$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b40ce30e-b0ac-33ad-8b81-e8b299184157.roa File: b40ce30e-b0ac-33ad-8b81-e8b299184157.roa (raw, json) Hash identifier: 0IJI9mcpBEZwFdq9nqWu2VA37QFIvWSaf6Pou5cMcSA= Subject key identifier: 83:82:D1:29:3B:BF:5F:1B:90:74:2C:2A:7E:8F:E5:1B:FC:06:50:59 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F480D408E4143E34066701300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b40ce30e-b0ac-33ad-8b81-e8b299184157.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.20.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:40:8e:41:43:e3:40:66:70:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=4c5b411c-bf48-4a01-95e6-08bd30554cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8c:75:34:d4:c5:e0:8c:2c:f3:53:8f:ff:84: d7:11:32:be:1d:af:3e:df:be:eb:90:47:4a:bf:02: 9e:90:d5:d1:15:4e:ad:1e:ae:43:d7:5f:b5:6d:a1: 46:3d:32:fd:0f:40:48:20:3e:bf:cf:8a:3b:9b:41: 18:c8:f8:be:9e:98:7b:79:77:cc:67:f5:9e:5c:43: 30:32:68:f3:6d:3e:5d:80:04:da:54:25:0a:0f:ba: b8:46:65:73:f8:5c:96:d5:15:99:14:9d:90:82:e6: 70:c6:f5:45:0d:2a:e6:7e:9d:16:73:ee:c4:e4:5a: d0:09:d6:e6:f2:9a:d3:83:1e:12:9a:0c:20:bd:56: 3a:52:f6:ac:bc:8d:7f:76:94:0d:cd:39:8a:46:d3: 28:c3:69:9c:43:49:18:53:c5:e1:66:9c:16:b5:e3: ba:aa:b8:be:d8:df:2e:87:c5:9a:57:df:e9:33:ce: c3:6d:80:92:9f:b6:86:f5:33:db:41:ac:9f:63:82: ae:3b:95:21:50:cd:d4:ba:eb:62:17:98:b8:f1:0e: 0e:7a:b8:d7:fc:69:32:7e:31:7f:63:8b:1e:7a:cf: 96:77:a9:0c:b3:1a:e1:97:1a:00:ec:f5:76:a1:9e: 6a:2e:b2:22:bf:53:07:d9:5d:85:be:a0:4e:eb:69: f4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:82:D1:29:3B:BF:5F:1B:90:74:2C:2A:7E:8F:E5:1B:FC:06:50:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b40ce30e-b0ac-33ad-8b81-e8b299184157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:61:c5:e5:57:4e:44:11:54:c4:ab:c8:0a:52:5b:7d:2a:76: d8:d6:86:d6:83:f5:14:97:ce:43:10:a1:04:01:e4:2b:41:5b: 47:f9:22:e6:9d:0a:8b:07:b5:cb:bc:59:d2:49:64:87:17:e1: 5d:aa:7f:ab:e0:fc:cd:80:2d:fa:43:dd:70:ee:8c:d8:70:6f: 6c:ce:32:07:42:af:79:90:48:b9:5c:3c:cd:83:0a:61:51:74: 66:d9:a8:94:29:68:96:84:5c:7c:94:ec:a1:a5:b0:5e:a6:3e: 15:fe:3f:75:62:13:fa:09:4a:c1:6b:de:af:b6:43:e6:02:94: ad:1f:06:35:09:a7:f9:aa:c4:4f:91:1e:3e:b0:56:dc:45:e7: aa:a4:d1:36:23:3b:b1:de:b7:63:9e:15:d0:2e:3a:c1:25:03: a2:5d:df:b1:74:06:1f:ed:86:af:0b:b4:39:11:f0:2e:2b:81: cb:2b:dc:39:96:a6:6a:58:fb:9a:4c:04:b5:9c:ad:89:99:76: a1:aa:85:85:a5:c7:b5:ee:36:2e:ea:d3:a0:98:de:a5:fd:47: 94:a5:16:b1:e8:0f:6f:c7:4d:8a:9e:ce:17:bd:c7:ba:4e:8d: e2:e7:41:8c:34:8b:3a:bd:5c:ce:1c:c6:2b:f2:16:97:a5:0a: 5e:b2:be:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDUCOQUPjQGZwEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk NGM1YjQxMWMtYmY0OC00YTAxLTk1ZTYtMDhiZDMwNTU0Y2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYx1NNTF4Iws81OP/4TXETK+Ha8+377rkEdK vwKekNXRFU6tHq5D11+1baFGPTL9D0BIID6/z4o7m0EYyPi+nph7eXfMZ/WeXEMw MmjzbT5dgATaVCUKD7q4RmVz+FyW1RWZFJ2QguZwxvVFDSrmfp0Wc+7E5FrQCdbm 8prTgx4SmgwgvVY6UvasvI1/dpQNzTmKRtMow2mcQ0kYU8XhZpwWteO6qri+2N8u h8WaV9/pM87DbYCSn7aG9TPbQayfY4KuO5UhUM3UuutiF5i48Q4OerjX/GkyfjF/ Y4sees+Wd6kMsxrhlxoA7PV2oZ5qLrIiv1MH2V2FvqBO62n0SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOC0Sk7v18bkHQsKn6P5Rv8BlBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjQwY2UzMGUtYjBhYy0z M2FkLThiODEtZThiMjk5MTg0MTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhhxeVXTkQRVMSryApSW30qdtjWhtaD9RSXzkMQoQQB5CtBW0f5Iuad CosHtcu8WdJJZIcX4V2qf6vg/M2ALfpD3XDujNhwb2zOMgdCr3mQSLlcPM2DCmFR dGbZqJQpaJaEXHyU7KGlsF6mPhX+P3ViE/oJSsFr3q+2Q+YClK0fBjUJp/mqxE+R Hj6wVtxF56qk0TYjO7Het2OeFdAuOsElA6Jd37F0Bh/thq8LtDkR8C4rgcsr3DmW pmpY+5pMBLWcrYmZdqGqhYWlx7XuNi7q06CY3qX9R5SlFrHoD2/HTYqezhe9x7pO jeLnQYw0izq9XM4cxivyFpelCl6yvmc= -----END CERTIFICATE-----Generated at Thu Sep 24 20:24:38 2026 by rpki-client