$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f9224ae-5e9e-3e1b-9241-6e115e8f90e5.roa File: 3f9224ae-5e9e-3e1b-9241-6e115e8f90e5.roa (raw, json) Hash identifier: 0/0+fsh1tn+UEdN2S8QA+gCPEjJKknxP99oC6wRWOxg= Subject key identifier: 15:28:78:48:53:4B:3F:17:BE:09:8D:17:BF:94:19:E0:C4:C5:F7:95 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4987767ADD1956774E4E6600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f9224ae-5e9e-3e1b-9241-6e115e8f90e5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.20.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:76:7a:dd:19:56:77:4e:4e:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f04d8f2e-ec1e-44bd-b3dc-e68e8cf50a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ff:93:79:6e:16:00:6e:70:da:8b:6c:db:90: 64:46:b2:c7:45:38:5d:fd:2e:ef:ba:9c:6b:f4:49: c8:87:3b:cd:2e:b0:88:64:fe:24:e5:6a:e6:0b:bb: 63:6a:ad:4c:08:9b:f7:97:0f:aa:e2:0f:3c:9c:8b: d2:be:c9:03:ac:b6:ea:5d:ef:1d:e8:21:81:33:bd: c0:eb:93:3c:04:3a:d5:6a:fe:7a:86:b7:91:d0:62: e4:2e:2a:53:82:cf:42:9c:55:0f:84:d1:7c:1c:8d: 2c:be:9e:fa:e9:2d:a5:9b:79:a6:43:29:4f:cc:6d: 5b:1c:c6:4a:54:0f:d2:28:40:93:04:2f:9c:42:37: 03:0c:fa:b3:6d:60:0d:9e:79:09:37:47:1b:ac:5c: d3:24:94:86:65:de:04:73:30:d3:5d:b4:5f:8e:d0: a9:83:e8:d1:f7:94:73:f0:cc:3b:41:f0:32:b1:44: 33:ec:a4:df:bc:8f:93:43:f1:1a:d3:c3:7b:d6:8d: 46:82:91:75:42:76:1c:b2:71:bd:16:6f:70:1d:58: 31:cd:8a:d4:c7:a0:a9:32:02:58:5d:28:b9:27:b4: 7f:bc:9a:e0:9f:67:3e:5d:84:54:76:d9:10:30:8b: ae:e4:54:05:e3:86:6e:26:7d:d4:3d:16:20:e5:e8: c8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:28:78:48:53:4B:3F:17:BE:09:8D:17:BF:94:19:E0:C4:C5:F7:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f9224ae-5e9e-3e1b-9241-6e115e8f90e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:03:5a:de:59:5c:9c:e8:10:8b:f0:1a:55:08:37:f3:54:58: f0:1e:8a:89:ba:67:c7:63:d0:e9:49:39:a2:29:c1:22:fc:06: 78:ce:93:c1:d2:47:44:ee:02:52:ee:f4:1b:e5:0d:d1:93:24: 7d:b4:fc:85:7e:e7:aa:8d:dc:5c:0d:00:07:68:5e:c3:98:01: ad:af:02:97:40:e4:a9:16:7f:d7:29:73:64:d2:b9:33:df:15: 3b:63:96:30:fb:c2:c1:2c:2e:aa:1f:a4:bb:34:a7:13:62:55: 1c:96:61:76:0a:89:8a:e7:49:89:d1:b7:74:df:ee:9a:02:f6: e7:61:9d:c7:9b:d1:b2:f3:6f:eb:b8:b2:ed:14:d5:03:88:f8: f7:22:83:84:d2:a4:f3:12:0e:a1:42:43:20:83:b8:67:34:a0: f9:46:91:a7:61:f0:60:92:28:4f:27:64:4a:4e:9d:f0:3d:ca: a3:21:f3:28:4c:05:08:a3:06:cb:3f:c7:0f:4b:f4:87:10:20: 97:bd:97:2c:f7:82:8c:6a:8d:ba:72:b9:4a:30:f4:d1:be:b3: 26:06:59:8c:a5:ad:7d:2e:79:9d:6a:6d:48:49:e0:ba:f2:04: 3a:ac:e2:23:01:95:73:bb:1c:30:e4:40:bc:62:c0:27:aa:05: fc:5f:21:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh3Z63RlWd05OZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjA0ZDhmMmUtZWMxZS00NGJkLWIzZGMtZTY4ZThjZjUwYTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/+TeW4WAG5w2ots25BkRrLHRThd/S7vupxr 9EnIhzvNLrCIZP4k5WrmC7tjaq1MCJv3lw+q4g88nIvSvskDrLbqXe8d6CGBM73A 65M8BDrVav56hreR0GLkLipTgs9CnFUPhNF8HI0svp766S2lm3mmQylPzG1bHMZK VA/SKECTBC+cQjcDDPqzbWANnnkJN0cbrFzTJJSGZd4EczDTXbRfjtCpg+jR95Rz 8Mw7QfAysUQz7KTfvI+TQ/Ea08N71o1GgpF1QnYcsnG9Fm9wHVgxzYrUx6CpMgJY XSi5J7R/vJrgn2c+XYRUdtkQMIuu5FQF44ZuJn3UPRYg5ejIwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUoeEhTSz8XvgmNF7+UGeDExfeVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Y5MjI0YWUtNWU5ZS0z ZTFiLTkyNDEtNmUxMTVlOGY5MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRTUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQDWt5ZXJzoEIvwGlUIN/NUWPAeiom6Z8dj0OlJOaIpwSL8BnjOk8HS R0TuAlLu9BvlDdGTJH20/IV+56qN3FwNAAdoXsOYAa2vApdA5KkWf9cpc2TSuTPf FTtjljD7wsEsLqofpLs0pxNiVRyWYXYKiYrnSYnRt3Tf7poC9udhnceb0bLzb+u4 su0U1QOI+Pcig4TSpPMSDqFCQyCDuGc0oPlGkadh8GCSKE8nZEpOnfA9yqMh8yhM BQijBss/xw9L9IcQIJe9lyz3goxqjbpyuUow9NG+syYGWYylrX0ueZ1qbUhJ4Lry BDqs4iMBlXO7HDDkQLxiwCeqBfxfIcA= -----END CERTIFICATE-----Generated at Sun Oct 11 23:38:11 2026 by rpki-client