$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c2e012-ec24-3b74-99b3-c9a272ffd49e.roa File: 53c2e012-ec24-3b74-99b3-c9a272ffd49e.roa (raw, json) Hash identifier: aKUm3jMmPvONUctP7OzgPIBo+6HYIUJOVr1F5oFvfV8= Subject key identifier: 12:E5:2B:EE:19:97:D2:D2:CE:08:08:14:06:77:0B:24:D4:B7:69:C3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4F08085DA2B01B48D7B2D180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c2e012-ec24-3b74-99b3-c9a272ffd49e.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.17.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:08:5d:a2:b0:1b:48:d7:b2:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=e4dc91bc-2457-4291-93df-a60849e2694a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a9:be:29:63:7b:74:13:56:7f:3c:df:88:7d: 72:64:09:82:3e:d9:fc:ec:57:27:43:fa:56:0b:4f: c5:40:c5:2b:e7:94:d6:8a:db:d4:a3:10:6f:a9:80: 7d:79:66:40:13:aa:30:a3:8a:fd:b3:eb:70:fd:f3: 6a:0a:06:9c:a0:e2:1c:47:4b:8c:01:92:ee:8d:2e: 83:37:ec:7c:ed:b0:64:d6:23:70:8f:ce:7b:8f:05: ba:0e:ee:8c:1c:01:df:b2:5a:9a:78:99:84:9e:65: 63:d7:5b:34:e7:f7:d7:7c:60:9e:fb:7e:9b:2d:7e: a5:39:9a:c0:89:1a:25:99:d7:29:b2:30:01:31:e3: 3d:ac:26:58:7f:08:2d:dd:85:66:b1:1f:54:84:5e: 0c:9f:21:84:e0:f9:fa:28:27:36:5e:62:07:3c:38: bc:72:f6:d9:d1:23:5a:a1:53:f3:24:5d:81:de:c8: 45:d8:89:28:00:1b:50:97:5a:c5:af:6c:06:84:80: 38:b9:c7:55:4b:4e:46:36:4b:6f:35:17:4c:1f:4a: 94:1d:85:22:18:9f:c0:16:fb:f1:b7:04:9b:f5:35: 59:f7:13:e0:d6:dc:9c:07:2d:29:a2:17:f3:bc:b3: e7:c3:e0:6a:01:36:49:98:02:d7:d3:9c:e9:de:ab: b6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E5:2B:EE:19:97:D2:D2:CE:08:08:14:06:77:0B:24:D4:B7:69:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/53c2e012-ec24-3b74-99b3-c9a272ffd49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:3e:78:49:0c:b6:f9:90:44:80:15:af:d1:58:19:2b:6f:ac: bd:eb:8d:32:8b:6d:25:08:49:1e:ab:bb:1a:f4:f7:76:aa:21: 88:86:0d:63:c1:ca:ba:ca:53:b3:f8:f5:ac:4b:84:a1:fe:5d: ad:1b:2b:6c:a2:f4:b3:a6:d2:5c:d1:a7:db:d1:f5:18:17:ab: 96:a2:dc:63:4e:69:db:b1:2f:02:85:56:ca:b6:f0:e9:2a:b4: e5:d1:ce:94:24:c0:e9:08:47:7c:63:0f:5e:3a:4b:92:41:3f: 76:5c:2c:d6:93:9d:1d:3c:4e:82:ed:57:62:ce:0c:34:56:e9: ab:9c:2f:1f:7e:a5:be:39:23:63:74:54:3b:8b:ca:5c:61:ef: d4:2b:7f:35:06:e4:e6:c7:e0:f4:94:5f:4a:2d:f5:ff:2a:5d: 3c:01:9e:2a:aa:5a:13:6e:55:42:38:2a:7b:0f:fb:78:bd:82: 29:88:fd:f0:b2:ac:0c:62:12:e8:ff:8d:17:86:a9:34:e6:4d: a5:fd:91:c5:e5:83:72:d4:9a:f6:31:2d:7f:7b:a6:53:47:41: 51:6b:52:88:b4:ee:6c:f3:49:ff:78:ae:38:45:74:45:f1:f4: c8:f5:15:0a:15:ec:92:cb:c6:7f:f0:47:9f:bf:f9:b1:f7:b9: d1:1d:d4:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCAhdorAbSNey0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk ZTRkYzkxYmMtMjQ1Ny00MjkxLTkzZGYtYTYwODQ5ZTI2OTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6m+KWN7dBNWfzzfiH1yZAmCPtn87FcnQ/pW C0/FQMUr55TWitvUoxBvqYB9eWZAE6owo4r9s+tw/fNqCgacoOIcR0uMAZLujS6D N+x87bBk1iNwj857jwW6Du6MHAHfslqaeJmEnmVj11s05/fXfGCe+36bLX6lOZrA iRolmdcpsjABMeM9rCZYfwgt3YVmsR9UhF4MnyGE4Pn6KCc2XmIHPDi8cvbZ0SNa oVPzJF2B3shF2IkoABtQl1rFr2wGhIA4ucdVS05GNktvNRdMH0qUHYUiGJ/AFvvx twSb9TVZ9xPg1tycBy0pohfzvLPnw+BqATZJmALX05zp3qu2BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLlK+4Zl9LSzggIFAZ3CyTUt2nDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTNjMmUwMTItZWMyNC0z Yjc0LTk5YjMtYzlhMjcyZmZkNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU+eEkMtvmQRIAVr9FYGStvrL3rjTKLbSUISR6ruxr093aqIYiGDWPB yrrKU7P49axLhKH+Xa0bK2yi9LOm0lzRp9vR9RgXq5ai3GNOaduxLwKFVsq28Okq tOXRzpQkwOkIR3xjD146S5JBP3ZcLNaTnR08ToLtV2LODDRW6aucLx9+pb45I2N0 VDuLylxh79QrfzUG5ObH4PSUX0ot9f8qXTwBniqqWhNuVUI4KnsP+3i9gimI/fCy rAxiEuj/jReGqTTmTaX9kcXlg3LUmvYxLX97plNHQVFrUoi07mzzSf94rjhFdEXx 9Mj1FQoV7JLLxn/wR5+/+bH3udEd1Js= -----END CERTIFICATE-----Generated at Sun Oct 11 21:53:53 2026 by rpki-client