$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24927ac0-57fd-3657-99af-1a39e1c9e829.roa File: 24927ac0-57fd-3657-99af-1a39e1c9e829.roa (raw, json) Hash identifier: T0f55F1kRROS44NGlmirKMd8JmX+VUqMTABwjZzwlns= Subject key identifier: FB:E5:88:71:43:E5:B1:E0:E1:07:03:FC:73:CB:38:6A:B9:E0:FE:86 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DA11AB082003DB582F6A6FC00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24927ac0-57fd-3657-99af-1a39e1c9e829.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 30036 IP address blocks: 173.17.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:b0:82:00:3d:b5:82:f6:a6:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=a0a20538-dd53-48cd-b014-eb867a16644d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:46:50:0e:4a:ed:96:5a:34:ae:37:4c:ca:64: e2:d3:73:3b:2a:c1:33:93:24:2e:46:47:e1:d0:79: 3d:c0:6f:a1:03:59:7e:70:6f:0e:a5:58:e9:ab:da: dd:33:20:17:7f:31:c3:90:cd:c9:fb:87:51:7a:ba: db:5f:e0:3f:2b:a2:3e:fa:5a:94:71:e7:00:a7:42: 1f:15:36:05:5a:f8:ac:c4:d5:dc:6c:47:47:b6:07: 31:50:04:77:e3:d4:16:78:cd:45:ea:ca:99:63:c0: 5d:67:a1:50:6f:23:bb:5d:60:e7:ca:ba:11:c6:2b: 38:22:dd:32:0c:a8:ca:ce:23:fd:d3:c0:d7:8d:67: 0f:04:59:c0:c2:ed:f4:8b:1d:87:40:7d:9a:3c:eb: f7:51:45:cd:ed:02:b9:98:0f:7b:50:c0:2e:41:83: bb:cf:17:c0:44:d2:2e:fd:ad:2c:3a:df:60:52:8c: 06:3c:b1:8c:7e:e3:92:88:9d:a5:80:41:39:c9:2c: 45:4a:08:ad:f2:75:cc:7d:b2:66:bf:7b:b9:87:2b: 2a:42:8c:a5:8d:fe:28:29:9d:b7:36:9c:81:f0:da: 27:ab:dd:04:bf:83:29:d4:13:06:70:02:af:a2:41: e4:e3:bc:47:f7:e6:51:ec:68:48:30:92:98:b7:70: f5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E5:88:71:43:E5:B1:E0:E1:07:03:FC:73:CB:38:6A:B9:E0:FE:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/24927ac0-57fd-3657-99af-1a39e1c9e829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f9:54:1e:3b:ea:a5:ea:43:eb:c9:10:c1:2e:08:a3:0c:5f: b0:74:2c:1f:a6:69:87:bf:f6:8a:a9:7c:4b:f4:6e:aa:d1:7f: 6b:d1:d3:17:07:e0:77:d6:53:42:c9:87:d4:64:61:0a:cf:63: 57:6c:ba:4a:fa:ce:50:39:1f:c1:96:85:9f:85:01:e7:cd:9c: b0:d4:b7:e6:0c:ae:87:d3:cf:db:c2:45:52:dd:4f:7a:67:7d: 56:65:37:31:28:66:d3:cb:83:8a:0b:80:28:c0:bf:dc:47:d2: 23:24:d6:31:69:72:82:02:9f:f3:11:71:0c:d5:50:57:11:e5: 00:6c:f3:8b:dd:a4:01:58:50:97:f5:1a:ed:b4:f5:45:d4:2c: 71:9a:17:d7:5f:a3:f0:6f:3b:bf:55:4a:05:a7:91:12:f1:ec: 16:d4:68:d1:78:e4:23:f8:2f:d2:5a:76:5d:97:6d:07:19:94: 37:10:a2:e9:ca:eb:d9:13:5d:ed:1a:e9:0a:d7:88:3c:dd:92: ff:3a:84:5f:3f:4c:77:b2:3d:b6:6e:01:04:48:7a:33:70:b7: 34:20:95:bd:99:84:5c:89:c9:37:e9:a6:63:13:63:53:61:4f: fc:3e:de:4a:dc:72:b7:20:95:69:be:07:27:06:65:89:3f:93: 99:b3:be:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGrCCAD21gvam/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk YTBhMjA1MzgtZGQ1My00OGNkLWIwMTQtZWI4NjdhMTY2NDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUZQDkrtllo0rjdMymTi03M7KsEzkyQuRkfh 0Hk9wG+hA1l+cG8OpVjpq9rdMyAXfzHDkM3J+4dRerrbX+A/K6I++lqUcecAp0If FTYFWvisxNXcbEdHtgcxUAR349QWeM1F6sqZY8BdZ6FQbyO7XWDnyroRxis4It0y DKjKziP908DXjWcPBFnAwu30ix2HQH2aPOv3UUXN7QK5mA97UMAuQYO7zxfARNIu /a0sOt9gUowGPLGMfuOSiJ2lgEE5ySxFSgit8nXMfbJmv3u5hysqQoyljf4oKZ23 NpyB8Nonq90Ev4Mp1BMGcAKvokHk47xH9+ZR7GhIMJKYt3D1SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvliHFD5bHg4QcD/HPLOGq54P6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjQ5MjdhYzAtNTdmZC0z NjU3LTk5YWYtMWEzOWUxYzllODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRElMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/5VB476qXqQ+vJEMEuCKMMX7B0LB+maYe/9oqpfEv0bqrRf2vR0xcH 4HfWU0LJh9RkYQrPY1dsukr6zlA5H8GWhZ+FAefNnLDUt+YMrofTz9vCRVLdT3pn fVZlNzEoZtPLg4oLgCjAv9xH0iMk1jFpcoICn/MRcQzVUFcR5QBs84vdpAFYUJf1 Gu209UXULHGaF9dfo/BvO79VSgWnkRLx7BbUaNF45CP4L9Jadl2XbQcZlDcQounK 69kTXe0a6QrXiDzdkv86hF8/THeyPbZuAQRIejNwtzQglb2ZhFyJyTfppmMTY1Nh T/w+3krccrcglWm+BycGZYk/k5mzvvA= -----END CERTIFICATE-----Generated at Fri May 8 18:26:42 2026 by rpki-client