$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e1e94a2-2502-3efb-857c-6e92be424fd7.roa File: 2e1e94a2-2502-3efb-857c-6e92be424fd7.roa (raw, json) Hash identifier: nKT2QE4oglhyot6CJBTWF3pWxW0bOKHBrWtG9semlLk= Subject key identifier: C1:A3:CC:9D:71:3D:84:78:F5:56:A8:E2:FB:85:3B:D7:70:64:1E:29 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498B106963E367C39FDF7F60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e1e94a2-2502-3efb-857c-6e92be424fd7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.20.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:10:69:63:e3:67:c3:9f:df:7f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9173f9bc-8e9a-4f34-bda4-552190e7b95e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ef:38:69:90:90:38:ab:c6:74:ae:0c:a4:dc: 3e:ed:d4:ad:87:ea:cc:74:c6:08:05:67:e3:6c:b2: 22:91:55:84:18:8e:56:7e:33:4c:98:d3:a7:db:c4: a3:39:8f:69:91:05:96:f3:28:34:b9:96:69:10:01: 23:a0:76:06:d1:cb:11:2b:14:b7:31:01:ea:bd:62: d3:02:44:c0:62:8c:c4:0b:b0:f6:42:26:b4:3a:ef: 46:43:aa:d2:67:81:f6:e4:07:fa:86:26:d6:59:bd: 85:bb:d6:d3:b2:8e:d9:94:2a:6b:32:89:f5:0b:0e: 6a:11:c5:02:0c:14:e3:9d:db:bb:a9:65:c0:c5:cc: 50:63:3e:cd:8a:d4:ee:b5:c6:98:89:57:ca:df:1a: 68:4d:8a:16:a3:c5:49:0c:2a:17:2c:10:d6:97:57: 94:f1:bb:ce:01:f2:21:58:b9:24:51:cf:91:6a:34: 6b:3e:a2:a4:08:9b:b4:e5:0a:05:a2:c9:5f:fd:bb: a5:3e:f9:01:ba:ec:86:2d:83:bd:cd:08:6e:5d:d2: 46:8f:42:ea:c8:9e:c4:b9:1a:c0:9b:46:d0:7e:1f: e9:58:5c:9a:42:02:23:e4:f8:98:9f:ca:df:3b:12: ee:2c:2d:40:22:a1:59:11:2a:1b:56:4a:cc:4f:d4: 43:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A3:CC:9D:71:3D:84:78:F5:56:A8:E2:FB:85:3B:D7:70:64:1E:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e1e94a2-2502-3efb-857c-6e92be424fd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:4e:80:e8:4e:49:0f:73:ae:ac:a2:7a:1f:37:20:f3:bc:be: 1d:3d:84:41:f2:72:88:2c:ab:c7:11:42:b9:e0:42:91:5c:70: 67:77:ea:fd:8d:5c:0a:da:57:ad:90:a2:49:36:98:89:fb:6f: e0:f0:aa:81:a5:45:45:a5:82:ff:ae:a8:9c:45:8a:57:80:dc: b9:97:45:65:c9:ab:05:06:af:d5:3c:b9:8c:99:b9:0a:11:70: e3:74:7e:b3:87:7a:6e:1a:39:51:90:9b:5d:a2:16:83:8b:f3: 57:e2:2b:e7:f5:81:e6:8e:01:16:88:c1:ee:c1:de:b8:66:71: 23:17:04:57:13:1e:cf:49:2a:7f:70:ef:06:eb:42:9c:ab:76: 93:f3:71:a7:a5:85:79:5a:db:a6:51:a9:fd:55:f7:23:99:42: 56:c6:00:d5:31:c8:58:49:40:65:3e:10:23:68:34:2a:90:2f: 70:d8:bd:1a:bd:37:45:94:06:33:ec:a7:10:cd:d6:b7:47:d6: f1:76:0d:13:c7:ae:cb:21:da:a8:18:0e:b7:dc:95:1a:f3:26: 5e:55:72:79:c0:c6:fc:2e:ed:c1:ab:0b:7f:51:65:65:be:1d: 05:dd:33:a2:43:a5:25:16:8b:fa:23:f3:c1:24:49:ac:cc:6e: 50:c1:46:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JixBpY+Nnw5/ff2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTE3M2Y5YmMtOGU5YS00ZjM0LWJkYTQtNTUyMTkwZTdiOTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e84aZCQOKvGdK4MpNw+7dSth+rMdMYIBWfj bLIikVWEGI5WfjNMmNOn28SjOY9pkQWW8yg0uZZpEAEjoHYG0csRKxS3MQHqvWLT AkTAYozEC7D2Qia0Ou9GQ6rSZ4H25Af6hibWWb2Fu9bTso7ZlCprMon1Cw5qEcUC DBTjndu7qWXAxcxQYz7NitTutcaYiVfK3xpoTYoWo8VJDCoXLBDWl1eU8bvOAfIh WLkkUc+RajRrPqKkCJu05QoFoslf/bulPvkBuuyGLYO9zQhuXdJGj0LqyJ7EuRrA m0bQfh/pWFyaQgIj5PiYn8rfOxLuLC1AIqFZESobVkrMT9RDZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGjzJ1xPYR49Vao4vuFO9dwZB4pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmUxZTk0YTItMjUwMi0z ZWZiLTg1N2MtNmU5MmJlNDI0ZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlOgOhOSQ9zrqyieh83IPO8vh09hEHycogsq8cRQrngQpFccGd36v2N XAraV62Qokk2mIn7b+DwqoGlRUWlgv+uqJxFileA3LmXRWXJqwUGr9U8uYyZuQoR cON0frOHem4aOVGQm12iFoOL81fiK+f1geaOARaIwe7B3rhmcSMXBFcTHs9JKn9w 7wbrQpyrdpPzcaelhXla26ZRqf1V9yOZQlbGANUxyFhJQGU+ECNoNCqQL3DYvRq9 N0WUBjPspxDN1rdH1vF2DRPHrssh2qgYDrfclRrzJl5VcnnAxvwu7cGrC39RZWW+ HQXdM6JDpSUWi/oj88EkSazMblDBRl4= -----END CERTIFICATE-----Generated at Sat Sep 26 14:27:59 2026 by rpki-client