:9b:bd:a6: 74:31:1d:14:64:b7:cc:e2:31:d2:b0:e3:c1:e2:84:e2:2c:8a: 39:c0:af:95:cd:1d:e4:94:04:94:02:fb:bb:32:ea:35:8c:3b: ad:ce:0d:5d:3e:9d:fc:58:45:bb:a3:50:2f:7d:0c:ef:2e:e4: 66:c0:71:95:ac:af:1b:44:3c:6f:39:bb:f7:0e:ac:6a:2f:6a: 5c:54:ad:61:2b:25:8a:15:c5:3d:7e:1f:6e:54:05:cf:97:98: 70:40:cc:70:37:a7:bb:9e:16:9b:21:fe:79:40:f4:c6:32:66: 38:e6:00:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiWRPBlcQte6cAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDg5NjgxOTgtNzdkNS00NDAyLWFhNTMtMDBkYzk5ZDJiOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIoqy4u0K68i444ytCRYhK/mgoHbSzZbkLRk oi0dkbuY++NK6D+8uPRSv/5wzBb2QwhamyW1cRXCkoIHChZ5VE+zJUTP+yU17Zum Ev8ctmaT5pUWpgptYe+9EFE99s0ydwdbwvDC3WufpfZzR2CpCfubnPz9CRDljWZj BiQExtR6R+dHxhghqVk7kQnRS4xE2LkPiRGQWUGXWKSR0RyHHiRn1uU4bvS+UWHL giabnWKeU+kyAZEZTYMotwmmds4t588fxvU/CuYVrvAp0VJYwm3qdHqv9JS1oshw zNw6fvzg4zsazVlOmcSIyFaX3i5KMgRPz410WrImxr7LRQCUHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPU/g3t3WIVtE+qRc0rH9S/MxpvrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDgzMGU2ZGEtMjRkZS0z YmFjLWFlMjUtM2E5YTViZWViMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrREcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA84CQqWnzw68hEHVHWagOoZ6dTXeOKVgrSUEM55GxXInxm/Z64hGo5n eEnyMpgq+8ff73CODSvL5SkDg44sd63kL+QauyOum2HK+YXlrgrLWVFt62vkAvHg FEI7moAYlTaIM8P8s9tO4n5/t70GQPtYlbLTGDVu9qDtGrLJ6BxeJfZ7J/rKchZV tNwN0pu9pnQxHRRkt8ziMdKw48HihOIsijnAr5XNHeSUBJQC+7sy6jWMO63ODV0+ nfxYRbujUC99DO8u5GbAcZWsrxtEPG85u/cOrGovalxUrWErJYoVxT1+H25UBc+X mHBAzHA3p7ueFpsh/nlA9MYyZjjmALk= -----END CERTIFICATE-----Generated at Fri Sep 25 17:57:40 2026 by rpki-client