$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa File: c0286517-a220-316a-b592-8b2237a7fea3.roa (raw, json) Hash identifier: b8OsvRPWlR2tuwHNFruJjZypVLVkDL2jD84zlWyHl7U= Subject key identifier: B0:3E:3F:7B:72:FA:53:00:CC:BB:8E:AD:23:22:9A:A9:E0:94:EE:EA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DE15F1775503AB22B7280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.17.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e1:5f:17:75:50:3a:b2:2b:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=88c486c1-bb04-4f06-a9e4-b590448b58db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9a:bc:e7:f4:8c:97:92:a2:55:b1:c5:b1:d7: 7d:0b:7c:12:79:c2:87:31:02:b2:e1:57:a7:fa:02: 95:c0:59:ec:7b:e3:b8:d1:59:4e:21:da:a9:5d:8e: f8:cb:93:1c:f0:95:cc:ad:c2:ee:d7:a3:30:af:9b: 39:61:0a:33:c9:87:43:f2:38:e8:52:36:13:c4:71: 97:f6:da:4d:1a:66:18:04:0d:71:35:68:5c:19:3d: 9e:00:dd:4d:cd:99:a0:04:52:99:11:53:0f:09:c0: 37:8a:46:df:86:0c:bc:04:62:f6:71:1a:b5:c0:ae: 29:d0:75:93:db:99:09:5f:c4:85:92:e4:08:9c:13: ff:4a:dd:92:4d:9f:bb:b8:14:4d:e6:0c:d9:99:7d: 76:e0:82:5f:e9:7d:a5:03:71:de:97:be:e6:f7:10: 0a:80:e2:2e:a8:43:e1:2c:0e:fb:3a:12:b2:9d:d8: e2:3a:b0:91:b5:36:11:11:ba:df:ac:62:8a:b6:76: ee:1e:18:da:7e:e9:0c:71:92:0d:70:94:0d:d4:e0: d8:39:e0:04:f6:3a:72:70:e1:c1:87:3a:86:34:3f: 06:24:52:a3:65:be:4f:c0:6e:8b:ac:4b:46:2a:d1: 6d:ee:3d:bd:67:e2:3f:0b:5e:33:20:be:04:b9:c8: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3E:3F:7B:72:FA:53:00:CC:BB:8E:AD:23:22:9A:A9:E0:94:EE:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0286517-a220-316a-b592-8b2237a7fea3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:10:51:3e:1a:18:1f:2c:56:d1:e0:41:8d:bc:0c:74:80:ca: 55:15:37:13:23:0b:f7:16:17:e2:9b:9d:e4:17:a3:52:2a:07: 71:c2:c1:ad:0a:b1:83:71:45:be:f6:bf:6b:0e:eb:f3:5f:a1: ae:1d:3b:03:e2:e9:d4:95:27:64:ee:f4:66:f9:43:93:4b:38: 13:0a:fb:13:10:81:e2:9b:bc:b8:82:76:d1:f2:43:67:c0:33: 29:0b:2d:80:1d:fa:a2:84:15:ce:2e:ca:14:d4:80:cf:e0:62: 29:8d:9a:da:74:cb:93:97:c3:c3:7c:14:32:80:fd:ac:eb:10: f1:42:e8:18:87:d8:2c:68:dd:a2:06:5f:90:62:70:b5:81:0a: 0f:7f:d3:4a:2c:df:b3:91:3e:69:e5:7d:fa:09:fa:6b:3f:14: f9:29:44:e1:a0:ab:ef:5d:ea:ed:62:90:33:72:b1:82:98:4d: aa:de:70:cf:6f:56:b4:0f:d0:9f:6d:3d:a6:f7:f2:01:9d:d4: f4:34:f7:4e:19:62:a6:77:4d:a5:0d:3d:d1:4e:72:68:85:c8: 94:2a:15:b6:13:a9:a9:55:80:74:d5:52:3e:45:78:b5:0c:d3: b6:04:2b:bc:99:68:79:26:43:75:00:c2:e3:b9:37:de:98:d2: e9:b2:5b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeFfF3VQOrIrcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODhjNDg2YzEtYmIwNC00ZjA2LWE5ZTQtYjU5MDQ0OGI1OGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJq85/SMl5KiVbHFsdd9C3wSecKHMQKy4Ven +gKVwFnse+O40VlOIdqpXY74y5Mc8JXMrcLu16Mwr5s5YQozyYdD8jjoUjYTxHGX 9tpNGmYYBA1xNWhcGT2eAN1NzZmgBFKZEVMPCcA3ikbfhgy8BGL2cRq1wK4p0HWT 25kJX8SFkuQInBP/St2STZ+7uBRN5gzZmX124IJf6X2lA3Hel77m9xAKgOIuqEPh LA77OhKyndjiOrCRtTYREbrfrGKKtnbuHhjafukMcZINcJQN1ODYOeAE9jpycOHB hzqGND8GJFKjZb5PwG6LrEtGKtFt7j29Z+I/C14zIL4EucisVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA+P3ty+lMAzLuOrSMimqnglO7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzAyODY1MTctYTIyMC0z MTZhLWI1OTItOGIyMjM3YTdmZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4QUT4aGB8sVtHgQY28DHSAylUVNxMjC/cWF+KbneQXo1IqB3HCwa0K sYNxRb72v2sO6/Nfoa4dOwPi6dSVJ2Tu9Gb5Q5NLOBMK+xMQgeKbvLiCdtHyQ2fA MykLLYAd+qKEFc4uyhTUgM/gYimNmtp0y5OXw8N8FDKA/azrEPFC6BiH2Cxo3aIG X5BicLWBCg9/00os37ORPmnlffoJ+ms/FPkpROGgq+9d6u1ikDNysYKYTarecM9v VrQP0J9tPab38gGd1PQ0904ZYqZ3TaUNPdFOcmiFyJQqFbYTqalVgHTVUj5FeLUM 07YEK7yZaHkmQ3UAwuO5N96Y0umyW9I= -----END CERTIFICATE-----Generated at Sun Sep 27 12:25:43 2026 by rpki-client