$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdc7e180-24a4-32a0-8c23-5f7ec1532975.roa File: bdc7e180-24a4-32a0-8c23-5f7ec1532975.roa (raw, json) Hash identifier: iIT7sRZToYU+v112Il457nnu0SVrF/CgH5onzWbqp6A= Subject key identifier: 86:9B:62:D9:F9:E2:58:79:68:54:5D:CB:C3:B7:B3:1D:80:80:C1:31 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F374D1A38D54D6328F4E00740 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdc7e180-24a4-32a0-8c23-5f7ec1532975.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.17.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:1a:38:d5:4d:63:28:f4:e0:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=58e380ba-b0a7-4394-94be-943cf87c8f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fe:5e:6f:76:37:02:1b:f4:8d:97:9a:e3:31: 05:83:d1:47:e0:c2:1f:20:a0:48:a5:95:25:62:69: 51:46:b6:e0:a9:3a:7a:23:a1:f3:04:05:13:01:bd: 89:f5:27:ac:41:dd:85:ea:c2:37:33:ad:fa:2c:d6: 41:b5:bd:62:a9:ba:df:9d:76:28:3c:79:0d:9f:ea: 12:0e:72:3c:eb:32:51:0b:dc:1a:63:ed:e4:fb:31: 99:f7:89:6e:d0:4e:f3:30:eb:40:f7:37:80:5b:00: 39:ce:82:0f:b1:e4:4d:55:30:44:16:2a:1e:e5:31: e9:8b:4b:42:32:f4:47:69:c7:40:89:6e:05:2e:59: 3d:be:ea:46:e5:6f:38:46:6e:50:10:a8:88:3d:6d: 6b:d9:c4:ac:ce:7d:08:51:65:f1:52:47:7f:c3:09: 36:5b:7c:55:46:66:1f:64:98:cc:e2:69:1c:77:b9: 0d:d0:bf:84:e1:d0:76:ed:84:05:80:e4:07:c8:97: 13:25:31:e0:15:43:00:f7:4f:e6:c1:f3:cd:54:63: cf:a1:35:38:e5:8c:0f:a2:ae:f7:6d:9e:55:89:30: f8:9b:55:81:0c:91:fa:83:03:06:a0:4a:d5:b2:cc: 5d:13:ee:13:8b:6b:bc:4e:58:fc:eb:0d:49:ca:a3: e2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9B:62:D9:F9:E2:58:79:68:54:5D:CB:C3:B7:B3:1D:80:80:C1:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdc7e180-24a4-32a0-8c23-5f7ec1532975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:fa:d7:64:59:30:5c:84:e2:0c:86:af:d3:33:93:c3:88:aa: 16:fb:20:ec:62:14:9d:87:ca:8d:ca:0f:11:61:49:ad:10:89: bf:08:c3:4d:13:7e:2c:3e:18:8f:6f:03:73:3c:8d:0d:5c:4c: fb:49:b0:38:bd:d9:74:5e:c1:e6:95:2d:d9:f5:af:7e:cb:1b: 66:eb:17:b7:39:40:93:69:14:28:7f:22:4e:07:7a:23:7e:44: ef:29:ec:f5:97:88:4e:8e:1c:2c:d8:a4:dc:94:b4:bd:90:30: ff:3b:48:39:46:cd:e4:6a:97:f1:f3:8d:0c:af:79:87:02:76: 77:4e:85:26:e2:77:57:c3:c0:0a:1a:71:88:43:b9:6c:6f:8a: 56:22:5e:4e:b7:2c:4a:68:a7:37:5f:80:9d:ee:6f:64:d0:41: 5a:49:17:21:c3:d9:c4:f5:02:8d:e0:98:b9:e2:f4:0c:f2:65: b1:4f:b1:a2:b9:d1:7d:2a:8c:95:23:62:7f:9a:35:e0:a3:7e: d4:11:86:e9:9a:20:ed:bc:1d:09:39:3d:6c:2a:93:41:e0:33: 48:8f:b9:81:d6:d6:4a:4c:4d:18:75:90:10:74:e6:60:15:56: 3d:3e:00:ea:9b:63:48:c9:12:37:69:84:10:24:98:f2:96:f8: 7d:7e:aa:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TRo41U1jKPTgB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk NThlMzgwYmEtYjBhNy00Mzk0LTk0YmUtOTQzY2Y4N2M4ZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf5eb3Y3Ahv0jZea4zEFg9FH4MIfIKBIpZUl YmlRRrbgqTp6I6HzBAUTAb2J9SesQd2F6sI3M636LNZBtb1iqbrfnXYoPHkNn+oS DnI86zJRC9waY+3k+zGZ94lu0E7zMOtA9zeAWwA5zoIPseRNVTBEFioe5THpi0tC MvRHacdAiW4FLlk9vupG5W84Rm5QEKiIPW1r2cSszn0IUWXxUkd/wwk2W3xVRmYf ZJjM4mkcd7kN0L+E4dB27YQFgOQHyJcTJTHgFUMA90/mwfPNVGPPoTU45YwPoq73 bZ5ViTD4m1WBDJH6gwMGoErVssxdE+4Ti2u8Tlj86w1JyqPi5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIabYtn54lh5aFRdy8O3sx2AgMExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmRjN2UxODAtMjRhNC0z MmEwLThjMjMtNWY3ZWMxNTMyOTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz612RZMFyE4gyGr9Mzk8OIqhb7IOxiFJ2Hyo3KDxFhSa0Qib8Iw00T fiw+GI9vA3M8jQ1cTPtJsDi92XReweaVLdn1r37LG2brF7c5QJNpFCh/Ik4HeiN+ RO8p7PWXiE6OHCzYpNyUtL2QMP87SDlGzeRql/HzjQyveYcCdndOhSbid1fDwAoa cYhDuWxvilYiXk63LEpopzdfgJ3ub2TQQVpJFyHD2cT1Ao3gmLni9AzyZbFPsaK5 0X0qjJUjYn+aNeCjftQRhumaIO28HQk5PWwqk0HgM0iPuYHW1kpMTRh1kBB05mAV Vj0+AOqbY0jJEjdphBAkmPKW+H1+qpE= -----END CERTIFICATE-----Generated at Sat Sep 26 08:56:54 2026 by rpki-client