$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/12582702-1f69-366a-9a5e-1232ddb59e03.roa File: 12582702-1f69-366a-9a5e-1232ddb59e03.roa (raw, json) Hash identifier: d0C2FGBk9Cn3WWhI7OQ0zkR/gbE3jc0q6nUjEFCISRM= Subject key identifier: 23:00:D4:6B:E4:BF:2D:51:4F:31:5F:24:74:54:A6:A1:CF:39:1B:03 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974F6847C430DAA45666DC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/12582702-1f69-366a-9a5e-1232ddb59e03.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.20.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:f6:84:7c:43:0d:aa:45:66:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=60a71c92-c639-4126-9cb2-18cf6fee28ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e5:9b:8c:21:53:7b:9d:36:b1:cb:69:d8:af: f1:52:50:26:f3:8a:36:fe:87:85:07:7a:a8:75:8d: e2:60:0c:7f:a0:52:3a:8c:de:b1:b5:0a:89:09:b6: 7f:a5:d1:91:99:50:8d:bd:86:df:48:35:87:10:f9: f9:e0:05:74:8f:ca:a9:a7:4f:24:2b:bc:9c:db:ac: 5c:6c:b3:56:c3:a0:76:ef:57:55:f6:a2:e1:d5:0b: bc:ec:44:b3:c8:fc:2f:01:4f:4b:24:51:36:1d:ec: c5:46:38:fa:b6:34:03:55:00:d0:8d:7b:61:bc:f7: 8e:75:72:1e:fb:b4:9a:61:14:57:d6:2f:a0:1a:d1: 23:42:46:6e:72:c8:c0:7f:f3:d8:06:7a:6b:41:2f: 43:98:ab:ee:61:c1:d8:a4:8d:5f:72:0a:7c:9d:66: 58:71:34:92:33:0c:b4:28:de:4c:44:46:c3:08:67: 63:d6:78:98:b1:1e:c2:10:f4:90:69:8b:f8:4f:8f: 55:36:6d:0b:08:d6:ca:53:41:af:66:24:07:1c:46: 4c:20:76:66:99:13:49:bf:e9:86:0d:85:12:3d:05: b7:6a:d8:b4:b5:be:2b:73:8a:9a:a1:01:b7:3f:d5: d5:a2:b8:d0:09:0c:88:c5:08:e0:a8:75:cf:b4:d4: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:00:D4:6B:E4:BF:2D:51:4F:31:5F:24:74:54:A6:A1:CF:39:1B:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/12582702-1f69-366a-9a5e-1232ddb59e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:c5:4e:5b:4a:7e:f3:88:e2:20:d4:22:c4:a9:5b:0f:c5:e6: e8:f7:15:cc:d3:2e:9a:dd:8f:07:04:6e:05:1b:86:0f:55:a2: 55:47:6b:a5:5e:4f:75:8d:d1:73:20:93:15:2f:ce:59:b8:b7: fc:9f:3c:e9:ce:50:0b:19:4e:38:d8:65:4b:03:d6:5e:c6:3d: ca:bf:6a:8b:08:20:9c:c9:b5:26:22:4b:97:6c:fc:88:8c:b1: e2:be:ba:fa:11:e2:0d:65:8d:23:41:84:4f:0a:98:4c:26:49: 0e:72:60:5b:dc:56:e6:3e:4a:5e:7c:14:c4:ed:75:5c:8f:74: 2d:82:6e:4a:e1:d9:ae:f5:71:f3:5f:d5:4b:ed:5b:74:70:14: 1c:89:4f:92:1a:43:66:b2:4b:a5:bb:ca:24:21:a9:b3:e7:7b: bd:b0:3f:52:31:cc:25:1a:49:b1:d7:83:ec:b1:80:9c:cc:76: a7:fa:ac:b5:1d:14:ee:a0:a1:55:cf:70:93:05:67:ad:98:b9: 2e:e5:76:e6:31:96:a9:a0:f7:db:f8:2d:e1:d6:d9:02:2b:f0: a9:6e:f3:7c:aa:73:15:5a:d6:f8:fb:d3:2c:22:de:1a:9e:66: 07:ff:85:1b:4d:99:d4:c3:b4:f8:d7:68:32:af:44:66:02:f2: bd:37:7d:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdPaEfEMNqkVmbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjBhNzFjOTItYzYzOS00MTI2LTljYjItMThjZjZmZWUyOGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uWbjCFTe502sctp2K/xUlAm84o2/oeFB3qo dY3iYAx/oFI6jN6xtQqJCbZ/pdGRmVCNvYbfSDWHEPn54AV0j8qpp08kK7yc26xc bLNWw6B271dV9qLh1Qu87ESzyPwvAU9LJFE2HezFRjj6tjQDVQDQjXthvPeOdXIe +7SaYRRX1i+gGtEjQkZucsjAf/PYBnprQS9DmKvuYcHYpI1fcgp8nWZYcTSSMwy0 KN5MREbDCGdj1niYsR7CEPSQaYv4T49VNm0LCNbKU0GvZiQHHEZMIHZmmRNJv+mG DYUSPQW3ati0tb4rc4qaoQG3P9XVorjQCQyIxQjgqHXPtNSjHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMA1Gvkvy1RTzFfJHRUpqHPORsDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTI1ODI3MDItMWY2OS0z NjZhLTlhNWUtMTIzMmRkYjU5ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPFTltKfvOI4iDUIsSpWw/F5uj3FczTLprdjwcEbgUbhg9VolVHa6Ve T3WN0XMgkxUvzlm4t/yfPOnOUAsZTjjYZUsD1l7GPcq/aosIIJzJtSYiS5ds/IiM seK+uvoR4g1ljSNBhE8KmEwmSQ5yYFvcVuY+Sl58FMTtdVyPdC2Cbkrh2a71cfNf 1UvtW3RwFByJT5IaQ2ayS6W7yiQhqbPne72wP1IxzCUaSbHXg+yxgJzMdqf6rLUd FO6goVXPcJMFZ62YuS7lduYxlqmg99v4LeHW2QIr8Klu83yqcxVa1vj70ywi3hqe Zgf/hRtNmdTDtPjXaDKvRGYC8r03fUs= -----END CERTIFICATE-----Generated at Sun Sep 27 04:48:27 2026 by rpki-client