$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8524b35a-cc37-3774-9594-6c8bd6c6643d.roa File: 8524b35a-cc37-3774-9594-6c8bd6c6643d.roa (raw, json) Hash identifier: b++ST8KfeyBxex+RSXtbB8kKUxnXnoug+vV7Hm1jRoA= Subject key identifier: 87:3E:14:E1:E0:4C:20:44:2C:92:76:F0:E1:E6:5C:40:A3:03:E7:BE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F480D665B50945FF6C3C0CC00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8524b35a-cc37-3774-9594-6c8bd6c6643d.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.20.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:66:5b:50:94:5f:f6:c3:c0:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=55d397ef-5cbe-4174-acc0-8c35b16a5ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:20:a3:98:f1:2a:9d:45:e3:db:b9:1d:13:a3: 4e:78:46:03:7f:b3:cb:f0:f7:ac:4a:2f:76:87:10: 17:2d:88:0b:32:d2:87:06:43:de:65:e0:89:93:14: 61:83:8b:63:85:2a:39:88:99:0c:f4:ff:80:fb:67: 36:63:b4:91:61:f7:ef:83:8e:e7:78:40:49:a2:3d: 5a:1a:d7:c1:2c:81:ab:d6:e0:6a:d3:52:16:d8:d9: 51:51:69:13:18:2f:71:be:eb:10:c7:8a:aa:75:3c: 5d:b5:09:f5:39:b9:7c:80:46:22:ae:c6:ce:a3:88: 2a:a5:2b:1f:7b:18:42:9e:b0:db:15:70:85:b2:03: b4:ac:6d:5c:ca:ea:13:d8:6d:b3:68:8b:1c:f5:5e: 16:f9:53:b5:07:8e:fd:d6:01:28:34:fd:f0:2b:41: 74:f0:d6:37:01:ad:0f:9d:8b:f1:da:7e:09:57:2d: 7a:cd:f5:66:3f:65:f8:03:01:d0:71:54:a0:05:6f: 1a:8a:07:22:71:4b:31:a5:0d:fb:11:bc:bf:30:39: 8b:31:36:e0:03:6a:48:17:a2:b8:62:39:d0:4b:c6: b6:3b:08:11:5c:dd:0e:f6:48:c8:66:99:31:d4:7e: fd:57:6b:74:b1:79:f1:92:52:3e:aa:a3:e9:da:1b: 4f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3E:14:E1:E0:4C:20:44:2C:92:76:F0:E1:E6:5C:40:A3:03:E7:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8524b35a-cc37-3774-9594-6c8bd6c6643d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:fe:3f:60:9a:82:8f:a6:2f:aa:43:df:71:bc:13:af:8d:cb: 28:14:2e:79:3e:aa:33:49:50:6c:8b:b4:18:b3:98:33:20:9e: 77:9c:13:18:74:84:9c:84:d0:03:08:73:aa:45:36:00:0d:2d: dc:3c:d9:99:9a:5b:6e:72:cf:ff:6a:df:93:78:f4:b4:c9:da: f9:70:11:be:e1:41:f2:6a:58:48:1a:14:05:45:31:50:44:fd: 09:fd:18:13:50:c3:f0:ab:7e:8c:d2:b8:da:4f:cc:a7:9e:30: 70:46:3e:d4:00:f6:91:1b:6e:f1:47:b8:a7:7d:3d:f6:4a:1b: bb:ff:de:15:c9:bd:29:49:ae:5d:de:c0:90:f9:83:a5:73:f0: cf:8d:8b:3d:94:90:6b:41:51:2e:b8:eb:4b:28:39:8b:25:00: 1f:bd:bf:f4:97:c1:63:e1:74:f6:23:90:4f:ab:23:ee:14:8e: 80:f9:8d:56:7b:b0:8c:bb:d2:98:a3:6f:04:3d:d5:50:14:b8: 07:7e:ab:27:93:4e:e5:d1:82:f5:ef:03:24:88:cf:7a:32:4a: 28:d4:f0:d8:e6:05:63:8c:cc:60:f5:f8:fe:34:ac:0b:65:79: da:61:20:6b:a1:f9:f5:6a:59:63:96:03:73:18:c1:90:b1:1a: 5a:68:6d:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWZbUJRf9sPAzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk NTVkMzk3ZWYtNWNiZS00MTc0LWFjYzAtOGMzNWIxNmE1YWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiCjmPEqnUXj27kdE6NOeEYDf7PL8PesSi92 hxAXLYgLMtKHBkPeZeCJkxRhg4tjhSo5iJkM9P+A+2c2Y7SRYffvg47neEBJoj1a GtfBLIGr1uBq01IW2NlRUWkTGC9xvusQx4qqdTxdtQn1Obl8gEYirsbOo4gqpSsf exhCnrDbFXCFsgO0rG1cyuoT2G2zaIsc9V4W+VO1B4791gEoNP3wK0F08NY3Aa0P nYvx2n4JVy16zfVmP2X4AwHQcVSgBW8aigcicUsxpQ37Eby/MDmLMTbgA2pIF6K4 YjnQS8a2OwgRXN0O9kjIZpkx1H79V2t0sXnxklI+qqPp2htPHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIc+FOHgTCBELJJ28OHmXECjA+e+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODUyNGIzNWEtY2MzNy0z Nzc0LTk1OTQtNmM4YmQ2YzY2NDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRRWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz+P2Cago+mL6pD33G8E6+NyygULnk+qjNJUGyLtBizmDMgnnecExh0 hJyE0AMIc6pFNgANLdw82ZmaW25yz/9q35N49LTJ2vlwEb7hQfJqWEgaFAVFMVBE /Qn9GBNQw/CrfozSuNpPzKeeMHBGPtQA9pEbbvFHuKd9PfZKG7v/3hXJvSlJrl3e wJD5g6Vz8M+Niz2UkGtBUS6460soOYslAB+9v/SXwWPhdPYjkE+rI+4UjoD5jVZ7 sIy70pijbwQ91VAUuAd+qyeTTuXRgvXvAySIz3oySijU8NjmBWOMzGD1+P40rAtl edphIGuh+fVqWWOWA3MYwZCxGlpobRw= -----END CERTIFICATE-----Generated at Wed Oct 14 02:03:38 2026 by rpki-client