$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bb1cb5e-d3ac-3c3a-8cbd-e3152281f532.roa File: 0bb1cb5e-d3ac-3c3a-8cbd-e3152281f532.roa (raw, json) Hash identifier: 4++IHkWX8lIhvt3NzUNlPc5GOwMQF5j0nQUqZiBgeeg= Subject key identifier: F3:DB:D0:6A:06:29:6B:3B:49:23:A0:EB:E4:05:F1:34:FA:EA:EB:B3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4988B7E1584B67EC1AEB9680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bb1cb5e-d3ac-3c3a-8cbd-e3152281f532.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.20.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:b7:e1:58:4b:67:ec:1a:eb:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6699f415-579f-4793-8d62-349714233333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0b:19:56:b9:60:42:3a:6e:28:44:18:ef:4b: 34:e8:c6:7d:fc:35:37:74:31:26:62:bd:38:5c:ec: d1:69:9b:ca:1e:f1:de:47:63:e9:f5:b6:56:f0:cd: 4a:f7:b8:d9:db:7e:80:5a:7c:1f:56:4e:9d:14:56: 68:9b:5a:dc:4c:93:5c:7f:eb:61:71:28:a3:85:f8: 74:8e:0c:70:07:47:ee:48:4b:1b:1a:a5:42:c0:10: 8f:f0:9d:99:b8:93:a0:92:ee:25:f6:ea:59:88:6f: 4a:fc:e1:ae:69:d7:05:32:f6:84:34:61:4e:db:30: 61:98:11:26:cf:82:c2:fd:92:5e:09:91:dc:7b:a4: d7:ec:e4:4a:7b:a0:8f:03:00:a1:02:c2:1a:d3:64: ae:95:35:1b:7c:38:5c:0d:00:72:a4:00:08:d5:e0: bf:bc:0e:86:4a:cc:ce:76:37:b6:66:57:9e:81:89: 84:eb:2a:00:7c:c3:c7:0c:b1:31:e4:22:d2:32:28: d2:60:33:33:b6:3c:95:a4:b9:81:bc:35:60:58:59: 48:26:52:57:7e:a4:77:ba:51:20:d8:2a:5a:fd:ff: 75:0d:ed:96:9e:38:a6:d0:20:7b:1f:3c:4b:b0:a2: 87:f1:37:51:50:59:5c:6a:32:7d:80:b6:df:d2:08: 43:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DB:D0:6A:06:29:6B:3B:49:23:A0:EB:E4:05:F1:34:FA:EA:EB:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bb1cb5e-d3ac-3c3a-8cbd-e3152281f532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:01:99:6a:24:fb:f8:af:c5:8d:f6:08:04:2d:9e:1f:06:ec: 72:b4:5a:6d:83:c9:02:ee:ba:c2:19:17:62:98:f6:8e:47:ed: 45:0c:1f:80:d0:51:f0:98:ec:93:34:e1:a4:08:25:52:c3:45: b0:bd:8e:e7:da:6f:ed:73:71:8f:0d:47:3b:f5:8f:5e:00:1e: 94:8f:1b:9e:3e:b7:c1:68:9e:e3:a3:12:15:03:56:70:ac:22: 24:d0:69:e4:43:c7:94:7a:8e:8d:45:68:29:c2:ae:04:54:35: fe:1f:9e:ac:02:91:fa:1a:5a:a2:81:c2:31:d8:72:a0:41:9d: 90:df:b6:c0:4d:a8:7e:aa:93:02:6e:6f:9c:1e:02:29:91:eb: 30:e5:7c:a4:04:0a:cb:2e:7f:ce:b2:be:7e:48:df:9b:44:ac: 9f:0b:60:b4:8f:c1:7b:f3:49:91:56:3e:c1:d8:15:17:7d:5b: 42:8f:7c:db:7c:6e:ab:f8:52:39:66:38:1a:33:aa:65:f8:aa: 28:a3:47:56:a5:71:6b:d0:79:7b:b3:16:ab:61:a3:6a:64:b8: 13:b1:72:bc:83:84:35:5d:83:28:2b:b9:4d:2a:75:13:a2:3e: ec:4f:41:75:c9:5f:ff:9f:a9:9a:ad:47:7d:a8:5c:3c:bf:9b: 03:d8:28:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiLfhWEtn7BrrloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjY5OWY0MTUtNTc5Zi00NzkzLThkNjItMzQ5NzE0MjMzMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQsZVrlgQjpuKEQY70s06MZ9/DU3dDEmYr04 XOzRaZvKHvHeR2Pp9bZW8M1K97jZ236AWnwfVk6dFFZom1rcTJNcf+thcSijhfh0 jgxwB0fuSEsbGqVCwBCP8J2ZuJOgku4l9upZiG9K/OGuadcFMvaENGFO2zBhmBEm z4LC/ZJeCZHce6TX7ORKe6CPAwChAsIa02SulTUbfDhcDQBypAAI1eC/vA6GSszO dje2ZleegYmE6yoAfMPHDLEx5CLSMijSYDMztjyVpLmBvDVgWFlIJlJXfqR3ulEg 2Cpa/f91De2Wnjim0CB7HzxLsKKH8TdRUFlcajJ9gLbf0ghDrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPb0GoGKWs7SSOg6+QF8TT66uuzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGJiMWNiNWUtZDNhYy0z YzNhLThjYmQtZTMxNTIyODFmNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUBmWok+/ivxY32CAQtnh8G7HK0Wm2DyQLuusIZF2KY9o5H7UUMH4DQ UfCY7JM04aQIJVLDRbC9jufab+1zcY8NRzv1j14AHpSPG54+t8FonuOjEhUDVnCs IiTQaeRDx5R6jo1FaCnCrgRUNf4fnqwCkfoaWqKBwjHYcqBBnZDftsBNqH6qkwJu b5weAimR6zDlfKQECssuf86yvn5I35tErJ8LYLSPwXvzSZFWPsHYFRd9W0KPfNt8 bqv4UjlmOBozqmX4qiijR1alcWvQeXuzFqtho2pkuBOxcryDhDVdgygruU0qdROi PuxPQXXJX/+fqZqtR32oXDy/mwPYKIc= -----END CERTIFICATE-----Generated at Fri Sep 25 05:48:47 2026 by rpki-client