$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa File: c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa (raw, json) Hash identifier: kqrPzH6xIYnQUIW3/Wbup5Lk3AgDQeN9WfTIb47Qle8= Subject key identifier: AD:46:D3:C2:3D:C3:07:E5:39:42:B5:8F:0E:33:FD:0F:1F:70:3D:39 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974A7EC66E7C28FE162CB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.20.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a7:ec:66:e7:c2:8f:e1:62:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7f8919e4-385e-48c4-951a-014f333bc957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5f:b4:cf:2a:07:32:96:a8:0e:21:f0:fc:4d: dc:9e:e6:57:a7:2d:c5:0b:68:f7:78:c3:33:38:2d: 6c:c8:07:28:fb:98:62:d7:1f:da:bb:df:e4:94:d9: cd:91:c5:8f:af:57:c3:8f:da:73:e8:d8:ea:90:83: ce:16:e6:92:3c:ac:b4:07:c1:17:3d:c4:98:96:03: dd:99:5b:04:cc:df:1d:10:b6:b5:eb:cb:92:47:29: 18:c9:99:21:8f:50:72:7f:6a:32:3f:64:be:c6:2f: e6:49:e8:2e:8c:1a:02:9a:28:0b:ae:49:34:97:c1: 88:38:e7:a5:45:fc:bb:f5:f3:b7:52:08:8b:93:20: 36:13:f3:31:65:15:2c:f8:b9:ac:b1:f5:a3:b2:96: 3b:8b:05:4d:80:17:28:e7:12:64:84:c6:c9:cd:99: 64:3b:45:80:cf:fb:27:45:28:89:5c:81:5a:ec:10: 2e:66:9b:7b:de:4a:7a:ef:45:9b:f6:8e:c1:49:c3: 5f:75:1e:90:b4:cf:e0:14:50:5a:27:51:4a:d5:e6: b1:da:a3:ea:6a:97:23:ec:07:f3:30:51:a2:93:c3: e5:26:6e:75:22:e9:93:ba:73:e1:97:80:40:45:d0: aa:a1:44:31:0a:4c:4c:c8:0d:12:bb:e6:b2:fb:d5: 73:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:46:D3:C2:3D:C3:07:E5:39:42:B5:8F:0E:33:FD:0F:1F:70:3D:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:66:67:92:2e:4f:5f:c4:a0:80:77:ac:61:fe:1b:d1:b2:c5: 43:dc:19:b0:d1:2c:ee:e9:68:23:a9:d6:7b:9b:bc:7f:f0:54: 8c:93:e5:f5:a9:af:6f:f2:d8:be:88:dd:01:39:ec:67:83:e0: 69:e8:08:7d:52:0e:34:c8:f8:54:ec:f6:28:e0:fa:c1:9c:0e: 9e:e4:66:67:d7:9d:a8:67:8d:31:2e:02:e8:1c:92:65:15:14: b3:6a:0d:2f:38:b0:cb:60:76:8e:fa:49:ca:35:8e:cc:76:f3: cc:0f:1d:d1:e9:00:72:c5:22:8b:99:65:ea:27:19:47:38:8c: bd:c2:89:48:9d:be:4b:ca:fb:89:3b:34:c9:a2:85:02:ee:d4: 79:69:ec:f5:78:29:27:5e:5f:41:2f:2d:5c:9b:3e:63:6e:c3: 8a:af:e7:a3:26:9e:fa:5d:14:ef:04:6e:1e:34:fd:f8:bb:23: e2:c8:ec:37:97:67:44:84:ee:86:0f:06:fc:8f:fd:9e:b9:0d: 60:b6:48:ff:d8:ca:7f:0b:f0:9f:48:d8:17:43:61:5a:60:5c: 52:97:7f:f4:f4:12:a7:e8:06:a6:3c:d4:b4:59:d4:8d:29:82: 18:dc:b8:a9:51:2c:8c:73:ec:d7:aa:33:31:f3:2f:9a:de:da: 55:d2:06:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKfsZufCj+Fiy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2Y4OTE5ZTQtMzg1ZS00OGM0LTk1MWEtMDE0ZjMzM2JjOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1+0zyoHMpaoDiHw/E3cnuZXpy3FC2j3eMMz OC1syAco+5hi1x/au9/klNnNkcWPr1fDj9pz6NjqkIPOFuaSPKy0B8EXPcSYlgPd mVsEzN8dELa168uSRykYyZkhj1Byf2oyP2S+xi/mSegujBoCmigLrkk0l8GIOOel Rfy79fO3UgiLkyA2E/MxZRUs+LmssfWjspY7iwVNgBco5xJkhMbJzZlkO0WAz/sn RSiJXIFa7BAuZpt73kp670Wb9o7BScNfdR6QtM/gFFBaJ1FK1eax2qPqapcj7Afz MFGik8PlJm51IumTunPhl4BARdCqoUQxCkxMyA0Su+ay+9VzUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK1G08I9wwflOUK1jw4z/Q8fcD05MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzlhMzJkMmMtYTNkOS0z ZWUzLWJmOTktNTFlYjE3NWQwNDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApmZ5IuT1/EoIB3rGH+G9GyxUPcGbDRLO7paCOp1nubvH/wVIyT5fWp r2/y2L6I3QE57GeD4GnoCH1SDjTI+FTs9ijg+sGcDp7kZmfXnahnjTEuAugckmUV FLNqDS84sMtgdo76Sco1jsx288wPHdHpAHLFIouZZeonGUc4jL3CiUidvkvK+4k7 NMmihQLu1Hlp7PV4KSdeX0EvLVybPmNuw4qv56MmnvpdFO8Ebh40/fi7I+LI7DeX Z0SE7oYPBvyP/Z65DWC2SP/Yyn8L8J9I2BdDYVpgXFKXf/T0EqfoBqY81LRZ1I0p ghjcuKlRLIxz7NeqMzHzL5re2lXSBsM= -----END CERTIFICATE-----Generated at Fri Sep 25 23:46:14 2026 by rpki-client