$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20a1f0dd-f241-3e13-8808-635340a4dfc4.roa File: 20a1f0dd-f241-3e13-8808-635340a4dfc4.roa (raw, json) Hash identifier: RPG2a2nb3/RqA5iU8+BvrA548MLpog0I7vSsoDiHO4g= Subject key identifier: 02:EC:BC:1D:14:21:19:42:5F:8F:6A:85:32:1C:2C:0A:7B:5A:8F:B4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498AD037999546B08DAACC60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20a1f0dd-f241-3e13-8808-635340a4dfc4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.18.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:d0:37:99:95:46:b0:8d:aa:cc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2a122cea-d4d3-41d4-90f8-58ffe3015265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0e:f9:24:a2:a1:b7:c2:9a:14:cc:b2:97:27: 41:cf:f3:77:80:da:12:47:4b:4c:b9:57:82:5f:0c: a3:0a:8c:57:16:b3:9f:3b:4b:88:07:3b:a8:a7:6c: 85:2b:16:13:62:af:1d:fc:82:b8:2a:38:5d:8e:51: 13:81:1d:17:cc:a6:15:a4:98:2b:23:5a:fb:88:b1: 85:a8:7b:03:ea:76:78:41:5b:59:52:e9:5d:5d:9e: 75:b6:a5:91:eb:2b:63:ba:36:94:14:b3:b3:5d:ae: 16:23:8f:ec:db:bc:d3:45:0e:85:0a:d8:24:67:8f: 1a:ff:e1:72:ff:a7:6a:2e:52:27:9f:3b:4f:74:21: 94:7c:80:5c:8a:99:30:c0:10:d3:ee:7d:19:d4:2d: ec:72:ee:27:3e:b8:78:23:d6:1a:c0:44:fb:3d:b7: 5f:7b:d1:ad:f7:c4:d4:05:27:4b:7e:4f:c5:8f:68: f1:02:85:41:41:61:8e:15:d0:58:a1:62:d1:db:00: 9a:2b:c9:c2:bf:80:a1:73:8e:09:6a:ba:17:80:0f: be:dd:c9:13:be:a7:24:9e:1e:d8:6a:dc:85:3a:72: a8:4b:01:6f:95:76:a0:3a:82:d3:7d:f5:b7:9c:f0: 96:54:c4:dc:47:46:5b:6a:d9:fd:22:15:da:bc:31: 05:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EC:BC:1D:14:21:19:42:5F:8F:6A:85:32:1C:2C:0A:7B:5A:8F:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20a1f0dd-f241-3e13-8808-635340a4dfc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:26:63:23:cd:da:01:75:f2:d4:b3:0a:e9:f1:0d:68:97:09: dc:28:55:ee:8c:d9:36:29:4c:33:b5:5f:0c:33:3f:4b:e2:3e: 07:5f:33:79:96:b5:11:9d:c3:ea:46:0b:a7:93:0a:dd:91:b2: de:25:00:b7:6e:0d:a0:c9:a8:b8:d4:ed:3a:e0:cb:a5:84:67: 51:a7:33:4a:65:03:f7:2d:73:e3:49:65:8d:82:48:06:53:85: 64:3f:5f:31:7d:21:97:d0:0b:04:05:87:db:6e:48:d5:cb:cf: 94:b0:12:51:46:1c:63:2d:5d:c7:05:4d:fa:22:a9:db:53:9e: 64:b9:82:0c:43:19:0b:5c:15:b9:25:f8:d9:f6:d1:fb:95:b7: e9:b7:f3:1c:b9:f1:9c:ce:9a:ee:a1:8e:03:68:b8:1c:ee:a0: 52:d8:0c:45:a8:b0:d7:d8:9e:b0:19:76:84:3b:98:88:e1:b4: b5:7f:d0:aa:9e:67:0d:64:61:33:6a:98:45:41:9b:ef:a0:3d: 0f:c3:af:16:3c:22:28:23:6f:d4:28:c1:82:76:93:50:f6:d8: fc:21:8c:0d:52:56:a1:90:8e:75:36:a6:89:51:1b:44:62:8f: 34:ec:41:ee:02:af:d9:81:d6:41:7b:96:bd:03:6d:f8:2a:79: d7:d0:52:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JitA3mZVGsI2qzGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmExMjJjZWEtZDRkMy00MWQ0LTkwZjgtNThmZmUzMDE1MjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw75JKKht8KaFMyylydBz/N3gNoSR0tMuVeC XwyjCoxXFrOfO0uIBzuop2yFKxYTYq8d/IK4KjhdjlETgR0XzKYVpJgrI1r7iLGF qHsD6nZ4QVtZUuldXZ51tqWR6ytjujaUFLOzXa4WI4/s27zTRQ6FCtgkZ48a/+Fy /6dqLlInnztPdCGUfIBcipkwwBDT7n0Z1C3scu4nPrh4I9YawET7Pbdfe9Gt98TU BSdLfk/Fj2jxAoVBQWGOFdBYoWLR2wCaK8nCv4Chc44JaroXgA++3ckTvqcknh7Y atyFOnKoSwFvlXagOoLTffW3nPCWVMTcR0Zbatn9IhXavDEFPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALsvB0UIRlCX49qhTIcLAp7Wo+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjBhMWYwZGQtZjI0MS0z ZTEzLTg4MDgtNjM1MzQwYTRkZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgmYyPN2gF18tSzCunxDWiXCdwoVe6M2TYpTDO1XwwzP0viPgdfM3mW tRGdw+pGC6eTCt2Rst4lALduDaDJqLjU7Trgy6WEZ1GnM0plA/ctc+NJZY2CSAZT hWQ/XzF9IZfQCwQFh9tuSNXLz5SwElFGHGMtXccFTfoiqdtTnmS5ggxDGQtcFbkl +Nn20fuVt+m38xy58ZzOmu6hjgNouBzuoFLYDEWosNfYnrAZdoQ7mIjhtLV/0Kqe Zw1kYTNqmEVBm++gPQ/DrxY8Iigjb9QowYJ2k1D22PwhjA1SVqGQjnU2polRG0Ri jzTsQe4Cr9mB1kF7lr0DbfgqedfQUmY= -----END CERTIFICATE-----Generated at Sun Oct 4 19:41:11 2026 by rpki-client