$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9103eb47-354f-39f8-a8bb-0dc2ad1ad0d6.roa File: 9103eb47-354f-39f8-a8bb-0dc2ad1ad0d6.roa (raw, json) Hash identifier: qSD1LVfGoP7KbRWrCHh0CF/SlTjDF2kAX+1IkAxHgV8= Subject key identifier: 5D:27:89:61:BC:F8:4B:28:06:2A:E7:04:A7:98:8C:7F:7E:D1:F2:D2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F10379C37EC5FD806104D4320 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9103eb47-354f-39f8-a8bb-0dc2ad1ad0d6.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.28.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:9c:37:ec:5f:d8:06:10:4d:43:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=b999cbf2-aae3-4bf7-92ef-dd35827663ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3b:55:7f:df:81:e3:e5:4a:53:ec:89:9c:25: 3f:cf:66:4b:89:27:6b:6c:47:39:f4:36:23:ec:2b: 8a:54:b8:2d:e1:3e:ca:6b:98:6c:75:b3:8b:3c:33: dd:b5:c7:62:e9:54:2a:3d:23:b2:d6:21:c0:fa:e9: 5c:ea:37:39:81:ed:d7:31:fa:c8:3e:08:3a:ab:16: 55:ed:ca:20:a3:b7:34:ff:83:02:70:6b:7d:fb:e4: d3:a5:f9:c6:73:ef:74:4d:62:43:ac:08:fb:61:fb: af:40:c5:54:66:c2:29:5f:91:df:1a:bb:ed:a0:83: c3:33:78:33:97:fa:e7:2b:61:26:3d:d7:cf:db:43: ba:b2:a6:d1:b6:2d:de:59:be:cf:c1:b2:f9:e8:65: 0c:e8:91:c0:93:1d:33:c1:60:f8:a9:28:1a:d4:1d: b6:47:83:05:cc:fa:ef:d7:e6:2f:48:88:ec:a7:9f: 52:5f:b1:14:e8:95:44:36:f7:e3:ec:25:d2:05:72: 9a:52:1b:10:8f:25:cf:6e:e9:87:d5:dd:f0:0c:37: 07:12:3f:0e:1f:cc:32:ec:93:22:0e:2a:ed:e4:d8: e8:b7:99:dc:3a:ec:a7:12:fa:56:4f:ec:6b:45:c9: 08:78:1a:33:97:7b:e8:b0:2d:63:48:75:b5:6d:5a: 45:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:27:89:61:BC:F8:4B:28:06:2A:E7:04:A7:98:8C:7F:7E:D1:F2:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9103eb47-354f-39f8-a8bb-0dc2ad1ad0d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ae:e6:0d:59:18:5f:c1:a5:86:af:23:28:c9:b8:bc:75:15: d2:ea:cf:f5:19:8b:44:99:f0:74:5f:29:7e:cb:36:9d:1a:8e: 27:aa:f3:dd:26:35:9d:d7:8d:dc:71:24:48:39:33:e5:73:77: 7d:4a:49:58:b6:0e:ed:47:7b:58:1e:61:98:90:72:d1:e6:8f: c5:70:1f:e7:17:0b:14:91:ca:57:30:4d:d2:b5:b5:9f:5a:70: e0:fe:9f:7b:ac:3b:8f:b8:c4:7b:8d:73:e2:bc:a3:55:be:28: 4c:e1:35:10:21:5b:7b:d7:d9:df:68:2c:f7:07:25:80:aa:57: f2:9d:bc:1d:b5:79:73:4d:7f:e3:c7:e8:a9:0c:6a:ce:47:f7: a3:64:92:59:db:b3:d1:04:70:c6:cd:69:85:60:2e:48:af:c0: 71:57:e6:e9:5b:f4:b2:cb:a4:07:da:dc:a8:d3:6e:2d:08:54: 1e:8e:4d:5e:4d:62:76:a7:fd:59:e5:bd:7b:4f:f2:dc:01:03: 2a:36:b0:f5:79:85:f1:da:02:c1:47:97:41:33:0d:9f:35:6f: fa:58:34:53:d4:c8:4d:18:ab:f5:d3:7b:d5:a7:e5:03:6a:72: b9:ea:5a:dc:fc:8c:31:bc:3f:39:84:db:14:c3:35:c7:4e:43: c3:bc:bb:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN5w37F/YBhBNQyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk Yjk5OWNiZjItYWFlMy00YmY3LTkyZWYtZGQzNTgyNzY2M2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTtVf9+B4+VKU+yJnCU/z2ZLiSdrbEc59DYj 7CuKVLgt4T7Ka5hsdbOLPDPdtcdi6VQqPSOy1iHA+ulc6jc5ge3XMfrIPgg6qxZV 7cogo7c0/4MCcGt9++TTpfnGc+90TWJDrAj7YfuvQMVUZsIpX5HfGrvtoIPDM3gz l/rnK2EmPdfP20O6sqbRti3eWb7PwbL56GUM6JHAkx0zwWD4qSga1B22R4MFzPrv 1+YvSIjsp59SX7EU6JVENvfj7CXSBXKaUhsQjyXPbumH1d3wDDcHEj8OH8wy7JMi Dirt5Njot5ncOuynEvpWT+xrRckIeBozl3vosC1jSHW1bVpFwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0niWG8+EsoBirnBKeYjH9+0fLSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTEwM2ViNDctMzU0Zi0z OWY4LWE4YmItMGRjMmFkMWFkMGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKu5g1ZGF/BpYavIyjJuLx1FdLqz/UZi0SZ8HRfKX7LNp0ajieq890m NZ3XjdxxJEg5M+Vzd31KSVi2Du1He1geYZiQctHmj8VwH+cXCxSRylcwTdK1tZ9a cOD+n3usO4+4xHuNc+K8o1W+KEzhNRAhW3vX2d9oLPcHJYCqV/KdvB21eXNNf+PH 6KkMas5H96Nkklnbs9EEcMbNaYVgLkivwHFX5ulb9LLLpAfa3KjTbi0IVB6OTV5N Ynan/VnlvXtP8twBAyo2sPV5hfHaAsFHl0EzDZ81b/pYNFPUyE0Yq/XTe9Wn5QNq crnqWtz8jDG8PzmE2xTDNcdOQ8O8u7A= -----END CERTIFICATE-----Generated at Sat Sep 26 17:05:03 2026 by rpki-client