$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/225e5d2e-2893-357d-93ab-5e77ee163db5.roa File: 225e5d2e-2893-357d-93ab-5e77ee163db5.roa (raw, json) Hash identifier: 1rx2AKwvQrP2m2zPXCZmteceQGl1HUeazanaqOFxRmQ= Subject key identifier: 9B:CB:DF:38:56:10:B8:E0:84:B8:93:6C:F5:66:73:C4:E2:33:6F:4A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4989C7B5C0128322613B23C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/225e5d2e-2893-357d-93ab-5e77ee163db5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.20.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:c7:b5:c0:12:83:22:61:3b:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b4902cbf-7432-41a1-b6e8-ba893ba23690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0d:3a:7f:c6:d4:4e:ff:e8:94:89:62:a7:68: 3c:fa:ca:f7:d6:b5:90:5d:78:97:ec:6f:05:ae:f6: 0b:7f:66:b1:85:a8:2c:08:1e:82:cd:10:7a:51:29: 29:06:5c:35:1e:ca:0f:d3:63:a9:2b:f1:20:e7:15: c5:fe:ed:89:48:31:7b:b9:cf:ca:61:0f:b3:c6:79: 97:69:76:f5:14:22:56:a2:b4:9a:c2:6b:cb:1d:9a: 74:f6:27:0d:73:1b:e3:37:95:3c:9c:59:9c:71:b3: c6:9f:a6:5d:9f:d4:04:bf:74:49:9f:cc:4e:23:db: 83:87:72:db:50:47:eb:ba:0d:52:90:49:b6:ba:3c: a9:4f:56:f8:f1:8d:ac:fb:47:b8:f0:57:21:4e:3c: 70:00:c4:bd:c4:46:f5:c7:11:9c:f8:8d:f2:61:11: 29:44:55:a7:50:cf:1f:1d:9d:58:23:e7:b0:26:e8: be:98:a4:03:a1:6c:42:c1:bc:94:5e:3a:62:b4:09: 5e:08:a3:ca:a2:46:93:6c:41:a6:66:85:f0:54:e5: 1b:f0:6b:38:26:9e:09:c0:e9:31:53:a8:f0:2c:cc: 69:25:93:f8:32:9f:09:5a:b6:47:84:b1:d8:a1:e9: b8:14:12:63:9d:60:25:84:5d:da:9c:42:3e:72:49: cc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CB:DF:38:56:10:B8:E0:84:B8:93:6C:F5:66:73:C4:E2:33:6F:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/225e5d2e-2893-357d-93ab-5e77ee163db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:76:7c:2d:c4:a7:57:28:ba:12:9e:cb:1c:d8:3d:5d:fb:5b: a0:0b:dc:60:0b:cd:ce:49:c8:52:3b:c0:4a:36:51:ee:50:ff: 62:2d:72:58:d2:12:88:c1:48:7d:7d:1d:fd:39:2c:56:8e:17: 96:d3:20:64:f6:a1:2c:b7:4f:49:9b:d0:2e:93:ae:2c:4b:71: 80:1d:98:f6:c7:11:0a:62:8c:f3:7e:93:01:28:ae:11:78:4b: 66:cf:5d:55:d4:50:f1:63:f5:7b:d6:86:37:2b:de:df:13:00: 47:1f:09:04:f0:f1:4c:11:0b:9c:c7:3c:64:ff:67:4d:6e:68: 37:19:69:4a:04:4c:d7:5a:50:47:4e:12:c2:8d:b5:59:92:6d: 9c:3d:73:81:f6:14:ce:15:a8:ab:b9:22:1e:d2:bb:2c:c3:77: dc:eb:49:68:d3:ae:75:fa:c8:a4:d2:2a:da:10:11:82:3e:31: a5:f6:dc:4b:13:12:6e:cf:13:a5:66:f1:5d:2a:dc:e4:50:1c: f4:e4:0e:0b:e1:f7:71:6e:da:bf:91:ec:c5:21:71:c6:ce:51: 2f:65:54:d4:22:43:7d:a3:16:09:14:30:d2:66:c4:bd:43:1e: db:16:73:b9:87:57:a5:65:84:ae:cf:7f:e5:c1:ca:8d:1a:c5: eb:7f:27:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jice1wBKDImE7I8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjQ5MDJjYmYtNzQzMi00MWExLWI2ZTgtYmE4OTNiYTIzNjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg06f8bUTv/olIlip2g8+sr31rWQXXiX7G8F rvYLf2axhagsCB6CzRB6USkpBlw1HsoP02OpK/Eg5xXF/u2JSDF7uc/KYQ+zxnmX aXb1FCJWorSawmvLHZp09icNcxvjN5U8nFmccbPGn6Zdn9QEv3RJn8xOI9uDh3Lb UEfrug1SkEm2ujypT1b48Y2s+0e48FchTjxwAMS9xEb1xxGc+I3yYREpRFWnUM8f HZ1YI+ewJui+mKQDoWxCwbyUXjpitAleCKPKokaTbEGmZoXwVOUb8Gs4Jp4JwOkx U6jwLMxpJZP4Mp8JWrZHhLHYoem4FBJjnWAlhF3anEI+cknMfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvL3zhWELjghLiTbPVmc8TiM29KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjI1ZTVkMmUtMjg5My0z NTdkLTkzYWItNWU3N2VlMTYzZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl2fC3Ep1couhKeyxzYPV37W6AL3GALzc5JyFI7wEo2Ue5Q/2ItcljS EojBSH19Hf05LFaOF5bTIGT2oSy3T0mb0C6TrixLcYAdmPbHEQpijPN+kwEorhF4 S2bPXVXUUPFj9XvWhjcr3t8TAEcfCQTw8UwRC5zHPGT/Z01uaDcZaUoETNdaUEdO EsKNtVmSbZw9c4H2FM4VqKu5Ih7SuyzDd9zrSWjTrnX6yKTSKtoQEYI+MaX23EsT Em7PE6Vm8V0q3ORQHPTkDgvh93Fu2r+R7MUhccbOUS9lVNQiQ32jFgkUMNJmxL1D HtsWc7mHV6VlhK7Pf+XByo0axet/J9g= -----END CERTIFICATE-----Generated at Mon Oct 12 18:56:21 2026 by rpki-client