$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf38020-85dc-33fa-8296-a789f8c70a70.roa File: 0bf38020-85dc-33fa-8296-a789f8c70a70.roa (raw, json) Hash identifier: w/qScVzXW7Njvqyasfd48+RC+sg5kPlJ1EF6mkvlvA0= Subject key identifier: 13:D9:B3:20:92:D0:BD:B7:95:E4:A1:D6:D2:82:74:8F:F4:89:CE:54 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D6966EF581095BA742D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf38020-85dc-33fa-8296-a789f8c70a70.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.20.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:69:66:ef:58:10:95:ba:74:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1a14c687-eaee-46b7-a012-0b4cda08336a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:68:63:9e:2d:a1:ae:60:cc:e2:7a:a3:b6:d9: b1:d7:bf:75:ee:66:e7:fc:32:db:2f:23:3b:89:c3: 92:70:06:b6:a6:e7:3f:c6:cb:31:9f:d7:57:54:a5: 64:d1:89:58:e0:7e:14:2d:5f:17:8a:9b:f7:26:e2: 32:1d:01:6a:6a:e0:e9:32:05:22:ac:b9:c9:25:c6: 6d:18:57:84:92:cd:dd:65:23:08:b7:00:ed:d5:23: 52:6b:90:64:08:0a:9b:52:9e:58:ae:aa:b0:92:c6: 01:5f:a1:fa:4a:89:c5:e9:48:64:6d:66:77:4c:37: 7d:72:4a:71:5d:f7:79:ce:21:63:33:2c:5e:82:a6: c5:37:cc:0a:a7:e7:8c:9c:dc:07:59:76:96:d7:4c: 30:63:9a:44:da:8d:3d:67:1c:74:0d:c3:12:e8:f1: 77:ab:80:b7:84:54:4b:4e:73:c1:23:5c:12:97:6a: 67:01:30:8a:0f:75:b0:6b:16:20:cd:af:6b:e9:fa: 6f:f6:bf:c0:71:8c:30:51:dd:68:b3:6b:0a:25:4a: de:59:93:84:f1:ce:da:b1:36:9b:e7:da:9e:d7:21: 36:b5:b2:79:ad:50:0e:b8:79:0f:f1:ea:01:87:61: 1d:09:4f:a3:c9:12:40:7a:38:de:40:2b:81:00:05: 89:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D9:B3:20:92:D0:BD:B7:95:E4:A1:D6:D2:82:74:8F:F4:89:CE:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf38020-85dc-33fa-8296-a789f8c70a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:00:c5:d8:87:a4:29:a3:6a:06:b7:92:c8:2a:de:22:c5:64: 02:e5:fd:dc:44:bc:57:b8:f2:a0:8d:5f:48:1d:5b:2a:32:0e: e4:a3:c7:f0:f0:3c:7b:90:8b:db:4c:57:28:94:0b:d9:18:95: 20:b0:86:08:7b:76:45:70:e8:b5:ba:76:8d:d0:cb:14:2a:78: b6:1b:22:a5:c6:2c:7e:6b:28:a0:f0:f8:a0:07:87:81:9f:af: 18:df:e8:dd:99:85:bc:3f:5c:eb:30:43:56:11:8f:d2:c4:ca: b2:b3:b4:36:13:a9:6a:45:23:4b:54:96:65:74:74:b5:21:3e: 17:db:db:f0:7b:30:94:1c:0c:42:e2:be:95:2a:d9:1c:29:19: 23:fe:66:bb:59:e5:2c:8b:8d:f2:41:51:84:5f:02:db:af:8e: e0:df:fd:05:40:04:08:3e:08:d8:11:9f:3b:c3:8c:29:da:1e: 3d:4f:a1:60:f9:94:90:32:c4:16:22:56:2d:f1:bc:3e:41:2b: 3d:24:33:50:c6:19:b5:86:9b:8e:c1:b3:31:2f:a9:14:0d:84: 10:01:8e:33:a8:57:c0:38:3f:fb:a9:cf:d6:86:99:8c:62:d8: 91:d5:c7:2b:3b:d2:35:f4:12:df:76:44:25:c5:2b:84:9e:19: 4d:7e:00:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWlm71gQlbp0LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MWExNGM2ODctZWFlZS00NmI3LWEwMTItMGI0Y2RhMDgzMzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2hjni2hrmDM4nqjttmx17917mbn/DLbLyM7 icOScAa2puc/xssxn9dXVKVk0YlY4H4ULV8Xipv3JuIyHQFqauDpMgUirLnJJcZt GFeEks3dZSMItwDt1SNSa5BkCAqbUp5YrqqwksYBX6H6SonF6UhkbWZ3TDd9ckpx Xfd5ziFjMyxegqbFN8wKp+eMnNwHWXaW10wwY5pE2o09Zxx0DcMS6PF3q4C3hFRL TnPBI1wSl2pnATCKD3WwaxYgza9r6fpv9r/AcYwwUd1os2sKJUreWZOE8c7asTab 59qe1yE2tbJ5rVAOuHkP8eoBh2EdCU+jyRJAejjeQCuBAAWJHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPZsyCS0L23leSh1tKCdI/0ic5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGJmMzgwMjAtODVkYy0z M2ZhLTgyOTYtYTc4OWY4YzcwYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEAxdiHpCmjaga3ksgq3iLFZALl/dxEvFe48qCNX0gdWyoyDuSjx/Dw PHuQi9tMVyiUC9kYlSCwhgh7dkVw6LW6do3QyxQqeLYbIqXGLH5rKKDw+KAHh4Gf rxjf6N2Zhbw/XOswQ1YRj9LEyrKztDYTqWpFI0tUlmV0dLUhPhfb2/B7MJQcDELi vpUq2RwpGSP+ZrtZ5SyLjfJBUYRfAtuvjuDf/QVABAg+CNgRnzvDjCnaHj1PoWD5 lJAyxBYiVi3xvD5BKz0kM1DGGbWGm47BszEvqRQNhBABjjOoV8A4P/upz9aGmYxi 2JHVxys70jX0Et92RCXFK4SeGU1+AOM= -----END CERTIFICATE-----Generated at Sat Sep 26 04:47:45 2026 by rpki-client