$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/332a901a-1c51-3720-ac9c-6d1ab4b5deb0.roa File: 332a901a-1c51-3720-ac9c-6d1ab4b5deb0.roa (raw, json) Hash identifier: fQ+NQ2MktSK78v2IZbSoj+Ua68gTdW4AM8h4Q12Jp38= Subject key identifier: 26:F9:DD:F6:12:32:03:BA:62:D5:08:58:67:F4:C5:B9:58:58:CE:16 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F480D631CD0ACB3690E058E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/332a901a-1c51-3720-ac9c-6d1ab4b5deb0.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.20.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:63:1c:d0:ac:b3:69:0e:05:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=ef37a8a0-c9b9-46f0-82bb-cbadefc6d48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:67:8e:ad:15:4d:a3:dd:6c:d9:ea:9c:36:6b: 50:61:ba:df:c9:27:55:af:1c:df:fa:e1:27:30:ac: f0:9c:8c:49:02:2b:0d:5b:f2:aa:d9:c5:a7:b0:bc: ea:9f:51:60:19:7f:17:20:c8:90:0e:85:05:bb:08: 48:6a:e7:64:de:41:84:55:a9:48:19:06:39:ff:5e: 2b:ff:3a:97:55:23:d7:79:bf:00:25:f5:6f:2f:2c: 11:98:0b:a9:56:df:cc:19:e7:8c:3d:a9:98:6e:cd: 64:79:62:29:70:b5:fe:44:52:bf:24:79:81:0a:82: 1a:ef:4a:0b:07:9f:1c:8b:82:08:71:d1:a1:f7:01: 03:b0:e8:e4:64:09:85:a6:fd:3c:3f:0b:ee:07:33: d2:45:89:f8:10:10:83:b6:5a:a9:fd:74:60:b9:be: 80:9a:51:52:92:4d:70:40:87:96:26:48:78:d5:78: ee:cb:ad:22:04:a8:85:31:51:57:49:49:65:f2:a8: 8c:a7:1d:37:d8:89:4e:b1:72:19:23:e9:b3:01:6c: 23:ec:5d:2b:5f:3e:22:55:ca:64:9f:6b:c6:2e:f1: dd:80:ba:8e:f8:b4:60:9a:d2:56:2a:09:ea:15:63: 8e:bc:2a:97:a5:d7:25:18:28:7c:f6:b1:fd:8c:25: db:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F9:DD:F6:12:32:03:BA:62:D5:08:58:67:F4:C5:B9:58:58:CE:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/332a901a-1c51-3720-ac9c-6d1ab4b5deb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:e3:c8:13:b1:de:cd:78:e6:bd:2a:59:9b:3e:06:8e:77:ec: 77:2d:1e:3b:e1:56:e2:b6:fc:6a:ff:f4:4a:28:02:9c:89:62: 62:a4:f4:7f:aa:d8:68:11:b5:2d:87:1a:4e:4e:7a:5d:ee:7b: de:68:a3:38:0b:d6:4b:9b:46:91:33:46:88:9a:bd:d9:d7:91: bc:b1:15:6c:48:e7:d2:47:fd:61:28:7d:d3:0c:d2:96:ef:ae: 6c:a6:af:b5:96:2a:b8:77:55:f8:ea:3c:58:79:63:b1:84:a4: 67:c9:cb:81:12:7c:3d:2d:59:15:7e:6d:d2:ed:69:c4:69:c6: 76:39:cc:68:3d:58:01:31:7c:13:63:4a:a2:80:81:6e:44:95: e7:95:a4:30:f5:9f:7a:19:e1:be:eb:bf:f5:14:92:17:71:91: 91:97:92:3a:59:9e:4d:5f:6d:ed:70:93:8b:95:6d:fc:8d:7a: 19:26:be:d7:33:f6:57:1f:ba:e6:46:97:57:36:fa:ec:5d:2a: a8:0d:4a:4c:a4:96:e8:12:05:22:cd:dc:f4:cd:25:b6:9c:55: 9e:bd:46:ab:57:4b:41:2e:8e:0f:8d:14:80:81:f3:b4:5e:06: f9:79:fa:c0:8a:e7:1c:ce:d9:9f:86:d6:99:4c:fc:cd:31:fd: 4d:5f:9c:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWMc0KyzaQ4FjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZWYzN2E4YTAtYzliOS00NmYwLTgyYmItY2JhZGVmYzZkNDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmeOrRVNo91s2eqcNmtQYbrfySdVrxzf+uEn MKzwnIxJAisNW/Kq2cWnsLzqn1FgGX8XIMiQDoUFuwhIaudk3kGEValIGQY5/14r /zqXVSPXeb8AJfVvLywRmAupVt/MGeeMPamYbs1keWIpcLX+RFK/JHmBCoIa70oL B58ci4IIcdGh9wEDsOjkZAmFpv08PwvuBzPSRYn4EBCDtlqp/XRgub6AmlFSkk1w QIeWJkh41Xjuy60iBKiFMVFXSUll8qiMpx032IlOsXIZI+mzAWwj7F0rXz4iVcpk n2vGLvHdgLqO+LRgmtJWKgnqFWOOvCqXpdclGCh89rH9jCXbYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCb53fYSMgO6YtUIWGf0xblYWM4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzMyYTkwMWEtMWM1MS0z NzIwLWFjOWMtNmQxYWI0YjVkZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbjyBOx3s145r0qWZs+Bo537HctHjvhVuK2/Gr/9EooApyJYmKk9H+q 2GgRtS2HGk5Oel3ue95oozgL1kubRpEzRoiavdnXkbyxFWxI59JH/WEofdMM0pbv rmymr7WWKrh3VfjqPFh5Y7GEpGfJy4ESfD0tWRV+bdLtacRpxnY5zGg9WAExfBNj SqKAgW5EleeVpDD1n3oZ4b7rv/UUkhdxkZGXkjpZnk1fbe1wk4uVbfyNehkmvtcz 9lcfuuZGl1c2+uxdKqgNSkyklugSBSLN3PTNJbacVZ69RqtXS0Eujg+NFICB87Re Bvl5+sCK5xzO2Z+G1plM/M0x/U1fnPg= -----END CERTIFICATE-----Generated at Mon Oct 5 16:26:29 2026 by rpki-client