$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa File: 28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa (raw, json) Hash identifier: JAqQFHDIFieZxltzYdfDdG1GtEGAGBiQ0rftjy6uT+I= Subject key identifier: F0:B3:5E:3F:34:30:01:8B:2D:F3:9B:EA:89:40:39:20:5E:A0:54:8B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D3A585BCDCDEFB7726E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.20.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:3a:58:5b:cd:cd:ef:b7:72:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a4a36ca5-a167-4d91-8f86-a7307a2beba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:91:f5:d3:82:04:ab:67:eb:3d:f2:2d:2c:74: d6:41:26:e9:07:0c:10:97:26:68:45:09:98:ea:7b: d8:f7:58:b8:1e:44:15:ca:d5:10:f4:0b:0d:8a:0c: 0e:cf:a3:c2:55:9c:63:09:1d:cb:a0:07:f0:18:fc: 05:29:46:62:29:bc:d5:a7:9c:44:95:fc:08:ca:cb: c5:90:fe:12:43:0a:a8:49:2c:11:f7:36:25:bf:65: e9:da:88:ad:61:49:35:6a:39:92:4a:7c:52:5c:0f: 09:99:d1:81:e5:67:cf:28:65:62:2b:c5:81:f6:73: 66:75:f0:1b:f2:48:ea:79:f3:1f:77:e3:cc:8f:3d: 57:c4:bf:b5:d0:fd:23:c6:b0:93:b0:55:a3:16:11: 48:9d:1c:c5:35:85:49:89:af:b1:0f:9c:b7:a9:a1: 32:7d:40:56:54:c9:aa:61:03:fa:ba:ea:28:63:4c: 4c:0d:8b:c3:ae:d6:c5:13:10:ef:68:59:dd:b7:62: 2a:f5:d7:f1:84:dc:d7:51:9d:e4:5e:1f:1a:c6:23: 57:7a:e3:2c:53:75:5f:c0:87:6a:0c:86:63:02:2f: 2c:3d:d9:14:4e:3f:e3:af:12:2a:35:88:82:27:d2: 00:6f:d9:b2:95:fb:b6:35:94:4f:88:3e:0b:aa:ea: aa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B3:5E:3F:34:30:01:8B:2D:F3:9B:EA:89:40:39:20:5E:A0:54:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:82:c5:e8:5f:e7:b3:40:be:00:9e:73:13:ab:0e:e7:ce:c2: 64:ba:3c:31:89:bd:63:c9:c1:ab:46:40:17:96:90:61:64:2f: 9d:4a:0b:f9:20:9d:69:89:5d:67:e4:4c:89:fb:d3:ec:c4:35: f3:8f:eb:35:01:df:6d:07:58:56:24:5d:b2:1f:f0:c2:e6:d4: b7:f0:df:92:7c:54:e7:af:2d:a7:36:fb:45:3a:89:d6:96:b0: 76:02:dd:fc:31:01:75:de:39:bd:01:85:ec:f0:9b:aa:8f:41: 5f:a9:8c:19:c8:22:92:87:7d:5c:95:40:e9:ab:1e:85:75:59: cb:50:59:c4:14:8f:9b:8e:5b:16:75:d5:77:31:cd:a3:43:9e: 31:93:63:56:6d:e6:1b:50:1b:fb:eb:87:6f:8b:e2:e0:3d:0a: c6:ba:d9:02:c4:cf:5c:9b:51:1e:68:95:be:da:f9:5e:2e:2a: eb:e3:8f:4b:0e:8e:94:d2:73:83:c4:4b:a0:b1:6d:a4:e1:45: 33:27:6c:d0:60:5b:de:7c:0a:ea:69:0f:d5:ea:aa:a0:3b:dc: 16:6b:30:49:47:6c:25:3a:16:c7:a8:17:8c:3a:b3:eb:8d:57: 22:32:fa:53:6e:1a:00:3e:1b:ca:7f:68:3d:34:2a:fb:3d:b4: e2:23:39:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPTpYW83N77dyboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTRhMzZjYTUtYTE2Ny00ZDkxLThmODYtYTczMDdhMmJlYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpH104IEq2frPfItLHTWQSbpBwwQlyZoRQmY 6nvY91i4HkQVytUQ9AsNigwOz6PCVZxjCR3LoAfwGPwFKUZiKbzVp5xElfwIysvF kP4SQwqoSSwR9zYlv2Xp2oitYUk1ajmSSnxSXA8JmdGB5WfPKGViK8WB9nNmdfAb 8kjqefMfd+PMjz1XxL+10P0jxrCTsFWjFhFInRzFNYVJia+xD5y3qaEyfUBWVMmq YQP6uuooY0xMDYvDrtbFExDvaFndt2Iq9dfxhNzXUZ3kXh8axiNXeuMsU3VfwIdq DIZjAi8sPdkUTj/jrxIqNYiCJ9IAb9mylfu2NZRPiD4Lquqq3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCzXj80MAGLLfOb6olAOSBeoFSLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjhlN2QyNjgtMjZiZC0z YmI4LWIxYzMtODFmYTI3MThhMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKCxehf57NAvgCecxOrDufOwmS6PDGJvWPJwatGQBeWkGFkL51KC/kg nWmJXWfkTIn70+zENfOP6zUB320HWFYkXbIf8MLm1Lfw35J8VOevLac2+0U6idaW sHYC3fwxAXXeOb0Bhezwm6qPQV+pjBnIIpKHfVyVQOmrHoV1WctQWcQUj5uOWxZ1 1XcxzaNDnjGTY1Zt5htQG/vrh2+L4uA9Csa62QLEz1ybUR5olb7a+V4uKuvjj0sO jpTSc4PES6CxbaThRTMnbNBgW958CuppD9XqqqA73BZrMElHbCU6FseoF4w6s+uN VyIy+lNuGgA+G8p/aD00Kvs9tOIjOQk= -----END CERTIFICATE-----Generated at Tue Sep 29 15:23:06 2026 by rpki-client