$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa File: d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa (raw, json) Hash identifier: QlEZOd9og6RXM7TBd1pLtbCV8Hirw55p7xKRTy+laN8= Subject key identifier: 3B:A9:68:DD:27:D4:A3:EB:2E:26:0E:3E:98:C2:26:1E:A5:25:D0:95 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D5C69A515304F6B421E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.17.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5c:69:a5:15:30:4f:6b:42:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=9f8e94cf-8a66-462b-ab8a-387b7e6a071a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:04:6a:df:5e:04:c6:a9:ec:4f:53:42:66:36: 06:0b:24:ae:88:a6:59:9e:f8:b3:64:54:2c:45:b0: 31:bf:1c:ad:95:9e:fb:ec:09:92:bf:96:58:fc:af: cd:76:ef:64:f3:d8:e1:3d:8c:e9:e9:e3:23:b7:a1: f9:ea:76:21:fa:5a:8d:92:39:67:16:f7:a3:ec:a7: af:71:a0:b7:9a:ff:77:27:4c:91:18:38:b5:6a:e7: f3:89:a9:31:9d:09:b7:a7:fb:aa:78:67:23:2f:2b: f2:fe:49:84:61:91:7e:5e:b4:56:67:e4:31:6e:f0: e6:28:62:3b:58:92:dd:b4:00:cf:b5:61:26:48:d1: 6f:47:31:1d:35:e6:97:2d:5b:4f:6c:8d:57:72:34: 42:35:de:85:98:b2:0b:a7:5c:cb:01:57:8f:40:3e: c6:99:27:a8:ee:0b:a7:74:73:ab:5d:91:a8:34:4e: f5:b1:d1:1d:2b:d7:24:87:16:1b:1e:e6:03:7e:a4: 1e:94:3c:35:d3:10:64:2f:42:40:fd:e3:af:a0:c4: 4a:50:35:fe:4d:9f:20:f6:f2:5a:dd:95:9a:3e:24: 22:08:94:ac:d7:d6:b9:72:11:bf:57:51:2f:40:2d: 32:57:0a:11:75:be:b2:b0:cf:f9:3d:83:3f:64:10: e3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A9:68:DD:27:D4:A3:EB:2E:26:0E:3E:98:C2:26:1E:A5:25:D0:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d81892c4-8d4a-3b81-8a8c-e826945c07d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:2f:e7:50:96:5f:43:6b:4b:98:ab:05:1c:e2:b6:bc:4c:4f: 93:27:19:af:ef:5d:06:ed:d3:3f:d6:9f:4b:19:ed:a9:7c:93: 8e:fc:76:b5:b7:fa:10:91:c2:aa:88:26:5e:a3:24:ed:39:58: 18:2e:57:b5:d1:2d:43:38:20:72:b7:ae:50:e5:66:f9:8f:ec: 20:07:77:b8:31:e8:8e:c6:15:8d:2d:75:c3:8c:d9:c1:b1:d7: 51:19:0b:d3:a3:d1:bd:b6:ba:e2:80:72:95:26:0e:ad:a8:08: 2d:fd:9d:2d:08:aa:f7:56:e9:b2:5a:6f:61:0d:a8:60:ac:89: ea:bf:13:27:71:ee:2a:83:af:f4:32:5f:a3:2a:90:c6:ad:09: dc:65:3f:5e:77:c0:94:cb:17:22:cd:f8:64:04:9b:4b:57:01: 25:ce:3e:c0:26:59:36:f1:b9:31:29:69:2d:4d:99:43:ea:f1: 16:ef:ee:8b:50:3b:45:6b:a8:cb:19:2c:9d:7e:99:16:52:a2: 28:f3:56:83:4b:0f:e2:26:56:01:e0:b6:ec:a9:ef:28:64:f7: c4:09:4c:21:91:5e:da:bd:b1:3c:05:da:78:a1:07:91:9f:ba: 3d:55:cf:eb:db:d3:1e:ed:06:44:07:57:fd:ac:bf:8a:f6:fb: d5:d9:24:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVxppRUwT2tCHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OWY4ZTk0Y2YtOGE2Ni00NjJiLWFiOGEtMzg3YjdlNmEwNzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigRq314ExqnsT1NCZjYGCySuiKZZnvizZFQs RbAxvxytlZ777AmSv5ZY/K/Ndu9k89jhPYzp6eMjt6H56nYh+lqNkjlnFvej7Kev caC3mv93J0yRGDi1aufziakxnQm3p/uqeGcjLyvy/kmEYZF+XrRWZ+QxbvDmKGI7 WJLdtADPtWEmSNFvRzEdNeaXLVtPbI1XcjRCNd6FmLILp1zLAVePQD7GmSeo7gun dHOrXZGoNE71sdEdK9ckhxYbHuYDfqQelDw10xBkL0JA/eOvoMRKUDX+TZ8g9vJa 3ZWaPiQiCJSs19a5chG/V1EvQC0yVwoRdb6ysM/5PYM/ZBDjlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDupaN0n1KPrLiYOPpjCJh6lJdCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDgxODkyYzQtOGQ0YS0z YjgxLThhOGMtZTgyNjk0NWMwN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0v51CWX0NrS5irBRzitrxMT5MnGa/vXQbt0z/Wn0sZ7al8k478drW3 +hCRwqqIJl6jJO05WBguV7XRLUM4IHK3rlDlZvmP7CAHd7gx6I7GFY0tdcOM2cGx 11EZC9Oj0b22uuKAcpUmDq2oCC39nS0IqvdW6bJab2ENqGCsieq/Eydx7iqDr/Qy X6MqkMatCdxlP153wJTLFyLN+GQEm0tXASXOPsAmWTbxuTEpaS1NmUPq8Rbv7otQ O0VrqMsZLJ1+mRZSoijzVoNLD+ImVgHgtuyp7yhk98QJTCGRXtq9sTwF2nihB5Gf uj1Vz+vb0x7tBkQHV/2sv4r2+9XZJAE= -----END CERTIFICATE-----Generated at Sat Sep 26 11:06:32 2026 by rpki-client