$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3236c937-0fed-38fb-a724-ee7d8b30efca.roa File: 3236c937-0fed-38fb-a724-ee7d8b30efca.roa (raw, json) Hash identifier: B8Y3PV1xk1coaQSQ1Q0vIQdlXHbehb7Cn1a2OJEUvos= Subject key identifier: AE:14:9C:31:84:F9:95:10:3A:F9:D2:41:63:2D:64:13:49:35:C7:B5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D6D12EA2881F29181EB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3236c937-0fed-38fb-a724-ee7d8b30efca.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.17.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:6d:12:ea:28:81:f2:91:81:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=9839389c-aaa3-447f-a413-5e6b16d80e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9a:cf:29:4b:f5:82:fd:43:39:fd:a1:ef:8c: 2e:ff:94:d6:2a:d7:91:85:3d:9f:0d:df:37:34:b5: 8e:21:7d:cc:3b:49:16:7d:be:ed:96:21:be:39:1c: 5d:44:f4:d9:3f:cb:9b:7f:f5:6a:ca:d1:09:ae:9b: af:5e:36:c9:12:2c:ad:68:07:72:a0:76:c2:40:34: 02:0f:ec:be:a7:1a:eb:4a:9b:12:d0:51:b3:fc:57: 54:38:9f:65:aa:32:4f:72:d5:4f:3b:d1:9e:2a:7c: 82:b6:4d:ea:b2:7c:b8:93:5f:08:67:d5:59:2e:d5: 6b:1a:78:00:13:e7:ac:4f:a8:43:88:5c:4b:1b:2b: a9:62:61:e7:f2:ce:3e:e1:c2:d9:8e:ce:31:1b:3e: bf:f3:70:82:53:5c:9d:d9:a4:77:8e:26:83:55:82: 44:38:98:19:7b:86:93:30:ec:11:ac:e6:b9:a4:1d: 62:55:f0:ff:ba:06:5d:68:42:ea:b3:ab:a9:5c:60: b1:14:91:de:ff:77:11:ad:13:7f:0c:82:a2:ed:53: 3c:4a:a1:7e:08:1a:cf:a5:0c:5f:7c:5c:39:2c:90: 50:44:00:dc:ab:c9:eb:d1:e0:97:b3:e1:22:62:42: 6a:24:a1:a8:fe:7a:da:97:23:fa:f1:44:c9:92:39: ce:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:14:9C:31:84:F9:95:10:3A:F9:D2:41:63:2D:64:13:49:35:C7:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3236c937-0fed-38fb-a724-ee7d8b30efca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:78:a0:bc:e1:7f:93:17:99:0f:8d:ca:47:9b:2e:d5:c7:1b: 6f:3d:eb:69:7e:de:30:92:04:d2:f4:6c:d4:e8:28:54:45:ce: 45:32:3b:6d:6a:a3:df:98:5a:ec:92:cb:bc:cb:fe:d3:da:e8: 4a:cb:5f:28:8b:c0:12:a6:7d:c0:22:d6:c2:52:41:48:99:69: 2c:ef:43:ff:39:d3:b3:a2:2f:b8:f3:ef:c5:54:3a:96:4e:c6: 0d:93:38:bf:8f:66:ca:17:9c:eb:ee:9d:c3:31:57:f9:33:51: 96:a6:8f:73:5f:00:46:41:15:34:47:23:ce:cb:07:e4:cb:6b: 49:84:2b:60:3a:54:ba:af:27:85:42:d2:ff:1e:f1:fa:91:17: d7:02:8d:12:ce:a4:8e:e6:3b:16:7b:98:e2:99:d8:70:8f:91: 1b:91:b8:77:83:29:95:35:d5:61:b3:15:b7:b3:8b:ad:a7:00: 98:62:96:ac:c8:82:27:d7:25:12:ef:79:d2:31:53:3d:4c:2b: 63:8f:3e:5c:f2:57:f1:6d:31:01:60:93:a3:55:16:0b:42:04: 1a:91:b0:2e:3b:75:fa:9e:db:8f:13:d4:9c:f9:d0:03:c1:cf: 1b:0d:c4:08:f2:49:75:fc:6c:bf:66:eb:67:a2:6b:50:9e:78: 3d:7f:70:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPW0S6iiB8pGB64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OTgzOTM4OWMtYWFhMy00NDdmLWE0MTMtNWU2YjE2ZDgwZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZrPKUv1gv1DOf2h74wu/5TWKteRhT2fDd83 NLWOIX3MO0kWfb7tliG+ORxdRPTZP8ubf/VqytEJrpuvXjbJEiytaAdyoHbCQDQC D+y+pxrrSpsS0FGz/FdUOJ9lqjJPctVPO9GeKnyCtk3qsny4k18IZ9VZLtVrGngA E+esT6hDiFxLGyupYmHn8s4+4cLZjs4xGz6/83CCU1yd2aR3jiaDVYJEOJgZe4aT MOwRrOa5pB1iVfD/ugZdaELqs6upXGCxFJHe/3cRrRN/DIKi7VM8SqF+CBrPpQxf fFw5LJBQRADcq8nr0eCXs+EiYkJqJKGo/nralyP68UTJkjnOawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4UnDGE+ZUQOvnSQWMtZBNJNce1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzIzNmM5MzctMGZlZC0z OGZiLWE3MjQtZWU3ZDhiMzBlZmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrREgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp4oLzhf5MXmQ+NykebLtXHG28962l+3jCSBNL0bNToKFRFzkUyO21q o9+YWuySy7zL/tPa6ErLXyiLwBKmfcAi1sJSQUiZaSzvQ/8507OiL7jz78VUOpZO xg2TOL+PZsoXnOvuncMxV/kzUZamj3NfAEZBFTRHI87LB+TLa0mEK2A6VLqvJ4VC 0v8e8fqRF9cCjRLOpI7mOxZ7mOKZ2HCPkRuRuHeDKZU11WGzFbezi62nAJhilqzI gifXJRLvedIxUz1MK2OPPlzyV/FtMQFgk6NVFgtCBBqRsC47dfqe248T1Jz50APB zxsNxAjySXX8bL9m62eia1CeeD1/cMM= -----END CERTIFICATE-----Generated at Wed Oct 14 02:01:37 2026 by rpki-client