$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfabafe3-7463-3fa8-8663-620bcced1c28.roa File: cfabafe3-7463-3fa8-8663-620bcced1c28.roa (raw, json) Hash identifier: vbuKi8FurjJqLrIH/nKXzrwF4w066mv+FtsTC8UgOWQ= Subject key identifier: 46:84:D2:2C:31:EC:A3:13:6C:D5:AB:8C:E1:A4:6C:27:6C:0F:71:9D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DA81592185689676B811BCF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfabafe3-7463-3fa8-8663-620bcced1c28.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 30036 IP address blocks: 173.17.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:92:18:56:89:67:6b:81:1b:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=a8d990db-93d9-4f5d-a8d6-a57dbe744024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5d:6c:dc:4d:25:e5:18:77:f5:cd:5f:f9:2f: 4e:03:08:a5:81:2a:80:0a:56:a4:ff:7b:ef:f4:d3: 28:d9:ee:69:98:14:21:98:39:4f:83:38:bc:26:54: 23:68:31:ff:12:0a:ff:9a:f8:e4:a2:85:fb:ae:f7: 96:39:87:6f:df:df:6d:35:f4:33:02:f4:78:97:bc: cf:cf:76:db:22:c3:d4:fd:08:fd:59:59:6f:f0:30: ea:06:b6:46:bc:de:f5:5d:bc:7b:ec:c4:da:80:c8: 2d:7d:70:b4:cd:d0:cb:97:08:d0:3e:25:b6:60:34: 09:c8:c7:77:06:5a:3c:79:2f:b6:17:fa:d1:bd:e7: 76:01:f1:8e:aa:4f:60:14:19:fc:b6:0a:f9:0d:61: 96:9d:2e:5b:aa:1a:5d:9c:33:92:dd:e6:3d:50:b5: 24:a8:6b:a3:d1:ce:66:42:98:8f:cf:52:9a:52:27: f4:53:b3:53:a5:56:b9:e3:42:d5:c2:0f:79:3e:45: 6f:45:0c:e0:c3:18:2c:2f:6a:e9:00:7e:5e:1b:6a: 7b:de:24:28:04:73:62:52:de:7f:5a:b7:24:e4:50: ba:c3:9d:99:c8:f5:8e:83:e0:27:ed:07:63:57:5d: 61:14:dc:3e:65:9d:55:98:96:03:a5:eb:b2:a7:1d: 55:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:84:D2:2C:31:EC:A3:13:6C:D5:AB:8C:E1:A4:6C:27:6C:0F:71:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cfabafe3-7463-3fa8-8663-620bcced1c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:af:51:34:0a:d5:f6:14:70:d3:ee:2a:58:f4:96:ed:37:30: b4:50:20:6f:a8:5e:f4:c5:7f:41:5d:77:3a:e9:94:cb:07:66: da:86:f1:f2:dc:d4:c8:d5:5a:f5:b6:26:b3:27:e6:04:82:3b: 91:e8:e9:17:40:d2:e8:1b:ef:02:2c:10:5a:02:bc:70:3f:bb: 62:60:d5:01:b4:9d:79:2f:a4:08:ef:df:4d:04:fa:ac:32:58: 95:15:aa:d9:0d:08:1b:57:9f:ea:3d:25:1c:c6:ea:8b:de:bb: 17:e2:19:f1:d8:7c:d7:8c:a8:f8:77:33:41:8f:66:ad:67:80: f6:c1:4f:35:10:bf:b5:82:38:66:8f:7a:7f:75:b1:c5:7a:98: c7:b9:6d:c3:dd:fa:a8:67:24:91:99:24:d9:3e:72:2d:18:e3: 88:f9:d7:73:8c:af:5c:da:b9:80:0a:30:06:8d:22:f4:3b:a3: 7a:ea:24:c6:a5:5f:12:6c:dc:57:e7:84:fb:ff:74:f3:1a:b0: 8e:da:65:0b:71:eb:6e:2a:cb:8e:ca:72:6a:92:8b:23:c7:56: 27:d8:66:5e:f9:8a:82:be:2e:c2:02:b8:37:01:b8:2f:a3:8b: 17:81:aa:92:c6:e3:43:36:f7:0a:e1:2c:76:dc:5e:40:84:ec: 01:88:be:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFZIYVolna4EbzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk YThkOTkwZGItOTNkOS00ZjVkLWE4ZDYtYTU3ZGJlNzQ0MDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF1s3E0l5Rh39c1f+S9OAwilgSqAClak/3vv 9NMo2e5pmBQhmDlPgzi8JlQjaDH/Egr/mvjkooX7rveWOYdv399tNfQzAvR4l7zP z3bbIsPU/Qj9WVlv8DDqBrZGvN71Xbx77MTagMgtfXC0zdDLlwjQPiW2YDQJyMd3 Blo8eS+2F/rRved2AfGOqk9gFBn8tgr5DWGWnS5bqhpdnDOS3eY9ULUkqGuj0c5m QpiPz1KaUif0U7NTpVa540LVwg95PkVvRQzgwxgsL2rpAH5eG2p73iQoBHNiUt5/ Wrck5FC6w52ZyPWOg+An7QdjV11hFNw+ZZ1VmJYDpeuypx1V7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaE0iwx7KMTbNWrjOGkbCdsD3GdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ZhYmFmZTMtNzQ2My0z ZmE4LTg2NjMtNjIwYmNjZWQxYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrREYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFevUTQK1fYUcNPuKlj0lu03MLRQIG+oXvTFf0FddzrplMsHZtqG8fLc 1MjVWvW2JrMn5gSCO5Ho6RdA0ugb7wIsEFoCvHA/u2Jg1QG0nXkvpAjv300E+qwy WJUVqtkNCBtXn+o9JRzG6oveuxfiGfHYfNeMqPh3M0GPZq1ngPbBTzUQv7WCOGaP en91scV6mMe5bcPd+qhnJJGZJNk+ci0Y44j513OMr1zauYAKMAaNIvQ7o3rqJMal XxJs3FfnhPv/dPMasI7aZQtx624qy47KcmqSiyPHVifYZl75ioK+LsICuDcBuC+j ixeBqpLG40M29wrhLHbcXkCE7AGIvqk= -----END CERTIFICATE-----Generated at Fri May 8 19:32:51 2026 by rpki-client