$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e577cf7-001e-33b7-928f-1b41550b0b21.roa File: 9e577cf7-001e-33b7-928f-1b41550b0b21.roa (raw, json) Hash identifier: y+ljtP9Jp+IaKVC4sJlS4A+9RPn7IMlWDIE08siB1Fk= Subject key identifier: CD:59:74:80:C1:0A:7D:7A:88:34:E6:8C:30:C0:CF:0F:53:46:14:6B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A1A7274E5F68934DCCB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e577cf7-001e-33b7-928f-1b41550b0b21.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.17.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1a:72:74:e5:f6:89:34:dc:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=6439ca37-d076-41ff-b3f3-c001e579384e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:06:b4:4a:85:74:17:91:8f:95:13:82:62:bc: dd:a2:3b:bb:0d:eb:09:4c:5a:0d:d3:81:a7:ca:80: 86:06:1c:78:65:ab:60:c6:ff:00:f7:08:e6:a5:62: 35:c8:1b:fe:e7:fb:fe:4c:9b:c0:a4:d1:9a:98:57: 3f:f7:b5:b6:69:5a:ac:a6:b5:53:5e:f6:4b:3f:6c: ae:ab:6f:e3:30:ee:02:9e:3a:0d:32:33:45:c9:e2: 00:ca:f4:27:a1:12:dd:9d:76:e9:a3:47:6d:22:1e: 91:46:0e:91:da:e1:c5:d7:19:3f:dd:f4:d2:47:45: ac:f3:c7:a9:ab:92:39:e5:2a:53:8c:e2:81:54:58: 3a:93:91:60:c5:d0:c4:30:76:89:00:f6:03:f9:dd: 95:9d:63:51:a3:0c:1f:6c:c7:4c:b1:16:45:7a:c6: ed:f2:ad:d7:c3:e8:f2:d7:56:a0:65:37:54:77:32: 33:40:9d:44:c9:e3:26:bb:6d:65:bb:14:a5:0a:fb: e1:7a:e5:73:56:14:f2:b6:65:13:09:3e:57:ad:9a: d7:d2:d8:e5:f6:94:6e:06:53:42:e0:fb:3c:7c:8a: f8:ee:71:d3:36:0c:c4:a5:e3:52:49:e7:8c:87:58: d3:5c:23:64:ec:39:60:7c:d7:b9:6f:61:8d:7d:24: 09:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:59:74:80:C1:0A:7D:7A:88:34:E6:8C:30:C0:CF:0F:53:46:14:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9e577cf7-001e-33b7-928f-1b41550b0b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f9:d8:26:4b:84:cb:50:4b:20:97:b0:4a:ea:f4:f8:02:60: a6:cb:dc:b1:a7:d0:b3:3a:49:f9:cc:98:31:ef:12:8d:dd:5c: cd:17:4c:3b:31:f3:17:b6:43:01:25:3a:6f:e3:84:a6:7f:f8: 3d:6c:8a:a1:5e:f9:dd:e9:62:d2:43:99:0b:d1:f5:b4:7f:6b: 91:ba:3c:30:7d:d4:f3:79:d7:9c:b6:45:1b:52:71:ed:3b:e9: f5:bb:0c:5a:1b:4b:fa:6c:ce:a0:ce:7a:37:e6:dc:5e:60:95: f5:ad:2c:b1:73:1e:e8:8c:70:a5:c6:04:97:e8:c7:eb:0b:2f: 40:99:aa:71:49:45:4b:a4:80:0d:c7:9e:00:7c:f2:4e:52:3e: 0a:4b:72:63:75:d4:43:b4:f2:a6:91:c5:f8:6f:50:c9:e6:7a: 31:8c:e3:4e:f4:9a:0e:39:cd:d0:0a:ec:5f:3e:d9:e2:11:ab: cd:6a:fc:b3:e4:34:20:08:e0:c2:f3:7f:35:30:78:53:9d:f8: 9c:6b:b9:c5:d0:dd:5e:02:d9:16:34:0f:5e:84:b5:1a:5d:73: d5:31:15:e2:27:7e:7d:49:30:58:57:7b:11:84:33:86:00:4f: 96:3a:07:08:11:95:10:dc:4b:f6:25:d3:2a:7c:91:43:01:fe: 47:de:57:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jehpydOX2iTTcy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NjQzOWNhMzctZDA3Ni00MWZmLWIzZjMtYzAwMWU1NzkzODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwa0SoV0F5GPlROCYrzdoju7DesJTFoN04Gn yoCGBhx4Zatgxv8A9wjmpWI1yBv+5/v+TJvApNGamFc/97W2aVqsprVTXvZLP2yu q2/jMO4CnjoNMjNFyeIAyvQnoRLdnXbpo0dtIh6RRg6R2uHF1xk/3fTSR0Ws88ep q5I55SpTjOKBVFg6k5FgxdDEMHaJAPYD+d2VnWNRowwfbMdMsRZFesbt8q3Xw+jy 11agZTdUdzIzQJ1EyeMmu21luxSlCvvheuVzVhTytmUTCT5XrZrX0tjl9pRuBlNC 4Ps8fIr47nHTNgzEpeNSSeeMh1jTXCNk7DlgfNe5b2GNfSQJbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1ZdIDBCn16iDTmjDDAzw9TRhRrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWU1NzdjZjctMDAxZS0z M2I3LTkyOGYtMWI0MTU1MGIwYjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRFCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD52CZLhMtQSyCXsErq9PgCYKbL3LGn0LM6SfnMmDHvEo3dXM0XTDsx 8xe2QwElOm/jhKZ/+D1siqFe+d3pYtJDmQvR9bR/a5G6PDB91PN515y2RRtSce07 6fW7DFobS/pszqDOejfm3F5glfWtLLFzHuiMcKXGBJfox+sLL0CZqnFJRUukgA3H ngB88k5SPgpLcmN11EO08qaRxfhvUMnmejGM4070mg45zdAK7F8+2eIRq81q/LPk NCAI4MLzfzUweFOd+JxrucXQ3V4C2RY0D16EtRpdc9UxFeInfn1JMFhXexGEM4YA T5Y6BwgRlRDcS/Yl0yp8kUMB/kfeV58= -----END CERTIFICATE-----Generated at Thu Mar 12 03:44:38 2026 by rpki-client