$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/520689e2-69b2-3b1b-829a-564de76aaf83.roa File: 520689e2-69b2-3b1b-829a-564de76aaf83.roa (raw, json) Hash identifier: BXa1MAQT7dv4mtwk73AxFQs6kwqOWCZgmqlu/ri67Kw= Subject key identifier: 81:87:11:C3:08:E9:F3:BB:59:DC:34:91:7E:CE:24:F3:BB:C5:9D:CA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F268CFD8E2087CDDB8F14DE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/520689e2-69b2-3b1b-829a-564de76aaf83.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 19905 IP address blocks: 173.18.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8c:fd:8e:20:87:cd:db:8f:14:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=8a09f992-2802-4772-bfd1-408e53bc6e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fb:44:9c:a0:36:8b:15:ed:32:63:fc:ec:95: 01:a1:29:3a:7f:fd:be:e5:29:98:18:4d:22:6a:c5: b3:96:40:78:f7:5e:23:64:b0:c1:c4:8c:fb:9c:02: 7b:fe:98:3c:05:f0:85:00:07:52:77:76:7f:f0:f7: 5d:df:e0:4c:2e:e2:73:db:84:10:c2:61:ea:22:c4: cb:80:7b:57:e8:f3:e2:60:aa:6a:f5:0c:d3:a9:90: 2a:da:11:a3:e3:eb:e6:03:c6:7c:df:2c:52:05:7e: 86:14:ef:5d:80:b8:b4:45:c8:03:89:af:75:99:a7: aa:35:8f:fe:18:33:c9:1b:90:11:ba:e5:ce:77:3b: 8e:ed:b3:f3:08:f6:ac:e9:32:54:da:2e:66:af:36: c5:1b:51:fd:64:af:a1:2b:77:77:d8:07:8c:75:c9: 26:7a:ea:12:83:99:6f:a8:f2:76:d0:e9:01:ce:01: e5:76:57:25:49:ef:55:68:cd:a1:eb:6b:68:b2:4f: 7a:26:62:de:0e:54:44:14:62:ea:d7:b4:ae:36:1b: 0c:c1:ec:c4:3d:bb:ea:64:73:17:45:1f:c1:ec:c9: 75:c6:74:8f:09:94:2b:e0:b2:f1:c3:56:a5:71:da: 09:ec:ff:ea:74:20:26:b6:89:ef:15:29:7e:83:a4: 2a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:87:11:C3:08:E9:F3:BB:59:DC:34:91:7E:CE:24:F3:BB:C5:9D:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/520689e2-69b2-3b1b-829a-564de76aaf83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:bc:b6:21:2c:60:13:2e:15:d7:77:bd:3e:bd:9f:70:97:c1: 95:d6:78:63:07:6b:54:2f:be:9c:91:28:71:41:53:f5:c0:55: f2:b3:40:6d:d5:88:65:3a:47:2c:44:94:97:07:cc:5d:fa:56: 92:d1:91:43:b7:52:56:82:69:95:76:d4:8f:6c:08:e8:50:54: 5c:c3:0f:7a:9d:60:95:83:ce:c2:85:f2:5c:96:35:3a:d5:58: d5:33:49:fa:84:60:f7:7b:f4:cb:66:13:e4:18:c9:9e:d5:07: b2:d3:61:54:89:89:fc:9c:71:84:d4:6c:8c:a1:7a:41:75:dc: 50:4b:08:44:1c:31:62:60:74:b1:80:dc:04:79:a1:27:3f:ae: fe:88:ad:e1:9a:6c:95:d1:a1:bd:3d:b4:4f:d4:bb:7b:ae:ef: cd:da:29:c6:a6:19:f9:0e:e5:90:b8:26:5b:51:95:4f:e6:c1: f0:b0:c1:1b:5a:d8:16:17:d4:d8:b2:ed:16:81:47:68:7d:1b: 96:04:11:7c:61:3b:34:90:51:67:23:52:18:f6:7a:25:81:3a: 6e:e2:34:6d:27:5a:c3:10:ec:63:ec:e6:5a:31:d1:0b:73:c8: 12:f2:ea:57:9a:92:69:0e:d2:cc:8d:ec:b1:3e:04:d4:d3:b1: 59:5e:ae:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjP2OIIfN248U3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk OGEwOWY5OTItMjgwMi00NzcyLWJmZDEtNDA4ZTUzYmM2ZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPtEnKA2ixXtMmP87JUBoSk6f/2+5SmYGE0i asWzlkB4914jZLDBxIz7nAJ7/pg8BfCFAAdSd3Z/8Pdd3+BMLuJz24QQwmHqIsTL gHtX6PPiYKpq9QzTqZAq2hGj4+vmA8Z83yxSBX6GFO9dgLi0RcgDia91maeqNY/+ GDPJG5ARuuXOdzuO7bPzCPas6TJU2i5mrzbFG1H9ZK+hK3d32AeMdckmeuoSg5lv qPJ20OkBzgHldlclSe9VaM2h62tosk96JmLeDlREFGLq17SuNhsMwezEPbvqZHMX RR/B7Ml1xnSPCZQr4LLxw1alcdoJ7P/qdCAmtonvFSl+g6QqXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGHEcMI6fO7Wdw0kX7OJPO7xZ3KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTIwNjg5ZTItNjliMi0z YjFiLTgyOWEtNTY0ZGU3NmFhZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADG8tiEsYBMuFdd3vT69n3CXwZXWeGMHa1QvvpyRKHFBU/XAVfKzQG3V iGU6RyxElJcHzF36VpLRkUO3UlaCaZV21I9sCOhQVFzDD3qdYJWDzsKF8lyWNTrV WNUzSfqEYPd79MtmE+QYyZ7VB7LTYVSJifyccYTUbIyhekF13FBLCEQcMWJgdLGA 3AR5oSc/rv6IreGabJXRob09tE/Uu3uu783aKcamGfkO5ZC4JltRlU/mwfCwwRta 2BYX1Niy7RaBR2h9G5YEEXxhOzSQUWcjUhj2eiWBOm7iNG0nWsMQ7GPs5lox0Qtz yBLy6leakmkO0syN7LE+BNTTsVlerj8= -----END CERTIFICATE-----Generated at Sun Sep 20 20:16:33 2026 by rpki-client