$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e0b4933-96a8-3045-9cc4-034ba229beeb.roa File: 3e0b4933-96a8-3045-9cc4-034ba229beeb.roa (raw, json) Hash identifier: TDRJ9EFYPZlUMBgEzzl19NiNgvMllFLfNqrWTh93lzw= Subject key identifier: A6:A4:F5:80:22:C0:BC:E0:0A:D7:E3:CD:21:E8:ED:7E:2C:6E:C7:75 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497368334266D1BED93E1640 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e0b4933-96a8-3045-9cc4-034ba229beeb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.20.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:68:33:42:66:d1:be:d9:3e:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7681c1fb-9832-41ab-934c-58edc11f5da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:da:fe:25:89:2d:0a:98:de:2c:a7:80:89: 51:56:65:df:1b:07:86:2e:03:81:fc:08:38:41:a4: f3:88:55:41:63:2d:de:d5:f6:9f:30:4b:46:2a:72: ba:2d:99:a3:17:ae:a6:6a:26:7c:a3:2c:a3:5f:cd: 65:7b:32:fc:a4:04:c2:e6:6b:57:6f:92:57:92:97: c8:9f:f1:17:26:89:a9:fc:6b:04:8d:d9:24:ac:89: 86:f1:bc:ba:f1:00:dd:bf:f1:f3:6a:81:2d:f4:16: 4a:a8:49:b1:53:d1:05:a7:c7:2b:8f:8a:39:4b:b6: 30:c2:fe:c9:67:f5:f7:8c:f4:d1:41:d8:43:d0:44: c6:26:ac:48:75:91:18:b5:e0:cb:34:c7:5b:9a:02: 0b:03:7e:97:75:80:c8:05:32:f5:78:a8:9f:0a:83: 57:7f:c6:01:31:82:35:a8:e6:31:0e:e6:8b:53:e7: 2f:07:11:37:a8:07:0a:57:6a:3e:96:7c:b2:37:6f: 5d:19:9a:24:34:44:a7:54:30:ea:6a:fa:cb:64:8e: 2c:2d:6f:06:db:df:22:a0:b1:23:47:21:6f:40:0e: b9:17:25:77:37:c6:e0:63:a3:5a:17:21:0d:b6:b4: 5a:75:ef:43:e9:b6:02:3d:bf:57:77:aa:0b:81:17: 00:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A4:F5:80:22:C0:BC:E0:0A:D7:E3:CD:21:E8:ED:7E:2C:6E:C7:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e0b4933-96a8-3045-9cc4-034ba229beeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:42:da:1a:73:37:f7:14:da:45:56:7e:62:45:79:be:c3:41: 25:bc:12:8b:b2:2e:7f:c8:b1:02:1c:9a:15:62:72:7d:5d:e9: dc:9b:c3:e0:1e:4a:96:e6:f2:e7:b9:b2:18:5d:dd:0d:38:96: 09:90:46:71:03:72:c5:8d:8b:1d:fa:e7:a5:45:5d:a0:3e:85: 6d:43:34:5d:59:8e:91:53:02:95:53:1e:ca:dd:37:ca:04:69: 90:49:a7:91:50:2f:d4:e4:40:32:73:98:d1:a2:b9:54:c9:52: c7:51:06:d9:21:76:85:ca:be:6a:89:44:54:4c:b3:3e:96:15: d5:64:e7:32:f3:d4:e5:a0:99:7a:12:5c:8c:bd:0c:eb:f9:94: bb:a8:29:a5:e6:b1:fc:70:5b:11:e0:81:55:42:cc:ec:e1:d6: c8:72:20:3b:42:a5:f0:bb:ae:4c:01:b1:ee:dc:11:3f:7d:66: 97:db:ab:e7:3a:c5:88:ec:c7:87:6a:f4:86:21:bb:7e:e8:ae: a2:ba:5e:77:cb:9f:c2:a4:9e:2b:ca:c7:78:2c:cc:b7:d4:a2: 2c:5e:52:b5:44:5b:bf:5f:f5:9d:bc:77:d8:5e:26:0b:17:5a: b8:0a:f0:6c:e2:91:a4:d6:d6:58:c6:d2:a9:13:41:6d:f6:b2: 13:55:1b:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2gzQmbRvtk+FkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzY4MWMxZmItOTgzMi00MWFiLTkzNGMtNThlZGMxMWY1ZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNLa/iWJLQqY3iyngIlRVmXfGweGLgOB/Ag4 QaTziFVBYy3e1fafMEtGKnK6LZmjF66maiZ8oyyjX81lezL8pATC5mtXb5JXkpfI n/EXJomp/GsEjdkkrImG8by68QDdv/HzaoEt9BZKqEmxU9EFp8crj4o5S7Ywwv7J Z/X3jPTRQdhD0ETGJqxIdZEYteDLNMdbmgILA36XdYDIBTL1eKifCoNXf8YBMYI1 qOYxDuaLU+cvBxE3qAcKV2o+lnyyN29dGZokNESnVDDqavrLZI4sLW8G298ioLEj RyFvQA65FyV3N8bgY6NaFyENtrRade9D6bYCPb9Xd6oLgRcA7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKak9YAiwLzgCtfjzSHo7X4sbsd1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2UwYjQ5MzMtOTZhOC0z MDQ1LTljYzQtMDM0YmEyMjliZWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdC2hpzN/cU2kVWfmJFeb7DQSW8EouyLn/IsQIcmhVicn1d6dybw+Ae Spbm8ue5shhd3Q04lgmQRnEDcsWNix3656VFXaA+hW1DNF1ZjpFTApVTHsrdN8oE aZBJp5FQL9TkQDJzmNGiuVTJUsdRBtkhdoXKvmqJRFRMsz6WFdVk5zLz1OWgmXoS XIy9DOv5lLuoKaXmsfxwWxHggVVCzOzh1shyIDtCpfC7rkwBse7cET99Zpfbq+c6 xYjsx4dq9IYhu37orqK6XnfLn8KknivKx3gszLfUoixeUrVEW79f9Z28d9heJgsX WrgK8GzikaTW1ljG0qkTQW32shNVG7E= -----END CERTIFICATE-----Generated at Fri Sep 25 21:48:19 2026 by rpki-client