$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f75768-f5cc-3977-b803-ee0990cb3e34.roa File: 89f75768-f5cc-3977-b803-ee0990cb3e34.roa (raw, json) Hash identifier: VKZYKYKlyXGyKNrj0oWtiSbHxod1QJjSFGqoAMS5klg= Subject key identifier: 99:6C:3F:17:EA:E4:CF:C0:0D:75:E6:E7:DA:94:B9:9E:B3:34:38:42 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DEA9907148ED9062482C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f75768-f5cc-3977-b803-ee0990cb3e34.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.17.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ea:99:07:14:8e:d9:06:24:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=6e201419-6635-44d7-ba6a-3f6f30651e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:06:9a:97:25:b2:1e:3e:55:1a:42:12:38: 22:5b:d8:52:2a:bd:6c:91:fb:eb:9e:c7:8c:3b:2c: 91:4f:28:ba:9a:75:15:12:e2:89:da:74:91:38:6a: e2:64:e1:05:aa:9a:c4:96:fe:3d:98:3d:00:08:89: c6:6a:67:5a:39:86:e9:74:cc:4f:3d:94:c1:3c:0b: b7:97:00:8c:84:a4:19:cb:44:87:ea:0d:1d:fa:64: 27:81:46:b1:0d:c9:d6:7e:87:9c:c3:c5:ef:75:c0: c5:2c:1f:46:14:f9:26:c1:4f:f3:20:b7:9b:e7:4f: f1:14:40:91:28:8a:66:14:64:e6:1e:3f:0a:b0:98: 65:5b:bd:d9:cf:ec:96:8e:4b:fc:4b:57:3a:b6:38: e3:15:87:be:52:e6:46:2c:39:8b:d3:1c:0c:21:6e: 88:ff:dc:31:5f:24:79:56:8d:62:92:a0:44:5b:77: b3:00:86:8b:df:47:86:53:78:5f:c9:7a:cc:5b:bb: e5:6c:46:1c:ef:1d:3a:95:41:c2:6d:82:fb:43:f2: 2f:97:e4:60:32:6d:bc:e1:20:91:9f:d2:40:28:30: b1:d1:7f:50:1b:99:6f:95:d2:d7:b9:f4:0f:02:7d: a3:94:07:d4:70:d7:85:d8:90:f0:e3:3a:44:a6:60: bc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6C:3F:17:EA:E4:CF:C0:0D:75:E6:E7:DA:94:B9:9E:B3:34:38:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89f75768-f5cc-3977-b803-ee0990cb3e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:a7:b7:73:7b:32:b2:28:99:90:ae:43:d4:ab:a5:72:3d:54: 12:13:20:e8:ae:91:dc:aa:e6:c5:b9:dd:42:a0:4b:c9:02:de: 66:35:9d:14:fb:bf:2d:88:54:59:60:54:24:a1:bc:ae:62:55: ad:4d:ae:d5:5e:32:76:7e:e4:3f:18:7c:d7:7d:92:b4:dd:68: 6e:b0:86:6b:0d:cb:cc:e1:40:70:e1:f6:88:ed:ea:30:74:21: b1:0f:c7:18:cc:57:79:37:6b:08:07:31:66:36:8b:52:58:1e: 79:a3:90:9a:03:90:32:8a:3e:e8:19:af:ae:25:af:aa:ec:41: 6a:44:93:9b:55:b0:74:bc:4f:7d:ad:f5:86:3f:ae:77:27:39: 94:f2:60:a5:02:5a:83:5b:50:f3:6c:70:e2:e7:f7:dd:db:49: ad:05:61:48:b8:52:c0:b0:b0:15:3a:9c:b3:c1:4f:6d:d1:bb: fc:3f:39:76:04:0b:6e:82:20:b6:89:81:d3:f4:48:4c:58:4f: c8:f9:d4:90:57:bd:13:0d:93:4b:73:26:eb:a8:16:a5:bc:33: 55:17:36:80:23:5c:49:ba:b5:98:d6:9a:56:c7:8d:ee:1c:81: cc:ad:30:37:12:7e:a5:89:23:d3:fa:11:2a:63:21:2a:3e:be: 59:69:23:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeqZBxSO2QYkgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NmUyMDE0MTktNjYzNS00NGQ3LWJhNmEtM2Y2ZjMwNjUxZTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7oGmpclsh4+VRpCEjgiW9hSKr1skfvrnseM OyyRTyi6mnUVEuKJ2nSROGriZOEFqprElv49mD0ACInGamdaOYbpdMxPPZTBPAu3 lwCMhKQZy0SH6g0d+mQngUaxDcnWfoecw8XvdcDFLB9GFPkmwU/zILeb50/xFECR KIpmFGTmHj8KsJhlW73Zz+yWjkv8S1c6tjjjFYe+UuZGLDmL0xwMIW6I/9wxXyR5 Vo1ikqBEW3ezAIaL30eGU3hfyXrMW7vlbEYc7x06lUHCbYL7Q/Ivl+RgMm284SCR n9JAKDCx0X9QG5lvldLXufQPAn2jlAfUcNeF2JDw4zpEpmC8GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlsPxfq5M/ADXXm59qUuZ6zNDhCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODlmNzU3NjgtZjVjYy0z OTc3LWI4MDMtZWUwOTkwY2IzZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+nt3N7MrIomZCuQ9SrpXI9VBITIOiukdyq5sW53UKgS8kC3mY1nRT7 vy2IVFlgVCShvK5iVa1NrtVeMnZ+5D8YfNd9krTdaG6whmsNy8zhQHDh9ojt6jB0 IbEPxxjMV3k3awgHMWY2i1JYHnmjkJoDkDKKPugZr64lr6rsQWpEk5tVsHS8T32t 9YY/rncnOZTyYKUCWoNbUPNscOLn993bSa0FYUi4UsCwsBU6nLPBT23Ru/w/OXYE C26CILaJgdP0SExYT8j51JBXvRMNk0tzJuuoFqW8M1UXNoAjXEm6tZjWmlbHje4c gcytMDcSfqWJI9P6ESpjISo+vllpIw8= -----END CERTIFICATE-----Generated at Sun Sep 27 01:16:10 2026 by rpki-client