$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7620fdc4-0d4e-39d4-bbe7-a133f2d5b156.roa File: 7620fdc4-0d4e-39d4-bbe7-a133f2d5b156.roa (raw, json) Hash identifier: hfX+jBB12VzbC/JKWng6dPYAnuBs8KVUz+wu/TFrz+E= Subject key identifier: 5C:52:48:89:E8:78:86:B0:73:CA:DB:78:8C:92:9A:DC:E5:57:6A:97 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4989B93600DAF0645F136300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7620fdc4-0d4e-39d4-bbe7-a133f2d5b156.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.17.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:b9:36:00:da:f0:64:5f:13:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2b7b5254-0fda-4610-b03a-d9d37afc1152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a8:37:5b:51:e2:ce:86:ac:ce:96:55:fd:9f: 1b:a0:3c:c3:d3:ec:13:7c:4a:3f:93:44:dc:0e:67: cb:77:23:f9:e2:89:d2:ad:a1:4b:b6:3c:0c:18:e7: 9c:d6:49:fa:6f:63:96:64:a4:4c:54:ef:54:40:ce: b8:c2:a6:ac:e5:ad:d8:04:09:c7:69:e0:83:af:79: f8:24:ba:a5:79:1e:ba:d2:0c:bc:0b:11:b5:9d:e2: a4:d3:9b:5e:ee:49:f5:0f:0e:f6:44:67:cc:fa:3c: 90:d8:a0:c3:0b:63:86:68:d1:52:bb:1f:0c:7f:88: bc:a4:87:14:31:68:db:e6:4e:2f:84:70:4f:e0:f1: 5c:5b:9c:21:13:86:2c:73:61:81:03:c0:d3:af:23: 2b:80:50:b3:d2:0d:d6:37:b6:43:75:13:98:fb:01: 52:6e:24:bd:aa:cb:c5:28:0f:42:c2:96:19:44:a7: fa:72:d9:fd:1e:5c:37:32:e8:8c:a4:91:33:38:30: 87:67:21:34:ee:ab:72:dd:6f:21:dd:2e:62:50:22: e5:26:7c:03:d6:01:16:99:c9:c9:0e:3a:4f:10:d1: 40:ab:d9:54:e5:dc:83:12:4c:1c:3d:dc:f0:6d:b2: a6:97:3e:2a:05:37:76:98:82:f3:87:a9:ff:6c:46: 0d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:52:48:89:E8:78:86:B0:73:CA:DB:78:8C:92:9A:DC:E5:57:6A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7620fdc4-0d4e-39d4-bbe7-a133f2d5b156.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:98:5c:15:4d:23:de:ff:42:ba:fd:22:69:a2:5b:28:23:8c: 0c:96:a6:b7:a0:36:cf:44:f0:35:fe:92:7c:e4:0a:dd:8f:76: 6e:b9:ac:73:c0:4e:2e:f5:62:22:d9:a6:f9:19:46:30:ae:48: fc:cb:1f:ab:d6:0f:fc:38:c9:d7:a3:cf:3e:4d:82:b6:06:95: 60:da:35:d9:4b:96:ed:cd:e8:97:11:66:35:54:21:7b:b6:20: b1:c1:78:0e:58:37:1e:7d:7d:50:28:13:80:f0:ff:4f:dc:e8: b8:ee:75:6f:8c:4a:e0:20:e4:14:36:d8:d1:ff:7f:24:9f:b5: 14:77:ab:12:03:0c:2c:3f:88:49:5c:37:6d:09:b1:e1:ff:45: 24:ad:f3:fd:8c:8e:2e:99:27:ed:b9:bd:93:a1:33:26:9e:08: 88:61:a4:07:6a:fb:12:91:b2:f1:24:22:74:8e:c4:e7:73:f3: c7:99:14:91:86:cc:c3:51:5b:53:8c:a3:86:06:de:10:55:1d: 81:4d:0f:b1:70:89:13:95:96:f2:59:7f:13:88:41:48:80:e5: a7:65:32:dc:44:5c:89:b3:63:08:e1:1c:0c:b0:2c:cb:e9:17: 0f:5e:c3:87:f1:9b:10:b7:2c:9e:d5:b6:bf:d7:70:6b:56:97: 22:f4:ad:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jibk2ANrwZF8TYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmI3YjUyNTQtMGZkYS00NjEwLWIwM2EtZDlkMzdhZmMxMTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqg3W1HizoaszpZV/Z8boDzD0+wTfEo/k0Tc DmfLdyP54onSraFLtjwMGOec1kn6b2OWZKRMVO9UQM64wqas5a3YBAnHaeCDr3n4 JLqleR660gy8CxG1neKk05te7kn1Dw72RGfM+jyQ2KDDC2OGaNFSux8Mf4i8pIcU MWjb5k4vhHBP4PFcW5whE4Ysc2GBA8DTryMrgFCz0g3WN7ZDdROY+wFSbiS9qsvF KA9CwpYZRKf6ctn9Hlw3MuiMpJEzODCHZyE07qty3W8h3S5iUCLlJnwD1gEWmcnJ DjpPENFAq9lU5dyDEkwcPdzwbbKmlz4qBTd2mILzh6n/bEYNAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxSSInoeIawc8rbeIySmtzlV2qXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzYyMGZkYzQtMGQ0ZS0z OWQ0LWJiZTctYTEzM2YyZDViMTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6YXBVNI97/Qrr9ImmiWygjjAyWpregNs9E8DX+knzkCt2Pdm65rHPA Ti71YiLZpvkZRjCuSPzLH6vWD/w4ydejzz5NgrYGlWDaNdlLlu3N6JcRZjVUIXu2 ILHBeA5YNx59fVAoE4Dw/0/c6LjudW+MSuAg5BQ22NH/fySftRR3qxIDDCw/iElc N20JseH/RSSt8/2Mji6ZJ+25vZOhMyaeCIhhpAdq+xKRsvEkInSOxOdz88eZFJGG zMNRW1OMo4YG3hBVHYFND7FwiROVlvJZfxOIQUiA5adlMtxEXImzYwjhHAywLMvp Fw9ew4fxmxC3LJ7Vtr/XcGtWlyL0rRI= -----END CERTIFICATE-----Generated at Fri Sep 25 22:14:32 2026 by rpki-client