$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c9471b2-0f8a-301c-b405-03e9cda1d34b.roa File: 9c9471b2-0f8a-301c-b405-03e9cda1d34b.roa (raw, json) Hash identifier: chQRmzJ5xWJuXap436VDT8hN4fsjKlmhowoU1ZL81+Y= Subject key identifier: 68:16:02:68:F2:F2:B6:4F:40:AC:8F:E6:B3:40:EC:F5:16:2C:38:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F225CFCFDDC3734B3E99B0680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c9471b2-0f8a-301c-b405-03e9cda1d34b.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.29.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:fc:fd:dc:37:34:b3:e9:9b:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=98e42661-6b11-4086-85e4-37d30c9977e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cb:fd:eb:34:4c:8d:03:34:f9:a1:71:b3:96: 33:e4:a5:8b:da:2d:32:d8:ac:fe:65:4b:d0:d1:53: b4:7c:00:80:01:78:c7:f9:41:09:65:ba:68:93:ed: e6:75:f7:0e:23:4a:60:d2:4c:dc:2a:6d:8d:43:25: cb:f6:4f:9b:fb:f6:ed:5b:45:9d:54:74:33:c1:a2: bd:81:64:7d:ba:fa:f1:60:07:b6:bb:93:8e:23:13: 86:01:7f:ab:9b:a0:dc:0a:49:04:bd:c8:25:f8:35: a4:91:96:ba:23:79:ef:72:b6:33:f7:18:dc:ca:cb: f5:41:a9:8f:73:47:56:ab:59:d6:16:91:28:04:8e: 1b:b1:6d:2f:cf:77:66:fa:d1:f1:cf:4c:31:16:6c: 9b:11:2a:32:9d:92:72:bb:77:44:a1:ce:f9:e1:1c: 7f:4a:ee:51:68:0e:d8:72:70:7b:0d:b8:00:c3:74: 39:3d:fe:89:7d:67:de:73:d8:6c:f0:a3:64:cd:a7: 30:23:b0:2c:29:11:7e:31:fb:5c:ec:14:a1:e2:1c: 75:dd:7d:57:f9:a7:4a:b0:06:6c:f1:51:ed:e8:d2: 5c:0a:63:85:af:42:78:27:ed:af:a7:57:5a:6c:a1: f8:61:a0:ea:64:45:5b:50:46:a3:7e:e0:28:30:6a: 2b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:16:02:68:F2:F2:B6:4F:40:AC:8F:E6:B3:40:EC:F5:16:2C:38:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9c9471b2-0f8a-301c-b405-03e9cda1d34b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:73:f6:a4:08:9e:df:8e:0c:0d:3b:a9:de:cf:b5:2f:14:3b: 77:8b:61:66:97:47:b4:82:f4:6d:1f:e6:c4:3b:d5:6d:f9:e5: 3e:d7:77:3e:6e:d0:b2:fc:64:74:ee:e8:fb:3c:6d:8c:3c:ba: 15:75:f9:fd:94:fb:96:17:14:66:ad:12:de:7c:aa:5f:5d:a5: 5f:20:b9:77:7e:4b:37:bd:32:7d:cc:96:d7:7f:fc:00:d3:9a: 16:13:3a:b4:df:c1:74:3b:c2:79:ef:7e:87:97:86:4a:e6:34: 1e:e3:3f:c6:8e:fc:15:17:d5:3c:a6:e2:89:d5:02:3b:00:2b: 5a:ad:60:15:4a:61:22:82:b7:89:9e:0a:5f:d6:99:6b:d3:84: 39:e9:94:fa:4e:14:a0:ce:03:bb:62:cf:c9:63:71:90:69:6d: d2:90:14:09:97:bc:2d:45:07:8a:74:16:cc:cd:4a:2a:3b:9d: 81:de:1c:ef:cb:e7:23:36:54:e1:54:b3:a1:c2:43:85:5d:3c: 18:34:c5:cd:bd:ad:15:23:6d:74:48:73:ec:a7:8a:5b:e4:ec: c8:ba:0c:c0:23:f8:0c:9a:f7:eb:a0:48:2c:3a:d6:ab:95:88: df:45:0b:ce:73:9d:fb:b3:61:ec:0a:23:cb:0f:6b:1f:54:41: 70:42:eb:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPz93Dc0s+mbBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk OThlNDI2NjEtNmIxMS00MDg2LTg1ZTQtMzdkMzBjOTk3N2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8v96zRMjQM0+aFxs5Yz5KWL2i0y2Kz+ZUvQ 0VO0fACAAXjH+UEJZbpok+3mdfcOI0pg0kzcKm2NQyXL9k+b+/btW0WdVHQzwaK9 gWR9uvrxYAe2u5OOIxOGAX+rm6DcCkkEvcgl+DWkkZa6I3nvcrYz9xjcysv1QamP c0dWq1nWFpEoBI4bsW0vz3dm+tHxz0wxFmybESoynZJyu3dEoc754Rx/Su5RaA7Y cnB7DbgAw3Q5Pf6JfWfec9hs8KNkzacwI7AsKRF+Mftc7BSh4hx13X1X+adKsAZs 8VHt6NJcCmOFr0J4J+2vp1dabKH4YaDqZEVbUEajfuAoMGor3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgWAmjy8rZPQKyP5rNA7PUWLDhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWM5NDcxYjItMGY4YS0z MDFjLWI0MDUtMDNlOWNkYTFkMzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZz9qQInt+ODA07qd7PtS8UO3eLYWaXR7SC9G0f5sQ71W355T7Xdz5u 0LL8ZHTu6Ps8bYw8uhV1+f2U+5YXFGatEt58ql9dpV8guXd+Sze9Mn3Mltd//ADT mhYTOrTfwXQ7wnnvfoeXhkrmNB7jP8aO/BUX1Tym4onVAjsAK1qtYBVKYSKCt4me Cl/WmWvThDnplPpOFKDOA7tiz8ljcZBpbdKQFAmXvC1FB4p0FszNSio7nYHeHO/L 5yM2VOFUs6HCQ4VdPBg0xc29rRUjbXRIc+ynilvk7Mi6DMAj+Aya9+ugSCw61quV iN9FC85znfuzYewKI8sPax9UQXBC6yM= -----END CERTIFICATE-----Generated at Tue Sep 22 05:14:47 2026 by rpki-client