$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e1e94a2-2502-3efb-857c-6e92be424fd7.roa File: 2e1e94a2-2502-3efb-857c-6e92be424fd7.roa (raw, json) Hash identifier: K22Rp6vmlpuAn7mKs9oFS2bqzl5aEF4eTDcrFpLMPA0= Subject key identifier: 60:5C:82:F3:1A:78:79:A4:21:BC:6B:E1:53:4D:73:40:9E:18:CF:5A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA795A8BAE37D2C518ED360C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e1e94a2-2502-3efb-857c-6e92be424fd7.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 173.20.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:a8:ba:e3:7d:2c:51:8e:d3:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b629e778-4e75-4f82-8361-8023f3dfcf3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:61:83:ac:ad:66:2d:87:17:16:78:e8:da:fc: ec:94:cb:4c:b1:de:7c:a1:51:ba:45:0a:61:9e:2d: 4f:b9:d2:97:c1:4c:4a:f9:db:52:81:ab:0b:5d:58: 36:9d:3a:0d:31:e6:36:cc:dc:ea:ca:75:21:45:6d: ca:71:42:a1:ea:dd:cb:2e:c5:f5:80:0b:d7:1e:fa: 7a:74:34:70:a2:91:f8:b1:8b:36:75:c5:b1:1a:00: 71:dc:97:47:81:8e:7f:5e:5b:10:93:3c:22:40:bc: 71:36:f6:26:56:26:d6:5d:ae:07:00:19:dc:d4:24: 5c:f2:9b:14:31:70:b3:ac:bd:13:50:4d:20:36:b0: d8:16:43:30:2b:d1:9a:e5:43:84:28:83:66:37:4d: 9b:f3:48:1c:00:6e:c1:ca:ce:b7:59:11:51:f8:d5: e6:b5:95:ac:1f:13:eb:f8:92:56:22:bf:12:6f:fb: 1b:5a:f1:7f:d2:3b:c6:ba:21:55:86:3b:7f:f8:99: 65:34:5a:90:cc:f1:71:f9:4c:d9:61:0f:15:21:16: bf:a7:1c:19:44:1e:8f:27:0f:c5:9f:68:d3:ed:81: 9a:83:3b:5e:fd:9d:69:c5:df:b9:f7:e5:04:a4:c3: e7:5a:ac:28:2b:0f:df:54:7f:b3:80:2b:b0:63:04: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5C:82:F3:1A:78:79:A4:21:BC:6B:E1:53:4D:73:40:9E:18:CF:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2e1e94a2-2502-3efb-857c-6e92be424fd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c5:ad:f4:b5:91:e8:e6:a0:f4:da:a3:1a:29:a2:28:89:71: c6:9d:b2:b3:29:3a:8e:6f:3a:26:fe:c1:b2:1f:3d:6e:d7:53: cf:25:f3:30:8d:00:7b:5e:96:71:a3:3b:b6:d5:0a:0b:06:4f: 3b:60:6d:03:49:a1:fd:85:49:d7:c5:16:9c:02:9f:b8:bc:0c: 7c:fd:3c:67:95:fb:43:48:37:30:f4:ce:11:be:5f:bc:bc:79: 6d:f1:39:a0:ad:c4:67:7f:bd:32:09:85:d8:62:f7:4d:ee:95: a9:40:8a:8d:6c:20:af:2d:66:64:3c:c6:90:4b:35:f8:00:a2: f0:02:7c:6a:51:fb:3b:d3:36:38:d0:03:06:1f:d2:d5:f7:e7: 99:6d:ca:87:47:37:ae:15:7e:e4:d0:c2:fd:ef:a0:e3:6b:81: 11:5f:c5:ee:4e:5f:9f:75:8a:2e:7a:9b:4c:78:7e:a2:cd:24: 9f:14:40:a3:f8:d1:81:f3:de:89:94:92:5c:5e:04:79:64:9f: 42:e3:53:4a:c5:d3:0f:e6:f7:18:ab:db:9a:2d:2f:79:92:3a: 17:88:bd:d6:9e:2f:29:c6:e0:85:c5:2f:2a:cd:a6:9f:d6:59: 7c:59:f0:91:2e:8b:11:6b:5b:1d:26:f4:88:bf:aa:a0:21:09: 45:7b:41:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlai6430sUY7TYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjYyOWU3NzgtNGU3NS00ZjgyLTgzNjEtODAyM2YzZGZjZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2GDrK1mLYcXFnjo2vzslMtMsd58oVG6RQph ni1PudKXwUxK+dtSgasLXVg2nToNMeY2zNzqynUhRW3KcUKh6t3LLsX1gAvXHvp6 dDRwopH4sYs2dcWxGgBx3JdHgY5/XlsQkzwiQLxxNvYmVibWXa4HABnc1CRc8psU MXCzrL0TUE0gNrDYFkMwK9Ga5UOEKINmN02b80gcAG7Bys63WRFR+NXmtZWsHxPr +JJWIr8Sb/sbWvF/0jvGuiFVhjt/+JllNFqQzPFx+UzZYQ8VIRa/pxwZRB6PJw/F n2jT7YGagzte/Z1pxd+59+UEpMPnWqwoKw/fVH+zgCuwYwQBVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBcgvMaeHmkIbxr4VNNc0CeGM9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmUxZTk0YTItMjUwMi0z ZWZiLTg1N2MtNmU5MmJlNDI0ZmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPFrfS1kejmoPTaoxopoiiJccadsrMpOo5vOib+wbIfPW7XU88l8zCN AHtelnGjO7bVCgsGTztgbQNJof2FSdfFFpwCn7i8DHz9PGeV+0NINzD0zhG+X7y8 eW3xOaCtxGd/vTIJhdhi903ulalAio1sIK8tZmQ8xpBLNfgAovACfGpR+zvTNjjQ AwYf0tX355ltyodHN64VfuTQwv3voONrgRFfxe5OX591ii56m0x4fqLNJJ8UQKP4 0YHz3omUklxeBHlkn0LjU0rF0w/m9xir25otL3mSOheIvdaeLynG4IXFLyrNpp/W WXxZ8JEuixFrWx0m9Ii/qqAhCUV7QaA= -----END CERTIFICATE-----Generated at Tue Sep 22 02:54:45 2026 by rpki-client