$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca678994-138f-3640-a31c-0c61ce87c7a5.roa File: ca678994-138f-3640-a31c-0c61ce87c7a5.roa (raw, json) Hash identifier: eT2iNKmSgRoRdUNU0O78s74QM4T0/qfKt7Y+1EC4f3w= Subject key identifier: 6F:60:C4:46:F6:BC:53:FB:D9:58:9E:49:57:25:CC:EA:3A:5B:1E:79 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D75BB0099FC2B93C52A60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca678994-138f-3640-a31c-0c61ce87c7a5.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.20.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:75:bb:00:99:fc:2b:93:c5:2a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d8bd9cb4-c553-4712-9688-8fc6d920e4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b2:f6:a5:83:66:c5:29:fd:e2:44:47:68:e6: 32:31:ad:01:09:e0:87:32:a6:7d:6f:55:57:24:49: bc:8a:f1:f0:ef:2b:73:89:87:dc:79:08:8f:90:a8: 65:5c:68:93:06:43:09:34:97:59:fb:64:bf:60:3b: 53:2c:16:29:f9:a6:65:b0:a9:2d:94:0b:b5:64:9d: b5:e4:ec:ee:57:fe:33:ff:64:df:ed:c0:07:3a:55: e5:a4:a0:60:89:4f:b3:3e:53:cf:05:8f:34:f1:96: e9:27:f9:5b:8a:10:79:f1:d6:ae:0e:d5:d8:a0:d7: 19:1c:28:f2:67:46:01:95:6e:88:1b:ce:7d:f1:85: 79:8b:a9:81:bb:1e:5a:67:1a:72:f0:06:c9:dd:75: 89:dd:76:7e:5b:46:2c:77:27:67:df:f5:23:d4:96: e3:a8:90:5a:a5:b5:a0:0f:9d:af:f3:59:a3:d2:4c: 05:1e:f4:15:a8:f2:e6:bc:22:b1:cb:a1:a2:fe:f9: e5:79:c3:9c:15:87:2c:58:fc:d9:f8:97:8e:84:f2: 93:ae:59:ae:36:f2:e9:05:4d:b4:00:ab:22:47:b6: 36:9b:a8:31:8e:f7:9e:40:f8:d0:ed:61:f6:15:1e: 12:e6:d2:31:49:5a:a9:86:7e:6f:c1:b1:87:08:10: 2e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:60:C4:46:F6:BC:53:FB:D9:58:9E:49:57:25:CC:EA:3A:5B:1E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca678994-138f-3640-a31c-0c61ce87c7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:7c:72:25:d4:74:ef:db:76:46:3b:2f:56:c0:f0:cd:c0:bf: 5e:60:84:bd:0d:e0:75:35:d7:96:11:1f:7d:97:ab:24:2c:01: 79:89:c9:1f:01:9d:6b:9d:0a:b1:cf:62:3d:7b:ae:20:15:38: 8a:ad:3a:9a:3e:65:98:91:cf:0f:d5:e2:13:5c:7c:2d:70:2f: 44:1c:90:e7:49:cc:98:bd:45:7d:b3:6c:4a:2c:e0:c3:58:6c: e8:1e:33:b8:c3:c2:1d:12:45:9a:d9:5d:a2:7c:76:35:b4:4e: b4:9f:93:e4:15:38:bf:f9:f3:6c:8c:17:f2:87:aa:ff:4b:d2: a8:03:92:19:ac:19:5e:fb:f2:c4:8d:d9:dd:cf:81:1e:5e:93: 8c:1d:7d:96:87:84:52:17:d2:a4:ad:ae:f5:32:29:8a:3a:61: 69:94:84:9b:c9:9e:60:2e:c8:ab:c0:bd:04:aa:24:de:d8:67: aa:10:99:a2:cf:e4:80:b0:a1:87:ce:4a:ba:c1:ef:a0:32:b7: 04:37:39:40:b8:31:1c:b3:3c:78:59:76:9c:31:de:02:7b:20: 8c:8d:be:c3:21:c2:5d:2d:57:85:23:bb:1d:fa:bb:a0:30:35: 91:41:f5:4d:e7:8f:76:36:d7:5a:e7:22:d5:e1:e9:42:db:73: 76:87:e7:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXW7AJn8K5PFKmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDhiZDljYjQtYzU1My00NzEyLTk2ODgtOGZjNmQ5MjBlNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbL2pYNmxSn94kRHaOYyMa0BCeCHMqZ9b1VX JEm8ivHw7ytziYfceQiPkKhlXGiTBkMJNJdZ+2S/YDtTLBYp+aZlsKktlAu1ZJ21 5OzuV/4z/2Tf7cAHOlXlpKBgiU+zPlPPBY808ZbpJ/lbihB58dauDtXYoNcZHCjy Z0YBlW6IG8598YV5i6mBux5aZxpy8AbJ3XWJ3XZ+W0Ysdydn3/Uj1JbjqJBapbWg D52v81mj0kwFHvQVqPLmvCKxy6Gi/vnlecOcFYcsWPzZ+JeOhPKTrlmuNvLpBU20 AKsiR7Y2m6gxjveeQPjQ7WH2FR4S5tIxSVqphn5vwbGHCBAuAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9gxEb2vFP72VieSVclzOo6Wx55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2E2Nzg5OTQtMTM4Zi0z NjQwLWEzMWMtMGM2MWNlODdjN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB8ciXUdO/bdkY7L1bA8M3Av15ghL0N4HU115YRH32XqyQsAXmJyR8B nWudCrHPYj17riAVOIqtOpo+ZZiRzw/V4hNcfC1wL0QckOdJzJi9RX2zbEos4MNY bOgeM7jDwh0SRZrZXaJ8djW0TrSfk+QVOL/582yMF/KHqv9L0qgDkhmsGV778sSN 2d3PgR5ek4wdfZaHhFIX0qStrvUyKYo6YWmUhJvJnmAuyKvAvQSqJN7YZ6oQmaLP 5ICwoYfOSrrB76AytwQ3OUC4MRyzPHhZdpwx3gJ7IIyNvsMhwl0tV4Ujux36u6Aw NZFB9U3nj3Y211rnItXh6ULbc3aH598= -----END CERTIFICATE-----Generated at Sun Sep 27 02:14:53 2026 by rpki-client