$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1dd3f3a-52d4-3ad8-be2d-85789a4bd46f.roa File: e1dd3f3a-52d4-3ad8-be2d-85789a4bd46f.roa (raw, json) Hash identifier: tfh1ec6aDKiwqlnfKXhyGd7U9e4C4qeADoP9s42H2rs= Subject key identifier: 9D:73:76:83:1A:41:9D:B0:E5:66:9A:34:A9:89:5E:E4:8A:C2:DC:E2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4112CD374DEEE01516B03780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1dd3f3a-52d4-3ad8-be2d-85789a4bd46f.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.20.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:cd:37:4d:ee:e0:15:16:b0:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=0610c303-de2f-4841-b738-9277c0ec61c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:49:24:a8:6d:99:9f:f3:8b:22:e5:9a:d6:5c: 43:db:c1:42:2c:46:10:11:23:b9:7c:a4:e0:f6:6a: 6f:f4:5c:03:9f:0b:00:5f:90:22:b9:89:79:ef:6f: ba:96:54:70:bf:1f:8f:6b:d1:ff:bc:1b:a9:5f:01: 27:87:1f:16:9f:89:d6:60:82:ba:1d:d0:0a:ce:09: 27:e8:06:51:b8:c9:b2:cb:8d:79:cf:14:d0:5e:95: dd:44:2c:af:65:23:62:d2:89:ed:83:00:4f:f9:61: 41:b1:e1:98:1e:7f:ed:4e:6c:9b:a0:c2:89:f3:fc: 92:2c:9c:9e:8b:e6:5f:85:04:cd:94:5d:cd:dd:b7: 6c:f1:15:15:82:02:c8:13:85:5e:51:5e:c9:6b:7c: c8:1a:a1:ee:42:12:74:ed:3c:81:3e:c9:49:d2:6b: ed:ab:fc:f2:19:34:9c:dc:6f:b7:f6:81:fa:9c:a7: 49:73:54:46:38:e3:4b:54:60:ac:88:3c:25:c3:68: 36:c4:11:a3:2f:43:15:d1:34:d6:df:e9:bb:92:40: f0:d5:3e:4f:d6:e5:0f:fb:21:4e:f1:ad:51:ee:b1: ab:39:84:7c:ae:f0:eb:bc:ca:43:64:c8:f7:17:c8: eb:5a:17:7c:e8:da:9c:5e:39:55:2b:7e:b8:00:28: 01:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:73:76:83:1A:41:9D:B0:E5:66:9A:34:A9:89:5E:E4:8A:C2:DC:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1dd3f3a-52d4-3ad8-be2d-85789a4bd46f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:06:54:a4:4f:5d:a1:66:7c:e1:8d:0b:b3:65:3c:13:98:0d: 19:4d:68:87:7c:3f:c5:1d:20:93:ab:a9:35:ba:12:84:c1:d2: 79:20:0f:3b:b4:51:fa:aa:dc:9e:18:25:84:26:29:10:fd:cb: 85:ca:a0:15:03:a9:6b:7c:f2:7d:44:68:95:e4:5c:c4:80:e3: 61:ee:e9:3c:57:dc:81:b8:6c:c2:48:20:a4:3e:ae:c3:aa:d3: f9:e3:fb:ff:25:dd:60:38:01:d1:db:a8:94:08:a2:3b:25:ed: 2b:c7:63:de:91:f7:09:b0:bc:2c:8c:96:61:1d:df:be:2c:ff: 68:dc:0a:77:2f:70:9a:6a:da:dc:45:0d:e3:05:9a:6f:4a:0f: e0:eb:0d:01:e7:6d:1f:77:74:aa:3d:65:1b:c4:61:39:e1:a2: ad:4d:8a:72:0e:fc:5b:e5:bf:49:51:1e:a0:ca:28:52:9b:dd: 47:ff:d9:bc:3c:66:1b:4e:af:47:cb:33:22:0a:54:22:8d:fb: bd:24:a2:0f:e6:b9:29:38:ed:64:24:40:c0:15:4e:61:e1:0f: a0:b5:9f:03:89:37:15:b3:27:c7:22:8f:93:98:73:e3:1b:b7: 85:2c:5e:77:20:2d:9a:c4:88:73:ad:c5:43:df:07:ce:72:98: fb:0f:54:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEs03Te7gFRawN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk MDYxMGMzMDMtZGUyZi00ODQxLWI3MzgtOTI3N2MwZWM2MWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60kkqG2Zn/OLIuWa1lxD28FCLEYQESO5fKTg 9mpv9FwDnwsAX5AiuYl572+6llRwvx+Pa9H/vBupXwEnhx8Wn4nWYIK6HdAKzgkn 6AZRuMmyy415zxTQXpXdRCyvZSNi0ontgwBP+WFBseGYHn/tTmyboMKJ8/ySLJye i+ZfhQTNlF3N3bds8RUVggLIE4VeUV7Ja3zIGqHuQhJ07TyBPslJ0mvtq/zyGTSc 3G+39oH6nKdJc1RGOONLVGCsiDwlw2g2xBGjL0MV0TTW3+m7kkDw1T5P1uUP+yFO 8a1R7rGrOYR8rvDrvMpDZMj3F8jrWhd86NqcXjlVK364ACgBUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1zdoMaQZ2w5WaaNKmJXuSKwtziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTFkZDNmM2EtNTJkNC0z YWQ4LWJlMmQtODU3ODlhNGJkNDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0GVKRPXaFmfOGNC7NlPBOYDRlNaId8P8UdIJOrqTW6EoTB0nkgDzu0 Ufqq3J4YJYQmKRD9y4XKoBUDqWt88n1EaJXkXMSA42Hu6TxX3IG4bMJIIKQ+rsOq 0/nj+/8l3WA4AdHbqJQIojsl7SvHY96R9wmwvCyMlmEd374s/2jcCncvcJpq2txF DeMFmm9KD+DrDQHnbR93dKo9ZRvEYTnhoq1NinIO/Fvlv0lRHqDKKFKb3Uf/2bw8 ZhtOr0fLMyIKVCKN+70kog/muSk47WQkQMAVTmHhD6C1nwOJNxWzJ8cij5OYc+Mb t4UsXncgLZrEiHOtxUPfB85ymPsPVGM= -----END CERTIFICATE-----Generated at Tue Sep 22 09:50:50 2026 by rpki-client