$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0912f52b-1993-3b65-af93-553d90bb1b71.roa File: 0912f52b-1993-3b65-af93-553d90bb1b71.roa (raw, json) Hash identifier: qAM8LJ7FJW51yc72VBlEgCZg1G20P+Vd5cWShO/7+AU= Subject key identifier: 43:7A:7C:78:02:D8:06:27:27:86:04:7A:40:EF:A0:56:BC:3D:7A:17 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F331D2F08038573887E3A0D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0912f52b-1993-3b65-af93-553d90bb1b71.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 19905 IP address blocks: 173.20.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:2f:08:03:85:73:88:7e:3a:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=3d20413b-34f9-4d49-9655-be2081207b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6c:78:23:ee:74:cb:18:35:55:cc:7a:74:d5: a7:dd:73:b8:5c:be:f9:0b:da:96:7b:47:46:c2:28: 6a:d7:aa:4c:50:26:30:9d:9a:08:63:2a:a3:bb:8d: 0d:51:be:33:41:40:ba:49:0d:59:7d:fd:17:6b:9a: 95:b6:a3:73:c4:fc:d4:c2:cf:fd:12:de:55:3b:60: 4f:d8:d0:0e:64:89:21:fa:46:b3:a4:21:ce:c8:f0: 36:86:43:84:a6:96:8f:d4:0e:18:26:84:27:03:0e: ac:24:81:0a:05:99:15:24:f0:07:b6:1a:fd:e7:ee: 1b:65:b7:9d:ac:51:0a:c7:0d:75:1f:3e:6d:f1:3e: 23:b1:ec:ad:9f:a6:02:85:6e:9c:25:1d:c3:90:95: d7:f4:65:a1:4f:34:76:58:62:76:f4:a7:2c:5f:e1: 9b:c1:ea:d9:48:43:3b:e8:08:bf:bd:d1:2d:5d:d4: b0:ce:41:96:a9:b2:f0:d4:ab:7e:92:70:64:2c:ce: 51:7f:ea:85:41:ec:e7:bd:26:56:7f:2e:cd:b4:c2: 54:9c:05:f0:ef:4a:58:7b:27:f8:19:63:64:29:bd: a6:bb:6e:de:f4:dd:d0:69:b7:45:30:15:19:c7:a9: 7b:24:1e:be:43:2d:f0:eb:54:be:55:37:e5:c6:be: 15:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:7A:7C:78:02:D8:06:27:27:86:04:7A:40:EF:A0:56:BC:3D:7A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0912f52b-1993-3b65-af93-553d90bb1b71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:8e:1a:e5:06:26:b7:78:bb:3d:5d:6d:df:25:23:de:79:8e: 2a:27:78:24:5a:cd:86:71:74:39:06:8a:3d:6e:ee:6f:ba:c5: 62:f7:32:87:f1:f8:f5:08:6b:f6:e6:b9:96:10:56:64:11:91: b3:5e:82:f5:de:5e:dc:3b:6c:c6:30:c1:9f:bb:a8:41:69:c7: f6:c7:8f:43:c5:97:ce:8e:eb:b5:37:09:82:bd:0d:7e:80:23: 5b:b1:29:67:8e:67:0d:14:28:91:0f:01:b5:9a:63:30:95:65: 80:c9:c8:06:81:80:10:b5:8b:7f:22:a1:20:af:89:ca:e6:c4: 51:c3:f5:cb:ce:b8:83:12:d6:8e:96:79:41:d2:54:c7:9c:02: f9:c1:f3:0b:cb:84:5d:bf:cc:a9:f9:85:eb:b3:25:09:5e:0a: 23:a1:8d:60:7e:e0:3e:3e:27:88:de:9a:1d:99:e1:35:c3:15: ea:49:04:48:86:bf:24:72:8a:85:6d:4b:4c:08:1d:e9:1c:f6: 75:73:37:4b:74:a3:77:89:71:92:ec:8a:c7:94:d5:7a:8b:30: 7d:68:94:56:c9:28:08:38:e7:d0:3a:87:3f:49:48:31:27:2b: a0:bd:8c:b4:de:4e:a6:3e:47:13:36:b3:4d:3a:87:23:1a:28: ee:ee:07:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHS8IA4VziH46DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk M2QyMDQxM2ItMzRmOS00ZDQ5LTk2NTUtYmUyMDgxMjA3YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGx4I+50yxg1Vcx6dNWn3XO4XL75C9qWe0dG wihq16pMUCYwnZoIYyqju40NUb4zQUC6SQ1Zff0Xa5qVtqNzxPzUws/9Et5VO2BP 2NAOZIkh+kazpCHOyPA2hkOEppaP1A4YJoQnAw6sJIEKBZkVJPAHthr95+4bZbed rFEKxw11Hz5t8T4jseytn6YChW6cJR3DkJXX9GWhTzR2WGJ29KcsX+GbwerZSEM7 6Ai/vdEtXdSwzkGWqbLw1Kt+knBkLM5Rf+qFQeznvSZWfy7NtMJUnAXw70pYeyf4 GWNkKb2mu27e9N3QabdFMBUZx6l7JB6+Qy3w61S+VTflxr4VFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEN6fHgC2AYnJ4YEekDvoFa8PXoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDkxMmY1MmItMTk5My0z YjY1LWFmOTMtNTUzZDkwYmIxYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKOGuUGJrd4uz1dbd8lI955jioneCRazYZxdDkGij1u7m+6xWL3Mofx +PUIa/bmuZYQVmQRkbNegvXeXtw7bMYwwZ+7qEFpx/bHj0PFl86O67U3CYK9DX6A I1uxKWeOZw0UKJEPAbWaYzCVZYDJyAaBgBC1i38ioSCvicrmxFHD9cvOuIMS1o6W eUHSVMecAvnB8wvLhF2/zKn5heuzJQleCiOhjWB+4D4+J4jemh2Z4TXDFepJBEiG vyRyioVtS0wIHekc9nVzN0t0o3eJcZLsiseU1XqLMH1olFbJKAg459A6hz9JSDEn K6C9jLTeTqY+RxM2s006hyMaKO7uB7A= -----END CERTIFICATE-----Generated at Sun Sep 27 17:29:45 2026 by rpki-client