$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/432e200e-0f71-3d9d-b9bd-af77278240dc.roa File: 432e200e-0f71-3d9d-b9bd-af77278240dc.roa (raw, json) Hash identifier: qbvvz6DV47BpXrPj2e4tA8f+cnG4Q0JLubXLSjnwgvE= Subject key identifier: 79:FB:6F:AB:2F:66:65:1C:A6:81:72:A1:78:BD:0A:41:60:4A:A5:89 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EF9E21E1A10F430B172AB3000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/432e200e-0f71-3d9d-b9bd-af77278240dc.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.20.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:1e:1a:10:f4:30:b1:72:ab:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=875c30c3-3136-4e3d-92a0-c8367eea99a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f1:ba:a5:40:d1:3f:0b:bf:64:0b:55:0b:52: a7:f0:83:e7:bf:48:2c:5b:03:9e:56:ac:c0:a9:19: ec:a6:f2:db:df:cb:5f:2f:a9:30:c4:4a:2d:ac:3b: 71:5b:5d:3a:22:45:2f:37:66:a3:2a:af:dc:a4:20: d9:37:20:f2:cc:8a:2f:e4:60:e6:c1:60:89:52:af: 0f:4f:8d:c5:03:00:26:95:6a:f1:93:ee:15:91:4a: 19:43:d1:f0:df:69:40:4a:ff:eb:5b:bb:47:6a:99: be:43:7d:2b:15:24:83:16:20:3e:14:6c:70:d1:04: 80:e7:a0:e1:b1:23:b4:08:07:5e:7e:2a:fc:dc:f1: 3b:e9:7e:a8:5e:47:55:52:59:97:94:f2:40:2f:09: 63:0e:95:44:57:c8:b4:fd:61:fa:e7:02:1a:6f:4a: 08:71:dd:78:86:35:0f:a5:ff:66:15:4c:a4:9c:be: db:96:3d:ab:35:1b:14:42:aa:3c:b2:82:09:b8:b5: 72:44:2f:a1:58:2b:02:aa:61:0a:95:b8:d0:87:7e: 6f:55:a8:01:3c:5a:99:c1:85:cf:cb:f1:d8:b7:e5: f6:a4:4f:f9:c0:06:8f:8e:59:07:e8:ee:b2:9a:24: 11:3a:fd:66:98:b1:73:fc:d8:da:1d:5d:e8:c4:0d: 7f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FB:6F:AB:2F:66:65:1C:A6:81:72:A1:78:BD:0A:41:60:4A:A5:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/432e200e-0f71-3d9d-b9bd-af77278240dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:df:64:67:7d:40:17:f4:c1:fa:e5:d5:a0:6c:9a:19:20:8d: df:ae:c9:23:70:10:b2:8b:ea:69:d7:35:de:75:36:96:f5:f8: 48:73:f0:34:cf:91:5f:ae:80:f8:48:80:ef:4e:3f:7b:0b:7e: c1:96:08:34:1a:12:50:f7:54:d7:58:e3:ca:95:21:f0:19:41: 2c:6b:4c:41:e7:2d:7e:e9:5f:e1:a6:02:b1:4c:8a:33:4a:a9: b0:4c:76:52:56:23:14:25:6f:e1:a2:ca:3a:72:97:a4:b5:f6: 8c:05:9f:71:62:da:cf:95:46:39:d5:70:ab:ae:5a:2c:6d:aa: b4:5c:c2:f4:36:0c:13:82:bd:79:04:16:cf:cf:a8:af:3e:42: a9:4a:2f:97:bd:d4:fa:5b:5c:78:85:00:f1:68:77:68:d3:7c: 94:60:11:d2:99:f8:3c:48:1d:aa:51:75:34:bb:67:00:6f:20: eb:b8:50:9e:bb:6a:db:3f:91:68:bb:ca:a3:88:69:a5:af:20: 55:90:82:60:33:eb:03:05:84:5a:11:51:36:f9:1e:5b:52:b1: b1:6d:67:73:30:96:b3:f8:18:26:18:18:29:70:bf:59:c5:00: 03:17:0d:91:73:d1:14:c6:52:b5:ce:41:90:b2:4d:3e:40:d4: 39:91:93:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754h4aEPQwsXKrMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk ODc1YzMwYzMtMzEzNi00ZTNkLTkyYTAtYzgzNjdlZWE5OWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPG6pUDRPwu/ZAtVC1Kn8IPnv0gsWwOeVqzA qRnspvLb38tfL6kwxEotrDtxW106IkUvN2ajKq/cpCDZNyDyzIov5GDmwWCJUq8P T43FAwAmlWrxk+4VkUoZQ9Hw32lASv/rW7tHapm+Q30rFSSDFiA+FGxw0QSA56Dh sSO0CAdefir83PE76X6oXkdVUlmXlPJALwljDpVEV8i0/WH65wIab0oIcd14hjUP pf9mFUyknL7blj2rNRsUQqo8soIJuLVyRC+hWCsCqmEKlbjQh35vVagBPFqZwYXP y/HYt+X2pE/5wAaPjlkH6O6ymiQROv1mmLFz/NjaHV3oxA1/JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHn7b6svZmUcpoFyoXi9CkFgSqWJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDMyZTIwMGUtMGY3MS0z ZDlkLWI5YmQtYWY3NzI3ODI0MGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzfZGd9QBf0wfrl1aBsmhkgjd+uySNwELKL6mnXNd51Npb1+Ehz8DTP kV+ugPhIgO9OP3sLfsGWCDQaElD3VNdY48qVIfAZQSxrTEHnLX7pX+GmArFMijNK qbBMdlJWIxQlb+Giyjpyl6S19owFn3Fi2s+VRjnVcKuuWixtqrRcwvQ2DBOCvXkE Fs/PqK8+QqlKL5e91PpbXHiFAPFod2jTfJRgEdKZ+DxIHapRdTS7ZwBvIOu4UJ67 ats/kWi7yqOIaaWvIFWQgmAz6wMFhFoRUTb5HltSsbFtZ3MwlrP4GCYYGClwv1nF AAMXDZFz0RTGUrXOQZCyTT5A1DmRk1s= -----END CERTIFICATE-----Generated at Tue Sep 29 17:41:14 2026 by rpki-client