$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daff23a2-4a8d-3881-b578-bfa4060d3d09.roa File: daff23a2-4a8d-3881-b578-bfa4060d3d09.roa (raw, json) Hash identifier: 4SY8Jf898pbuPsXKwh7fa4ctBH7FtecUNh5jLgArvxo= Subject key identifier: E2:CA:65:42:23:BB:8B:80:BD:2D:F8:BA:11:54:FE:AA:A4:12:85:85 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DE9E3686492A5EA351998 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daff23a2-4a8d-3881-b578-bfa4060d3d09.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.17.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e9:e3:68:64:92:a5:ea:35:19:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=dd17f5a0-7301-44b9-8a13-9731d7a7dd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5a:53:aa:b7:f9:95:9f:0d:0d:39:c5:40:d5: 4d:4a:64:2d:e1:80:35:73:94:bf:18:38:c9:d3:e5: ee:1b:35:33:39:96:00:6a:20:52:8e:af:b9:74:60: 87:1a:c5:f4:e0:4a:de:23:a8:73:d5:d5:51:b9:2e: a7:be:50:17:e9:d7:98:c5:0d:a6:a8:4e:af:92:bf: a9:2c:b2:ff:3b:7c:c2:b9:a3:9c:ae:bb:d5:7b:f7: 9a:49:6e:6b:15:55:99:01:f6:ba:0a:67:37:e9:ee: ba:17:27:87:35:2e:cd:fe:27:2d:b8:18:9e:94:d8: 86:5f:07:a0:ab:55:51:a8:39:f4:a0:39:28:eb:3c: db:13:6f:44:79:d0:3e:4b:30:0f:cc:fe:83:a7:58: 5b:76:17:26:9e:5b:2e:cc:3f:85:57:8d:b7:94:25: c0:18:97:dd:6c:ea:da:0c:00:1f:38:ec:47:3f:4d: 1f:ba:fb:7c:ab:e9:fa:f5:68:92:f7:46:d6:79:4e: 66:5a:ca:b2:36:ca:e7:a2:4c:a5:a7:cb:32:d7:c0: 21:c7:a6:3f:cb:4c:42:14:6e:0d:38:ac:21:1d:1c: 48:1c:28:26:dd:31:ae:a0:cb:a5:8f:d3:70:83:9e: 04:e4:e8:8d:99:45:d0:77:cf:28:17:9f:5c:4d:e4: 7d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CA:65:42:23:BB:8B:80:BD:2D:F8:BA:11:54:FE:AA:A4:12:85:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daff23a2-4a8d-3881-b578-bfa4060d3d09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3f:65:fd:4e:ed:0b:23:3e:d8:56:48:38:d9:07:73:25:94: d1:5f:2c:3b:eb:c9:e7:b7:ee:a8:39:28:ba:71:5d:e8:ba:fb: c1:0c:05:62:09:a6:94:96:c7:37:02:06:00:d4:00:41:e0:a5: 83:9a:ef:d2:59:7a:06:7f:10:6a:8b:40:44:1a:09:10:28:a4: 2c:8d:98:8a:e9:75:5f:18:ed:7d:fe:df:93:f3:52:61:f8:31: ed:35:6d:97:95:7c:b6:bc:30:cb:43:42:ad:c3:51:1f:a4:0d: d8:13:d8:7f:48:1e:86:80:39:7c:56:20:bd:68:0a:5b:d2:6c: 63:c7:14:6b:e9:10:17:40:73:cd:5a:e5:63:b4:56:7c:a4:d4: 79:a9:99:23:b3:64:b3:e2:51:1c:3d:e5:f7:d0:5a:b8:8d:88: 37:b2:35:e4:ee:85:50:9e:0e:09:19:62:ba:69:4f:30:35:7b: 65:a1:9c:ce:64:d8:8d:b4:df:59:94:98:da:b8:4a:5a:a5:af: 8f:55:16:15:a4:a4:95:19:87:4d:ee:05:59:86:70:94:3c:b1: c3:c3:74:65:9a:9e:d3:89:67:55:9c:aa:fb:02:8a:7a:02:e8: 46:fd:43:40:66:73:18:9e:42:73:c5:8c:1b:15:e9:22:40:10: 6d:56:c2:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPenjaGSSpeo1GZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGQxN2Y1YTAtNzMwMS00NGI5LThhMTMtOTczMWQ3YTdkZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlpTqrf5lZ8NDTnFQNVNSmQt4YA1c5S/GDjJ 0+XuGzUzOZYAaiBSjq+5dGCHGsX04EreI6hz1dVRuS6nvlAX6deYxQ2mqE6vkr+p LLL/O3zCuaOcrrvVe/eaSW5rFVWZAfa6Cmc36e66FyeHNS7N/ictuBielNiGXweg q1VRqDn0oDko6zzbE29EedA+SzAPzP6Dp1hbdhcmnlsuzD+FV423lCXAGJfdbOra DAAfOOxHP00fuvt8q+n69WiS90bWeU5mWsqyNsrnokylp8sy18Ahx6Y/y0xCFG4N OKwhHRxIHCgm3TGuoMulj9Nwg54E5OiNmUXQd88oF59cTeR9QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLKZUIju4uAvS34uhFU/qqkEoWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGFmZjIzYTItNGE4ZC0z ODgxLWI1NzgtYmZhNDA2MGQzZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg/Zf1O7QsjPthWSDjZB3MllNFfLDvryee37qg5KLpxXei6+8EMBWIJ ppSWxzcCBgDUAEHgpYOa79JZegZ/EGqLQEQaCRAopCyNmIrpdV8Y7X3+35PzUmH4 Me01bZeVfLa8MMtDQq3DUR+kDdgT2H9IHoaAOXxWIL1oClvSbGPHFGvpEBdAc81a 5WO0Vnyk1HmpmSOzZLPiURw95ffQWriNiDeyNeTuhVCeDgkZYrppTzA1e2WhnM5k 2I2031mUmNq4Slqlr49VFhWkpJUZh03uBVmGcJQ8scPDdGWantOJZ1WcqvsCinoC 6Eb9Q0BmcxieQnPFjBsV6SJAEG1WwoM= -----END CERTIFICATE-----Generated at Sun Oct 11 14:39:24 2026 by rpki-client