$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e70cd449-30a3-3b2b-a48c-52c8fcc9b2b1.roa File: e70cd449-30a3-3b2b-a48c-52c8fcc9b2b1.roa (raw, json) Hash identifier: S8T7VS9WSo0mE+0iwiiU9EUzUu+35ld6HU8U1hc8Xy0= Subject key identifier: E6:D9:0E:FF:2C:72:41:2C:B3:76:BB:32:DD:05:E5:84:14:85:E1:11 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D4CEEE68428216DFE7840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e70cd449-30a3-3b2b-a48c-52c8fcc9b2b1.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.17.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:4c:ee:e6:84:28:21:6d:fe:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=ec4b05ae-ba1c-4545-a4b1-034be6f94813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c5:ec:72:d9:72:f3:51:23:02:4f:32:43:86: 0f:6c:fe:47:32:fd:3c:e0:ac:0f:4f:e2:9f:4b:a1: b3:d6:5c:e9:3e:88:de:09:21:33:ad:93:d6:c2:83: 8b:68:85:c5:08:ae:73:31:58:f8:da:e7:f6:75:a0: 7c:8d:f9:d6:41:36:ef:c3:b5:40:2d:a0:b1:1a:62: bc:5b:bc:9f:50:f1:16:22:80:4c:64:e6:03:b0:47: 1b:64:ae:65:eb:69:15:a8:0b:46:99:9a:c2:56:0c: fc:3c:b2:5d:64:ea:bb:3d:c2:21:2b:aa:76:35:5a: 07:86:f4:b2:77:2f:50:0a:56:eb:92:ac:d2:f1:dc: f1:1e:f1:7e:5a:da:6d:54:70:5e:9b:0a:9f:01:93: 9a:d7:4b:6c:4f:b3:c5:0b:cc:6d:d3:a0:df:a2:b6: 10:f0:96:ef:4b:68:31:2c:0c:83:df:e7:b9:ab:6e: 06:24:7d:1b:d7:3e:3b:1f:21:5d:86:90:4c:0e:f1: 0d:00:66:c9:7b:6c:17:c4:79:ac:4c:9a:6a:6f:39: 5a:85:50:78:7d:c7:14:59:82:60:a1:cd:33:45:7b: 24:3b:b6:31:0e:03:c4:f6:9c:98:83:f4:8b:f2:11: 79:5e:ba:f3:bc:94:bf:94:6d:5a:bd:ec:7f:60:10: b8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D9:0E:FF:2C:72:41:2C:B3:76:BB:32:DD:05:E5:84:14:85:E1:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e70cd449-30a3-3b2b-a48c-52c8fcc9b2b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:0e:82:34:4b:92:05:b7:ba:38:c8:5a:01:89:0d:8e:1b:13: d0:23:03:92:b0:6a:a3:3c:63:75:d0:c4:58:c4:6f:9f:7c:f1: 6e:e6:45:c6:18:20:34:3c:a9:a6:f7:b4:33:92:92:ff:5b:7b: 23:43:61:db:4c:eb:12:2f:63:7a:a0:2c:3b:56:0e:fe:5d:79: c5:d1:4d:fe:a8:89:f5:53:65:6c:ee:56:07:cd:11:87:6f:18: 9a:32:a9:84:c6:75:9a:31:83:4e:cf:77:d5:7a:23:7d:cd:e7: 45:5e:a2:63:0e:20:6a:6a:5e:be:7b:77:69:e3:0d:ef:c5:9c: a9:2f:4f:a9:62:95:b3:8e:b8:e1:ab:8f:ee:d1:94:67:ff:65: 50:32:fa:51:a4:4b:00:fc:78:22:dd:d1:90:8e:1f:51:f8:c6: 85:55:d8:1b:08:58:45:c7:ea:6c:e1:c3:e4:a0:9b:b5:6d:42: 0f:f7:6a:71:c1:51:79:89:30:c2:6f:bd:ca:48:eb:ce:33:77: f2:f4:91:f6:92:43:cc:0a:c9:cc:e0:71:d4:75:bd:a2:de:f4: 19:dd:e6:4e:33:0e:6a:ac:e4:49:15:3d:cf:f2:53:0f:7a:d3: 7d:be:f5:cd:c2:c0:28:2b:69:b1:55:ab:6c:0e:c7:f4:76:a5: bb:8a:53:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUzu5oQoIW3+eEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZWM0YjA1YWUtYmExYy00NTQ1LWE0YjEtMDM0YmU2Zjk0ODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8Xsctly81EjAk8yQ4YPbP5HMv084KwPT+Kf S6Gz1lzpPojeCSEzrZPWwoOLaIXFCK5zMVj42uf2daB8jfnWQTbvw7VALaCxGmK8 W7yfUPEWIoBMZOYDsEcbZK5l62kVqAtGmZrCVgz8PLJdZOq7PcIhK6p2NVoHhvSy dy9QClbrkqzS8dzxHvF+WtptVHBemwqfAZOa10tsT7PFC8xt06DforYQ8JbvS2gx LAyD3+e5q24GJH0b1z47HyFdhpBMDvENAGbJe2wXxHmsTJpqbzlahVB4fccUWYJg oc0zRXskO7YxDgPE9pyYg/SL8hF5XrrzvJS/lG1avex/YBC4SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObZDv8sckEss3a7Mt0F5YQUheERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTcwY2Q0NDktMzBhMy0z YjJiLWE0OGMtNTJjOGZjYzliMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4OgjRLkgW3ujjIWgGJDY4bE9AjA5KwaqM8Y3XQxFjEb5988W7mRcYY IDQ8qab3tDOSkv9beyNDYdtM6xIvY3qgLDtWDv5decXRTf6oifVTZWzuVgfNEYdv GJoyqYTGdZoxg07Pd9V6I33N50VeomMOIGpqXr57d2njDe/FnKkvT6lilbOOuOGr j+7RlGf/ZVAy+lGkSwD8eCLd0ZCOH1H4xoVV2BsIWEXH6mzhw+Sgm7VtQg/3anHB UXmJMMJvvcpI684zd/L0kfaSQ8wKyczgcdR1vaLe9Bnd5k4zDmqs5EkVPc/yUw96 032+9c3CwCgrabFVq2wOx/R2pbuKU1c= -----END CERTIFICATE-----Generated at Sat Sep 26 18:27:48 2026 by rpki-client