$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99d3179f-8584-304b-9ac6-ddafe2eee60b.roa File: 99d3179f-8584-304b-9ac6-ddafe2eee60b.roa (raw, json) Hash identifier: mSd74t7oFmdNbgXEurScX5FB3Yv8/u8SAWPvDHWKmAQ= Subject key identifier: 7B:81:B4:8C:31:08:50:2E:F0:1B:87:8A:E0:26:4F:1A:7C:9A:7E:62 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49887462F6BAA3D37E613880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99d3179f-8584-304b-9ac6-ddafe2eee60b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.20.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:74:62:f6:ba:a3:d3:7e:61:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=de1a1308-7ae1-4696-84f3-e7580c3a65f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:82:de:20:26:20:ee:21:07:26:44:5b:7a:01: ea:49:a0:75:b4:ec:36:84:04:87:10:a8:cf:34:fd: 0c:db:ab:eb:17:12:ad:5f:7a:8e:84:11:b4:00:f0: fd:0f:ac:33:16:fa:39:b0:1d:61:c3:58:ae:4b:d0: f1:14:53:16:d4:ff:46:14:60:43:a2:3d:ba:30:b9: b3:c3:a7:31:df:5a:c9:c7:a0:f8:d3:6b:84:0e:12: ac:32:a0:ee:db:2e:72:6f:1e:7e:ec:c5:ef:ab:b1: a4:06:9c:bf:b7:f8:c0:72:f6:b1:2b:dd:00:5a:e9: 1c:08:98:78:9a:06:dc:8d:ca:d6:59:c0:57:f6:de: 58:07:0f:85:59:2a:cc:1b:8d:71:88:d4:fc:fe:3c: 64:16:10:8b:4f:87:00:2b:5f:23:28:ad:94:60:08: 66:73:fd:fd:e5:a0:43:4e:e0:3b:a5:a2:35:f5:c8: 73:a6:13:71:a1:d4:d7:dd:f7:83:c0:5d:64:cc:60: 6f:3e:83:2c:69:7b:73:2f:3c:53:18:a5:c0:50:52: 5c:bc:9e:8c:b5:2c:8d:3d:fc:7c:fc:fe:7a:a4:58: f2:6c:72:5c:87:a2:6a:d9:34:37:73:7e:fe:0c:b1: 9b:df:21:ba:ac:bb:ec:29:5a:aa:f1:a2:1b:8e:ae: 21:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:81:B4:8C:31:08:50:2E:F0:1B:87:8A:E0:26:4F:1A:7C:9A:7E:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99d3179f-8584-304b-9ac6-ddafe2eee60b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:16:5c:d1:df:da:50:7f:4b:d0:cf:b9:0e:6e:d8:7f:da:be: 87:68:c9:88:2f:ec:99:99:5b:48:cf:7a:ce:b8:cf:44:7a:af: 92:91:b5:82:1e:a1:e1:29:2f:2c:5b:da:59:b4:82:53:03:e5: ec:e2:a5:c9:ac:76:df:29:75:96:63:bd:c0:b6:63:b1:5a:37: 3f:52:d2:13:3e:8e:c4:ac:5b:66:d4:f8:f3:09:9e:a0:8b:ec: 41:e8:e0:20:b8:40:38:c1:b9:5f:97:e3:e7:29:c8:31:3a:90: 23:10:2e:60:93:e7:de:f3:50:38:69:b8:d4:bc:6d:29:2a:65: 94:fa:ac:b8:fa:78:37:43:4a:93:16:05:b6:6e:16:39:58:06: 6d:dd:f3:ad:c1:e7:04:ad:ae:06:f9:b0:37:3e:ca:a1:a4:24: 52:be:ef:41:49:e0:43:e8:a6:3e:e6:95:f9:c3:81:4b:69:f5: f3:56:6a:62:15:10:5e:bd:36:be:12:90:6d:fc:5b:f5:39:86: 63:44:23:a7:5c:fe:13:f8:28:5e:62:64:3f:8a:0e:74:10:04: 6b:26:32:68:8c:bf:44:2f:81:db:0c:8c:0a:ec:0d:f0:58:4e: 3f:9f:56:89:d7:95:ee:a4:72:73:29:ad:14:d8:bd:1d:e6:15: ef:a8:d6:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiHRi9rqj035hOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGUxYTEzMDgtN2FlMS00Njk2LTg0ZjMtZTc1ODBjM2E2NWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYLeICYg7iEHJkRbegHqSaB1tOw2hASHEKjP NP0M26vrFxKtX3qOhBG0APD9D6wzFvo5sB1hw1iuS9DxFFMW1P9GFGBDoj26MLmz w6cx31rJx6D402uEDhKsMqDu2y5ybx5+7MXvq7GkBpy/t/jAcvaxK90AWukcCJh4 mgbcjcrWWcBX9t5YBw+FWSrMG41xiNT8/jxkFhCLT4cAK18jKK2UYAhmc/395aBD TuA7paI19chzphNxodTX3feDwF1kzGBvPoMsaXtzLzxTGKXAUFJcvJ6MtSyNPfx8 /P56pFjybHJch6Jq2TQ3c37+DLGb3yG6rLvsKVqq8aIbjq4hkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuBtIwxCFAu8BuHiuAmTxp8mn5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTlkMzE3OWYtODU4NC0z MDRiLTlhYzYtZGRhZmUyZWVlNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQWXNHf2lB/S9DPuQ5u2H/avodoyYgv7JmZW0jPes64z0R6r5KRtYIe oeEpLyxb2lm0glMD5ezipcmsdt8pdZZjvcC2Y7FaNz9S0hM+jsSsW2bU+PMJnqCL 7EHo4CC4QDjBuV+X4+cpyDE6kCMQLmCT597zUDhpuNS8bSkqZZT6rLj6eDdDSpMW BbZuFjlYBm3d863B5wStrgb5sDc+yqGkJFK+70FJ4EPopj7mlfnDgUtp9fNWamIV EF69Nr4SkG38W/U5hmNEI6dc/hP4KF5iZD+KDnQQBGsmMmiMv0QvgdsMjArsDfBY Tj+fVonXle6kcnMprRTYvR3mFe+o1iM= -----END CERTIFICATE-----Generated at Mon Sep 28 18:45:14 2026 by rpki-client