$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91c957af-1b46-33e2-8ed6-ae32d6d34f31.roa File: 91c957af-1b46-33e2-8ed6-ae32d6d34f31.roa (raw, json) Hash identifier: 5i66ATkuqzurkC3Sh8G5n6cUjQhpotV7g5LVoEQliJQ= Subject key identifier: B4:1E:45:4F:26:64:32:9F:06:09:E9:A3:7F:21:EA:AC:88:FC:29:D9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F331D2D23E5F203066B71FB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91c957af-1b46-33e2-8ed6-ae32d6d34f31.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 19905 IP address blocks: 173.20.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:2d:23:e5:f2:03:06:6b:71:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=f09ee713-a28f-449f-9e2e-52a2a338998b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7d:db:97:6e:27:12:24:17:1b:6a:16:62:0c: 6f:98:45:38:ec:b3:47:03:2e:b9:14:9b:dc:70:5a: 2b:da:da:22:d7:e7:e4:eb:1a:75:20:f9:d0:27:15: 16:bc:d1:ab:7e:0d:02:5b:9b:e6:a1:55:4b:b1:40: 25:59:84:19:0f:cb:a4:37:b9:cb:1e:ce:80:c4:81: 9d:3c:17:34:86:d4:e9:c3:e6:56:16:88:1e:c3:b2: 62:ff:5e:82:2d:06:8e:cf:7d:fa:4a:6a:a3:5f:fe: bc:01:8b:02:56:2f:8c:7c:35:46:df:27:db:da:25: e6:4f:0e:c5:92:f3:08:b4:d4:ba:39:b2:98:60:f6: f0:85:18:ae:d3:9b:c6:1a:ce:5d:eb:32:fe:7c:77: c6:74:f7:6d:0f:47:3c:3c:13:53:94:3b:b9:44:bc: e3:a9:75:71:b1:50:10:03:64:5c:86:33:dc:f2:6f: c7:94:9c:3b:f5:31:47:6a:eb:77:44:5e:82:3b:7c: e2:05:f4:c7:e3:6b:ce:af:7e:9a:16:e0:fe:11:80: 72:6a:67:06:ba:f8:4b:50:3b:d0:e5:cc:ca:79:fd: ef:c0:0e:a8:ad:33:30:f2:52:b7:f5:9d:6d:39:8a: 96:0a:9a:dd:d6:27:56:e6:be:1f:b1:db:c2:c2:8a: 4a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1E:45:4F:26:64:32:9F:06:09:E9:A3:7F:21:EA:AC:88:FC:29:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91c957af-1b46-33e2-8ed6-ae32d6d34f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:9d:d0:56:4c:21:4d:b0:cd:eb:48:eb:a6:5e:b2:b7:8d:a8: c5:61:4d:76:ed:62:4f:8b:c0:70:66:74:b6:e9:84:db:e4:2f: a0:c9:8b:c2:6e:d5:63:db:66:6e:39:67:f2:6e:88:02:96:5e: fd:13:1e:85:01:44:31:bb:ea:d4:c8:17:7e:b3:45:64:0e:d1: 3d:28:f0:af:30:46:29:6e:f3:c5:85:cd:1c:63:b6:f6:11:f7: eb:d8:1e:1e:01:e8:a3:dc:0f:4f:d4:00:02:e8:1e:65:1b:39: a6:87:85:0d:51:0c:21:3b:ce:ac:3a:3a:bc:87:55:36:54:17: ab:81:f8:55:5a:47:2e:d0:6f:4f:8b:93:3a:77:67:c6:84:f4: 59:9a:21:92:11:c1:21:e5:5e:a9:c4:c8:05:9c:16:f2:f3:93: 56:14:6b:db:a8:ba:f0:e9:b0:87:38:28:39:36:e1:19:fe:a1: 2f:9c:ce:bb:77:87:c0:84:f8:91:fe:3e:5f:bf:0f:59:04:8f: 46:cf:7e:f0:4f:15:14:1f:d2:da:a4:63:88:39:a1:32:9b:3a: 6d:9f:2d:2d:ae:20:b1:11:3d:02:be:3b:9d:3f:19:80:66:c0: 3a:8f:28:b6:f9:47:9e:23:66:0d:64:f2:5f:3d:a8:50:d4:11: 78:2f:86:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHS0j5fIDBmtx+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk ZjA5ZWU3MTMtYTI4Zi00NDlmLTllMmUtNTJhMmEzMzg5OThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX3bl24nEiQXG2oWYgxvmEU47LNHAy65FJvc cFor2toi1+fk6xp1IPnQJxUWvNGrfg0CW5vmoVVLsUAlWYQZD8ukN7nLHs6AxIGd PBc0htTpw+ZWFogew7Ji/16CLQaOz336SmqjX/68AYsCVi+MfDVG3yfb2iXmTw7F kvMItNS6ObKYYPbwhRiu05vGGs5d6zL+fHfGdPdtD0c8PBNTlDu5RLzjqXVxsVAQ A2RchjPc8m/HlJw79TFHaut3RF6CO3ziBfTH42vOr36aFuD+EYByamcGuvhLUDvQ 5czKef3vwA6orTMw8lK39Z1tOYqWCprd1idW5r4fsdvCwopKjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQeRU8mZDKfBgnpo38h6qyI/CnZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTFjOTU3YWYtMWI0Ni0z M2UyLThlZDYtYWUzMmQ2ZDM0ZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCd0FZMIU2wzetI66ZesreNqMVhTXbtYk+LwHBmdLbphNvkL6DJi8Ju 1WPbZm45Z/JuiAKWXv0THoUBRDG76tTIF36zRWQO0T0o8K8wRilu88WFzRxjtvYR 9+vYHh4B6KPcD0/UAALoHmUbOaaHhQ1RDCE7zqw6OryHVTZUF6uB+FVaRy7Qb0+L kzp3Z8aE9FmaIZIRwSHlXqnEyAWcFvLzk1YUa9uouvDpsIc4KDk24Rn+oS+czrt3 h8CE+JH+Pl+/D1kEj0bPfvBPFRQf0tqkY4g5oTKbOm2fLS2uILERPQK+O50/GYBm wDqPKLb5R54jZg1k8l89qFDUEXgvhiU= -----END CERTIFICATE-----Generated at Wed Sep 23 13:03:19 2026 by rpki-client