$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29a8574e-06d4-3b65-b5a4-0327be34f8e8.roa File: 29a8574e-06d4-3b65-b5a4-0327be34f8e8.roa (raw, json) Hash identifier: VmnXosZ7XLs/rbT11lV/+9SDUJAEyjhTeVc82YtZz5g= Subject key identifier: 4E:C3:CA:00:B0:FB:7A:77:9D:B1:80:27:6B:3B:C1:9D:EB:EB:3B:15 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F5FC801BF4E2FC1B62E4AC440 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29a8574e-06d4-3b65-b5a4-0327be34f8e8.roa Signing time: Sat 03 Oct 2026 01:00:12 +0000 ROA not before: Sat 03 Oct 2026 01:00:12 +0000 ROA not after: Fri 01 Jan 2027 02:00:12 +0000 asID: 19905 IP address blocks: 173.20.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5f:c8:01:bf:4e:2f:c1:b6:2e:4a:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:12 2026 GMT Not After : Jan 1 02:00:12 2027 GMT Subject: CN=cc8aeaec-35e8-476a-9669-e017a46f87d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:4f:ae:f7:8d:1c:14:e5:38:fe:e6:29:d7: 83:5c:e4:0f:7f:cd:c8:b3:96:62:25:8a:48:cc:49: 69:e6:27:a5:21:4f:8f:f8:63:96:57:8e:8a:fa:d6: 53:4c:08:25:9b:15:d4:77:1a:52:e0:04:06:63:7b: 00:cf:5d:27:19:af:3a:10:4d:43:8d:d6:a1:f7:35: 36:37:fd:17:12:c4:29:b6:c3:87:62:ce:e8:41:fe: 98:18:a1:9d:cc:59:69:0a:06:6d:a4:ba:31:9b:27: 2b:71:8a:ac:59:84:5d:f3:39:26:af:2c:31:b8:09: 44:96:34:06:8d:45:54:98:89:0c:57:01:6a:9e:dd: 5e:2d:83:37:9a:f9:f4:db:1a:9f:14:aa:30:c3:c9: f0:6a:6f:be:a4:15:08:64:1c:09:7d:e0:9c:51:e6: b3:cc:d2:1a:96:79:2d:c0:cd:d3:07:ec:ad:15:2a: ad:77:88:bd:ea:0f:00:04:e1:75:d7:78:31:21:e3: 3a:ae:84:29:5b:2c:19:97:a7:5e:77:99:99:1b:a3: 23:35:bb:f1:e0:24:c5:ce:98:37:ed:b0:c5:31:69: 53:7c:96:f3:02:6a:e7:c7:5f:85:54:9b:2e:6c:6e: a1:7e:ae:0d:c3:5f:92:8e:60:9d:d9:10:98:f2:38: 14:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C3:CA:00:B0:FB:7A:77:9D:B1:80:27:6B:3B:C1:9D:EB:EB:3B:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/29a8574e-06d4-3b65-b5a4-0327be34f8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1f:17:13:e5:a3:78:a4:5a:91:7d:92:6c:4e:cf:d4:ff:eb: 2a:02:78:ec:f7:27:1e:e9:9d:fb:f4:c0:b6:3b:bb:22:77:7b: 8e:f6:f6:26:a3:32:f6:88:6d:44:95:e4:3f:1e:d1:e2:9f:93: cd:c7:5a:0e:51:95:6d:d5:76:8e:d9:00:ec:50:91:8b:71:04: b1:88:65:34:16:aa:72:c5:af:ff:ec:d2:e4:0e:3f:72:c4:6f: 80:3c:d5:64:8f:13:ee:5f:a0:d6:ea:97:a8:20:7a:8d:60:7a: 2d:92:a4:22:d8:7b:27:45:8c:e5:50:8a:1a:d7:c5:43:9e:fb: 8c:07:02:3e:d9:70:bd:e6:79:04:bf:90:00:32:0c:57:33:68: 93:62:6c:66:d8:4d:66:ba:92:b1:53:f0:83:6c:43:3f:b7:0e: 32:54:c5:8a:e7:93:19:8b:d5:4b:46:31:69:0c:0d:2c:34:d6: d5:95:c5:8a:b7:2a:85:91:67:76:86:eb:4e:2c:9e:ee:a4:88: dc:98:b2:9e:90:4e:5f:03:3a:20:e6:cc:a5:ee:16:9a:d2:e9: 12:fd:2c:a9:ff:75:71:de:08:ea:53:c9:db:9b:88:81:cc:ac: 20:e8:6c:71:dd:46:05:e2:f3:09:aa:f4:9d:f2:e6:8d:bf:b7: 95:cc:4e:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9fyAG/Ti/Bti5KxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAwMzAxMDAxMloXDTI3MDEwMTAyMDAxMlowLzEtMCsGA1UEAxMk Y2M4YWVhZWMtMzVlOC00NzZhLTk2NjktZTAxN2E0NmY4N2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW9PrveNHBTlOP7mKdeDXOQPf83Is5ZiJYpI zElp5ielIU+P+GOWV46K+tZTTAglmxXUdxpS4AQGY3sAz10nGa86EE1Djdah9zU2 N/0XEsQptsOHYs7oQf6YGKGdzFlpCgZtpLoxmycrcYqsWYRd8zkmrywxuAlEljQG jUVUmIkMVwFqnt1eLYM3mvn02xqfFKoww8nwam++pBUIZBwJfeCcUeazzNIalnkt wM3TB+ytFSqtd4i96g8ABOF113gxIeM6roQpWywZl6ded5mZG6MjNbvx4CTFzpg3 7bDFMWlTfJbzAmrnx1+FVJsubG6hfq4Nw1+SjmCd2RCY8jgUiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7DygCw+3p3nbGAJ2s7wZ3r6zsVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjlhODU3NGUtMDZkNC0z YjY1LWI1YTQtMDMyN2JlMzRmOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMfFxPlo3ikWpF9kmxOz9T/6yoCeOz3Jx7pnfv0wLY7uyJ3e4729iaj MvaIbUSV5D8e0eKfk83HWg5RlW3Vdo7ZAOxQkYtxBLGIZTQWqnLFr//s0uQOP3LE b4A81WSPE+5foNbql6ggeo1gei2SpCLYeydFjOVQihrXxUOe+4wHAj7ZcL3meQS/ kAAyDFczaJNibGbYTWa6krFT8INsQz+3DjJUxYrnkxmL1UtGMWkMDSw01tWVxYq3 KoWRZ3aG604snu6kiNyYsp6QTl8DOiDmzKXuFprS6RL9LKn/dXHeCOpTydubiIHM rCDobHHdRgXi8wmq9J3y5o2/t5XMTkI= -----END CERTIFICATE-----Generated at Mon Oct 12 04:40:58 2026 by rpki-client