$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2ddb1a1-8014-3f91-bcb4-27294e1d20f3.roa File: a2ddb1a1-8014-3f91-bcb4-27294e1d20f3.roa (raw, json) Hash identifier: 5CHCV5g1+IIOk/vROrRWm2f2y3MH1UXNtGHqqoPYfvw= Subject key identifier: F1:B1:D1:EB:15:AF:CC:D3:1F:13:12:2E:FA:A3:8F:04:77:5E:E6:74 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D66D6683547D094620A20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2ddb1a1-8014-3f91-bcb4-27294e1d20f3.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.17.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:66:d6:68:35:47:d0:94:62:0a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a8c2c71e-9846-40dd-aa08-74add5158319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:75:20:db:26:c1:ca:8e:fa:5f:3f:26:db: 47:42:b7:dd:90:39:fe:6d:f8:b2:9d:0a:44:a0:ff: e3:ab:64:6e:e1:c5:7f:ef:57:e5:e0:cb:ee:23:ce: d9:21:ad:3e:73:cf:14:b8:18:83:f0:02:79:53:c1: ea:7e:3d:59:7b:5b:70:1a:b2:ac:ee:9d:4c:23:4a: 31:dc:3a:cf:b7:f4:e0:69:48:59:86:f0:a2:e6:e9: d9:95:8e:b0:f6:30:1a:0b:cd:61:8e:d8:ba:a3:62: 37:27:55:4a:1b:f2:cf:bc:b8:a0:f8:7e:2f:92:b1: 6f:0d:69:22:a5:8a:4c:a5:1c:dc:67:cd:8b:14:be: 8e:f4:ea:e0:d9:4d:cf:70:a8:e0:b2:e9:ba:ee:9a: d8:1d:2d:48:67:12:a1:67:e4:03:01:2d:d8:a3:34: b6:a7:2f:93:66:f6:7a:38:6a:92:94:c4:1b:57:3b: 8b:82:e7:8f:c0:27:f1:7a:23:86:ed:bd:a7:44:99: e9:35:29:2e:72:b4:0e:77:78:ec:66:d0:a7:4b:9f: bd:54:2a:a8:d7:2e:f7:94:e8:b1:d1:4b:82:59:5e: a9:72:97:47:be:04:fd:56:aa:6d:5a:a3:cf:01:b5: 48:db:6d:7d:4f:7d:82:ac:bf:c5:6e:89:db:c6:35: 62:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B1:D1:EB:15:AF:CC:D3:1F:13:12:2E:FA:A3:8F:04:77:5E:E6:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2ddb1a1-8014-3f91-bcb4-27294e1d20f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:30:9c:f0:3b:2c:7e:4c:1b:db:65:d3:45:d0:cf:b5:a2:cf: 3a:69:d1:09:3a:23:7c:e1:f7:ad:8a:e3:c5:c8:b6:05:b0:59: 9f:31:5e:dd:40:f8:81:21:91:58:a7:de:11:6a:06:ba:00:e4: 86:ec:38:c4:72:df:55:fb:ca:20:e7:87:0b:37:61:11:c9:28: 92:32:6c:19:48:bd:9e:f2:a7:71:28:a2:49:f8:1a:6c:04:a4: e3:05:37:e8:3a:dc:5a:af:71:dc:29:9a:36:d4:dc:e2:6b:06: f6:22:bd:07:6c:fd:4c:77:0b:96:51:38:c9:79:35:65:53:fc: 38:0f:e4:f9:ff:1b:47:52:2b:68:e1:c1:53:68:5c:b8:92:62: 4a:d6:b6:27:19:48:cd:df:9c:8b:5d:6c:07:d0:2a:1e:57:16: 40:7d:b5:92:4c:aa:7f:20:29:38:3b:93:c0:16:74:e0:d3:d7: 1e:fe:97:a5:6d:d9:48:54:14:85:c5:52:8a:a1:44:bc:f5:79: 75:f6:42:a1:7f:6a:5a:48:68:66:97:cb:ea:44:65:68:ec:dc: 2c:ab:c7:6b:86:21:48:f3:98:7f:21:77:ea:f3:06:d6:57:77: be:e9:48:b9:08:6d:d6:80:20:35:2a:d8:df:14:ea:6c:b2:1d: 5a:5d:4e:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWbWaDVH0JRiCiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YThjMmM3MWUtOTg0Ni00MGRkLWFhMDgtNzRhZGQ1MTU4MzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnd1INsmwcqO+l8/JttHQrfdkDn+bfiynQpE oP/jq2Ru4cV/71fl4MvuI87ZIa0+c88UuBiD8AJ5U8Hqfj1Ze1twGrKs7p1MI0ox 3DrPt/TgaUhZhvCi5unZlY6w9jAaC81hjti6o2I3J1VKG/LPvLig+H4vkrFvDWki pYpMpRzcZ82LFL6O9Org2U3PcKjgsum67prYHS1IZxKhZ+QDAS3YozS2py+TZvZ6 OGqSlMQbVzuLguePwCfxeiOG7b2nRJnpNSkucrQOd3jsZtCnS5+9VCqo1y73lOix 0UuCWV6pcpdHvgT9VqptWqPPAbVI2219T32CrL/FbonbxjVifQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGx0esVr8zTHxMSLvqjjwR3XuZ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTJkZGIxYTEtODAxNC0z ZjkxLWJjYjQtMjcyOTRlMWQyMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgwnPA7LH5MG9tl00XQz7Wizzpp0Qk6I3zh962K48XItgWwWZ8xXt1A +IEhkVin3hFqBroA5IbsOMRy31X7yiDnhws3YRHJKJIybBlIvZ7yp3Eookn4GmwE pOMFN+g63FqvcdwpmjbU3OJrBvYivQds/Ux3C5ZROMl5NWVT/DgP5Pn/G0dSK2jh wVNoXLiSYkrWticZSM3fnItdbAfQKh5XFkB9tZJMqn8gKTg7k8AWdODT1x7+l6Vt 2UhUFIXFUoqhRLz1eXX2QqF/alpIaGaXy+pEZWjs3Cyrx2uGIUjzmH8hd+rzBtZX d77pSLkIbdaAIDUq2N8U6myyHVpdTjM= -----END CERTIFICATE-----Generated at Mon Oct 12 23:54:36 2026 by rpki-client