$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6e255d5e-7b7d-3c7d-b88e-be6e59171528.roa File: 6e255d5e-7b7d-3c7d-b88e-be6e59171528.roa (raw, json) Hash identifier: 877hhd732z4uGyklmETZXE1SNe1cUWQcl7P7m5HLLlU= Subject key identifier: D6:D1:CD:19:38:E3:56:63:2E:9E:EE:A5:67:B1:E6:EA:79:C6:F8:80 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F3E480A0D5E5C99BB31DD4F40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6e255d5e-7b7d-3c7d-b88e-be6e59171528.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 30036 IP address blocks: 173.17.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:48:0a:0d:5e:5c:99:bb:31:dd:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=8ad2306a-f88c-4465-9f60-4b639791b150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:18:be:40:15:56:3f:81:45:72:36:d2:da:c4: ae:0e:20:4d:68:14:ca:56:1f:ec:c1:2b:f9:a4:25: f3:7c:fe:ab:3a:fe:60:09:31:61:b0:b0:01:a1:dc: 85:52:45:31:07:5b:26:e4:e7:c9:47:63:4a:0f:22: 99:1a:ed:d9:ea:94:94:f7:42:f6:3b:82:0f:20:a5: 76:94:a9:98:b0:ba:72:5a:2a:ef:63:71:a1:5f:00: 57:4c:12:81:96:43:43:a8:dd:8d:fd:57:0a:41:f8: 69:d5:9b:07:6c:5b:5d:0e:c0:26:dc:d4:ba:bf:a4: 68:93:cf:48:31:b1:86:ac:6d:1a:a3:8b:88:42:1e: c7:ac:7e:ba:1e:23:2b:0e:43:e5:26:f4:c9:5f:f3: 00:7b:0d:c7:56:cf:fa:b6:1a:f7:86:f4:5a:85:a3: 77:72:6f:62:b2:eb:f5:81:26:11:87:33:d0:33:50: 52:b6:c1:ee:31:42:cb:93:63:b2:c1:93:49:16:12: 62:92:0b:19:1b:27:7e:41:be:81:01:6e:02:74:c7: 44:a1:26:e5:48:a0:12:51:39:b0:2a:c7:29:04:30: 65:ee:c9:66:ff:9c:72:a5:f6:85:97:96:b6:3a:10: 3d:b4:1a:cb:4d:f6:02:7a:ee:66:28:ea:2d:e9:f4: 51:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D1:CD:19:38:E3:56:63:2E:9E:EE:A5:67:B1:E6:EA:79:C6:F8:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6e255d5e-7b7d-3c7d-b88e-be6e59171528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:36:66:f7:e3:25:60:bf:a3:ee:1e:8e:7f:13:a9:97:12:6b: 4b:5f:ee:bc:d6:84:c5:d3:44:6c:1e:ce:ed:fe:23:50:6d:0a: 02:08:e3:a8:20:e7:fb:ec:45:61:2b:db:f7:70:df:63:c2:82: 51:03:0d:ee:04:9f:44:90:58:83:95:9c:66:7a:f6:c0:1c:e0: b3:40:c0:6d:1b:fe:42:d9:5d:07:ba:46:2e:70:7b:eb:45:18: 0d:94:6d:c6:21:9e:15:f4:37:7e:04:d2:52:7c:f9:81:ef:ba: 95:7f:15:2f:34:31:9f:e6:26:a3:43:25:e4:90:7d:19:90:e7: 06:e3:5e:48:55:2b:71:98:19:7c:d5:16:6e:6e:f1:dc:94:55: d3:d8:a1:05:6e:85:ac:93:cb:5c:6c:72:53:08:bb:57:71:52: e2:68:1f:44:56:08:6c:25:7f:e4:93:73:23:73:32:99:b0:08: 34:0d:2d:eb:ad:07:52:2a:77:72:4c:66:80:8b:7e:94:45:52: dd:60:96:00:09:0a:c9:43:37:20:b5:71:eb:40:e6:36:b0:32: c1:5e:00:35:cd:60:93:fb:8b:c3:46:59:a0:14:35:ab:c5:19: fc:71:14:59:7c:ab:5a:95:0c:e9:7a:2c:6e:96:99:d4:8b:9b: e4:70:ef:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+SAoNXlyZuzHdT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk OGFkMjMwNmEtZjg4Yy00NDY1LTlmNjAtNGI2Mzk3OTFiMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBi+QBVWP4FFcjbS2sSuDiBNaBTKVh/swSv5 pCXzfP6rOv5gCTFhsLABodyFUkUxB1sm5OfJR2NKDyKZGu3Z6pSU90L2O4IPIKV2 lKmYsLpyWirvY3GhXwBXTBKBlkNDqN2N/VcKQfhp1ZsHbFtdDsAm3NS6v6Rok89I MbGGrG0ao4uIQh7HrH66HiMrDkPlJvTJX/MAew3HVs/6thr3hvRahaN3cm9isuv1 gSYRhzPQM1BStsHuMULLk2OywZNJFhJikgsZGyd+Qb6BAW4CdMdEoSblSKASUTmw KscpBDBl7slm/5xypfaFl5a2OhA9tBrLTfYCeu5mKOot6fRRFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbRzRk441ZjLp7upWex5up5xviAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmUyNTVkNWUtN2I3ZC0z YzdkLWI4OGUtYmU2ZTU5MTcxNTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRG/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC42ZvfjJWC/o+4ejn8TqZcSa0tf7rzWhMXTRGwezu3+I1BtCgII46gg 5/vsRWEr2/dw32PCglEDDe4En0SQWIOVnGZ69sAc4LNAwG0b/kLZXQe6Ri5we+tF GA2UbcYhnhX0N34E0lJ8+YHvupV/FS80MZ/mJqNDJeSQfRmQ5wbjXkhVK3GYGXzV Fm5u8dyUVdPYoQVuhayTy1xsclMIu1dxUuJoH0RWCGwlf+STcyNzMpmwCDQNLeut B1Iqd3JMZoCLfpRFUt1glgAJCslDNyC1cetA5jawMsFeADXNYJP7i8NGWaAUNavF GfxxFFl8q1qVDOl6LG6WmdSLm+Rw7wg= -----END CERTIFICATE-----Generated at Fri Sep 25 23:52:53 2026 by rpki-client