$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d51d1d3-c4c0-3dd8-992c-07c1997a78ff.roa File: 2d51d1d3-c4c0-3dd8-992c-07c1997a78ff.roa (raw, json) Hash identifier: qF/mL40NUQWNzCs8JW1R2gTvJWLxTuLpeqY26U07Mu4= Subject key identifier: B1:AB:88:43:6F:33:A8:DA:A9:53:28:17:6C:5F:70:64:B1:98:4D:E7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D6181FA6822E4E9022100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d51d1d3-c4c0-3dd8-992c-07c1997a78ff.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.20.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:61:81:fa:68:22:e4:e9:02:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=bd58ed20-3bd8-40e2-a1be-e76e9e2391fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a8:e4:5d:72:79:b3:b0:69:5f:30:49:59:9f: cf:e7:9f:69:b0:e6:9e:8c:94:38:f8:5f:f8:69:03: e0:43:8b:a0:a3:43:77:7c:ea:13:85:12:48:59:29: ca:c6:21:2d:f5:88:97:4a:5e:c7:fc:22:0a:ed:9c: ab:67:46:c6:a4:03:81:69:03:7d:8d:fa:5e:50:9e: 12:19:58:b8:79:0e:34:99:c9:d2:f0:87:bc:23:43: 7c:d5:5c:ea:d9:1c:6e:d5:98:c6:ce:56:30:b5:a0: 5c:68:56:57:5d:c9:81:28:9e:4d:e5:53:1b:aa:b1: 55:7c:48:bf:de:ab:28:16:ab:b9:3a:f7:8e:19:3b: 6f:d8:09:e0:c3:27:1b:85:84:33:1e:38:f2:41:26: 9d:7d:66:8b:f4:b3:86:f0:ed:fb:33:b3:b8:7e:4a: fe:f4:87:2d:82:71:a0:84:c1:87:ec:e9:ea:6f:d1: e5:cf:64:1b:e5:bc:39:81:5d:47:28:e2:94:af:38: 28:45:da:3c:e7:ba:e9:c9:15:38:2e:2b:aa:03:97: 6b:99:56:f7:05:5d:80:45:04:7d:53:67:b2:e1:64: 4a:db:b8:64:7b:d4:e9:f7:0e:9d:55:41:79:7c:bc: f9:35:fb:31:10:58:83:ca:43:4f:30:96:87:c0:71: f9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AB:88:43:6F:33:A8:DA:A9:53:28:17:6C:5F:70:64:B1:98:4D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d51d1d3-c4c0-3dd8-992c-07c1997a78ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:c5:c9:67:a4:22:01:b9:61:e9:81:c7:e0:61:4b:e4:9a:bf: 96:e0:53:b7:25:69:82:33:33:24:d1:15:9c:07:34:f4:c8:71: d2:72:c7:7c:4d:38:97:ee:b6:42:ea:f7:d2:ff:a3:3c:96:65: c5:5c:d0:de:73:34:1f:f9:b0:36:8e:df:03:a3:fa:4b:c7:52: 77:8c:37:ee:cc:c0:3f:b2:00:ef:ac:7b:ff:c9:bc:f7:67:a3: c8:1e:d9:97:55:cd:9e:09:2d:9d:5e:c6:72:c5:6a:48:7d:2f: 52:60:97:d2:93:7b:40:f5:3f:8a:13:8a:db:0e:d4:1a:7b:8e: 61:e0:ed:31:dc:a3:9d:52:14:c6:f7:2f:4d:97:c1:f4:4c:f7: e6:3b:3d:b5:a3:50:8b:9f:7a:c2:0b:06:6d:40:2f:c6:e9:5c: 16:ea:3c:79:80:04:bf:03:81:b5:50:0e:89:95:11:15:60:c4: 77:ea:e0:d8:2f:b5:74:5e:ca:ce:4d:66:65:39:bb:6d:00:dc: b9:fc:a4:13:71:88:13:b2:cf:e5:00:1b:9a:4d:52:f9:b9:d0: 4c:2c:e2:c2:5b:93:71:70:e0:bf:82:42:4f:59:e7:6d:8d:3d: ed:6a:2b:2e:9d:87:c2:37:42:12:d4:3d:af:cd:21:69:d9:c9: 60:02:c3:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWGB+mgi5OkCIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YmQ1OGVkMjAtM2JkOC00MGUyLWExYmUtZTc2ZTllMjM5MWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6jkXXJ5s7BpXzBJWZ/P559psOaejJQ4+F/4 aQPgQ4ugo0N3fOoThRJIWSnKxiEt9YiXSl7H/CIK7ZyrZ0bGpAOBaQN9jfpeUJ4S GVi4eQ40mcnS8Ie8I0N81Vzq2Rxu1ZjGzlYwtaBcaFZXXcmBKJ5N5VMbqrFVfEi/ 3qsoFqu5OveOGTtv2AngwycbhYQzHjjyQSadfWaL9LOG8O37M7O4fkr+9IctgnGg hMGH7Onqb9Hlz2Qb5bw5gV1HKOKUrzgoRdo857rpyRU4LiuqA5drmVb3BV2ARQR9 U2ey4WRK27hke9Tp9w6dVUF5fLz5NfsxEFiDykNPMJaHwHH5awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGriENvM6jaqVMoF2xfcGSxmE3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmQ1MWQxZDMtYzRjMC0z ZGQ4LTk5MmMtMDdjMTk5N2E3OGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArFyWekIgG5YemBx+BhS+Sav5bgU7claYIzMyTRFZwHNPTIcdJyx3xN OJfutkLq99L/ozyWZcVc0N5zNB/5sDaO3wOj+kvHUneMN+7MwD+yAO+se//JvPdn o8ge2ZdVzZ4JLZ1exnLFakh9L1Jgl9KTe0D1P4oTitsO1Bp7jmHg7THco51SFMb3 L02XwfRM9+Y7PbWjUIufesILBm1AL8bpXBbqPHmABL8DgbVQDomVERVgxHfq4Ngv tXReys5NZmU5u20A3Ln8pBNxiBOyz+UAG5pNUvm50Ews4sJbk3Fw4L+CQk9Z522N Pe1qKy6dh8I3QhLUPa/NIWnZyWACw3o= -----END CERTIFICATE-----Generated at Sun Sep 27 06:37:45 2026 by rpki-client