$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/956796f9-31e4-3cd3-85ad-be60f52ec842.roa File: 956796f9-31e4-3cd3-85ad-be60f52ec842.roa (raw, json) Hash identifier: rvjeV6DKdytig0C83Xs/DlW62YrAYyZUqaTNj+wa408= Subject key identifier: 45:C5:6C:84:A7:A0:C4:53:3F:12:5C:1C:B6:B9:D7:15:DF:8B:1C:A2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F1CC7A27AA0B76AA0CEE41F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/956796f9-31e4-3cd3-85ad-be60f52ec842.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 30036 IP address blocks: 173.20.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:a2:7a:a0:b7:6a:a0:ce:e4:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=0a3a4408-810f-41ec-908e-fe1fa9e4f21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ed:71:db:66:9b:c5:5d:b7:c5:ca:48:12:ee: 64:4f:b8:98:6f:c9:85:ff:2f:4c:18:73:7c:30:47: 46:d8:98:ce:81:43:1c:04:cb:cd:8c:f0:da:16:61: f8:5a:39:1b:a4:d5:81:f6:18:95:38:e1:26:6b:b3: 79:1c:8e:3e:8a:89:0b:25:1f:ee:ac:ca:f4:92:90: 39:d0:59:80:65:5b:06:d8:fc:7e:21:27:ff:f7:af: 11:8a:98:5f:cf:7b:4b:95:97:32:ab:e6:de:e8:4b: 3d:f6:b0:0c:e6:e4:61:e3:7a:aa:b1:04:c0:37:11: b1:54:56:de:ac:07:57:15:a2:16:d7:16:f7:9f:2e: fd:88:5b:78:f3:e6:b2:99:f2:50:8c:f7:f1:21:14: e7:8a:8b:27:9b:b2:da:1f:a0:9b:b0:5c:cf:73:f9: d8:fd:f0:55:05:8b:9e:73:77:15:de:7d:ca:9c:d0: 59:7a:bd:95:04:14:95:5a:03:2e:ca:86:43:cc:c1: 06:4d:d7:4d:77:29:b1:0c:1e:dc:e3:77:07:c2:55: ae:42:5f:a6:e1:65:24:d9:1e:02:88:6c:68:c3:8e: bd:1f:d6:43:9f:4a:58:4c:be:f7:6c:09:15:11:43: b1:be:3c:57:6c:db:86:d9:4b:da:2d:81:30:70:81: 65:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C5:6C:84:A7:A0:C4:53:3F:12:5C:1C:B6:B9:D7:15:DF:8B:1C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/956796f9-31e4-3cd3-85ad-be60f52ec842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:5f:a8:09:f6:09:df:e6:28:a0:09:ce:48:cc:f2:de:8c:e6: a1:c2:02:62:46:69:bc:55:64:81:09:7f:09:1f:07:80:9c:8f: 06:0b:ac:71:52:df:03:89:42:0d:24:9d:d5:be:b5:97:ff:8d: fe:f8:e5:c1:5f:aa:f8:f4:dc:f4:fb:ab:1d:a2:7a:53:f2:84: 1b:36:63:11:ca:b4:b4:f1:44:44:4f:36:46:34:7c:97:7b:18: 5c:da:ce:03:42:95:39:36:57:f4:e0:04:c5:21:f9:4f:89:f9: e3:21:ca:ac:48:3a:6d:ac:2e:54:0f:b2:c0:11:98:88:ab:f2: e8:6b:16:b4:25:fd:d4:7e:03:94:99:4c:fb:eb:a6:37:c6:d7: e6:99:a2:2d:77:6f:03:9d:6d:38:1b:d9:d9:38:a6:da:02:25: 48:0d:8d:6f:c2:28:f0:57:66:5a:e0:23:bc:eb:a6:de:61:08: e5:4b:6b:c8:2d:ed:89:53:48:7a:d5:d4:5b:74:4a:2a:2b:e9: 73:da:6d:e3:91:87:f7:9d:62:9e:84:8b:d7:5b:15:e2:b2:83: 98:32:fe:88:d4:4b:d4:ed:e9:75:8c:82:a5:f5:ed:43:dc:c7: 53:72:1d:fc:fb:81:dd:c2:c6:90:d8:e3:24:3d:04:bc:56:3e: 2d:b8:d9:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6J6oLdqoM7kH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk MGEzYTQ0MDgtODEwZi00MWVjLTkwOGUtZmUxZmE5ZTRmMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+1x22abxV23xcpIEu5kT7iYb8mF/y9MGHN8 MEdG2JjOgUMcBMvNjPDaFmH4WjkbpNWB9hiVOOEma7N5HI4+iokLJR/urMr0kpA5 0FmAZVsG2Px+ISf/968Riphfz3tLlZcyq+be6Es99rAM5uRh43qqsQTANxGxVFbe rAdXFaIW1xb3ny79iFt48+aymfJQjPfxIRTniosnm7LaH6CbsFzPc/nY/fBVBYue c3cV3n3KnNBZer2VBBSVWgMuyoZDzMEGTddNdymxDB7c43cHwlWuQl+m4WUk2R4C iGxow469H9ZDn0pYTL73bAkVEUOxvjxXbNuG2UvaLYEwcIFlkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXFbISnoMRTPxJcHLa51xXfixyiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTU2Nzk2ZjktMzFlNC0z Y2QzLTg1YWQtYmU2MGY1MmVjODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5fqAn2Cd/mKKAJzkjM8t6M5qHCAmJGabxVZIEJfwkfB4CcjwYLrHFS 3wOJQg0kndW+tZf/jf745cFfqvj03PT7qx2ielPyhBs2YxHKtLTxRERPNkY0fJd7 GFzazgNClTk2V/TgBMUh+U+J+eMhyqxIOm2sLlQPssARmIir8uhrFrQl/dR+A5SZ TPvrpjfG1+aZoi13bwOdbTgb2dk4ptoCJUgNjW/CKPBXZlrgI7zrpt5hCOVLa8gt 7YlTSHrV1Ft0Sior6XPabeORh/edYp6Ei9dbFeKyg5gy/ojUS9Tt6XWMgqX17UPc x1NyHfz7gd3CxpDY4yQ9BLxWPi242ck= -----END CERTIFICATE-----Generated at Fri Sep 25 23:06:59 2026 by rpki-client