$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5790fe-671f-3fb2-acc2-af37819929ac.roa File: 8e5790fe-671f-3fb2-acc2-af37819929ac.roa (raw, json) Hash identifier: L+zUxvehXDohRXgMvpTlu3E3rI4hl5Ljy/59QOXKJM8= Subject key identifier: 8C:88:0A:A5:64:61:2B:34:EA:53:2A:10:4C:50:21:1C:BB:88:43:FD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4988D8D583D196922506AD40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5790fe-671f-3fb2-acc2-af37819929ac.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.17.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:d8:d5:83:d1:96:92:25:06:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6608c1e7-24da-4f83-ae01-106fa9aefab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c1:ef:37:e9:8b:90:3c:ba:c3:36:4c:ac:d1: 0e:43:92:db:50:e5:97:b0:1d:b5:65:b1:8d:45:4c: 3f:ed:80:85:f0:dc:18:53:ee:9e:e7:d0:f0:93:96: 28:37:71:4d:1a:9d:3e:dd:ca:58:12:b2:8d:32:51: f0:68:b3:a6:5d:04:b3:bf:03:84:cf:85:35:5a:bf: d5:e8:41:37:b8:e5:3c:83:c3:a8:c6:ed:93:12:e2: d7:9f:75:9a:be:c5:14:99:b1:df:33:da:4d:5c:f1: 5f:28:28:8a:6b:ef:15:af:b4:f2:23:42:10:f4:ee: 42:a8:6a:1a:8f:31:0f:80:9b:48:91:43:9a:ac:bb: af:59:64:b2:b3:86:59:b1:e9:d8:96:e8:e2:34:d1: 02:f6:d5:9d:64:4b:a5:d0:7d:84:7f:4f:c8:c7:de: ae:a5:a4:a7:d4:9f:04:d2:e9:7e:f7:82:c6:8f:2c: d8:ea:50:4e:75:b5:40:ad:bc:53:a6:74:1a:b2:74: d8:2d:46:3b:07:17:79:8a:1d:2f:9d:ef:68:8b:a9: b5:42:af:dd:23:34:24:04:b1:24:ef:c7:d8:a8:09: e7:6a:89:bf:b6:b7:0f:5c:1f:91:dd:bd:db:8b:33: 61:99:50:b3:43:29:8e:a7:5e:d6:eb:65:c7:4d:7d: 72:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:88:0A:A5:64:61:2B:34:EA:53:2A:10:4C:50:21:1C:BB:88:43:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5790fe-671f-3fb2-acc2-af37819929ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a7:18:5a:c6:68:4c:ae:9a:ba:5c:01:67:00:12:88:7f:6d: 7c:39:3f:a0:35:7b:44:03:02:e9:2e:d0:ed:3f:4d:a1:90:e3: 5d:39:2f:6d:72:de:73:ff:5f:ef:42:37:97:8d:bf:c7:36:03: 16:0e:b2:b3:54:a0:45:ba:ff:fa:04:95:0f:8d:13:d7:26:fb: 6c:a1:ba:52:2d:25:24:dd:b5:70:c4:bf:7a:c5:ac:ce:6b:5b: d1:55:68:a7:6e:a2:3b:29:7a:53:75:ae:4d:0c:8f:25:60:d9: 15:61:c9:36:9f:cf:4c:c0:7f:43:66:6e:81:11:b8:57:56:fc: 9c:4b:bb:34:cc:ce:bc:22:c3:06:4e:f6:e9:ec:96:27:2d:31: 60:68:64:13:4e:a3:d5:04:5d:c2:13:3f:b2:09:2a:53:48:8f: 69:78:f7:51:31:ac:ab:33:ba:16:b2:35:fd:21:80:8a:2f:82: 20:06:ce:3f:45:51:2d:51:39:a0:f0:27:e0:ad:b7:5d:4f:f0: 9e:9e:e4:e7:36:4d:c5:f1:fb:10:8c:bd:92:2d:a9:e5:99:17: 6a:5f:07:f9:42:e8:58:d0:cb:54:a0:7d:96:10:e1:a0:6e:ad: 21:81:2d:32:0f:60:75:4d:31:f5:78:d9:ab:d2:e0:16:e8:24: a0:9e:6c:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiNjVg9GWkiUGrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjYwOGMxZTctMjRkYS00ZjgzLWFlMDEtMTA2ZmE5YWVmYWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksHvN+mLkDy6wzZMrNEOQ5LbUOWXsB21ZbGN RUw/7YCF8NwYU+6e59Dwk5YoN3FNGp0+3cpYErKNMlHwaLOmXQSzvwOEz4U1Wr/V 6EE3uOU8g8Ooxu2TEuLXn3WavsUUmbHfM9pNXPFfKCiKa+8Vr7TyI0IQ9O5CqGoa jzEPgJtIkUOarLuvWWSys4ZZsenYlujiNNEC9tWdZEul0H2Ef0/Ix96upaSn1J8E 0ul+94LGjyzY6lBOdbVArbxTpnQasnTYLUY7Bxd5ih0vne9oi6m1Qq/dIzQkBLEk 78fYqAnnaom/trcPXB+R3b3bizNhmVCzQymOp17W62XHTX1ybQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyICqVkYSs06lMqEExQIRy7iEP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGU1NzkwZmUtNjcxZi0z ZmIyLWFjYzItYWYzNzgxOTkyOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqnGFrGaEyumrpcAWcAEoh/bXw5P6A1e0QDAuku0O0/TaGQ4105L21y 3nP/X+9CN5eNv8c2AxYOsrNUoEW6//oElQ+NE9cm+2yhulItJSTdtXDEv3rFrM5r W9FVaKduojspelN1rk0MjyVg2RVhyTafz0zAf0NmboERuFdW/JxLuzTMzrwiwwZO 9unslictMWBoZBNOo9UEXcITP7IJKlNIj2l491ExrKszuhayNf0hgIovgiAGzj9F US1ROaDwJ+Ctt11P8J6e5Oc2TcXx+xCMvZItqeWZF2pfB/lC6FjQy1SgfZYQ4aBu rSGBLTIPYHVNMfV42avS4BboJKCebMA= -----END CERTIFICATE-----Generated at Sat Sep 26 09:08:39 2026 by rpki-client