$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a8a1aef-d3c9-3407-be99-5421100118d0.roa File: 8a8a1aef-d3c9-3407-be99-5421100118d0.roa (raw, json) Hash identifier: icxwKDiRm6Bi7Kp1ow7GA8wLT7/ZKFAQiPGb3+M0YV4= Subject key identifier: BE:06:38:B4:95:06:BC:DE:EC:B7:66:01:06:D2:BC:11:37:D2:62:29 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EDDF7442F5D8714142BB9F880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a8a1aef-d3c9-3407-be99-5421100118d0.roa Signing time: Mon 17 Aug 2026 13:00:11 +0000 ROA not before: Mon 17 Aug 2026 13:00:11 +0000 ROA not after: Sun 15 Nov 2026 14:00:11 +0000 asID: 30036 IP address blocks: 173.20.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:f7:44:2f:5d:87:14:14:2b:b9:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 17 13:00:11 2026 GMT Not After : Nov 15 14:00:11 2026 GMT Subject: CN=261442c3-4b3c-47a4-b82c-ff03159bd725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1a:1a:79:a4:3c:04:f2:ed:4c:b7:60:f8:ea: 09:6a:f1:90:e0:89:d5:41:74:a3:04:7f:2c:7c:13: 9c:f8:02:97:dd:00:90:90:47:98:51:c7:4d:53:ce: 2d:05:0b:17:76:58:90:57:04:1a:69:6e:e8:70:c4: 10:66:13:dc:8d:99:eb:25:30:29:f4:eb:9b:75:89: f6:76:d4:4f:34:95:53:5d:14:4c:07:e2:c1:b2:f4: bf:2e:0f:82:d7:99:c2:00:a5:18:4f:82:17:f1:72: 51:56:c8:39:4e:98:fd:60:cc:e0:e3:a0:12:73:9d: 5e:4d:da:a0:c7:a6:b8:64:3f:d8:0a:36:62:95:a3: 6e:ce:64:3d:2c:fc:28:22:9e:43:14:89:92:b7:d8: 39:51:35:68:a4:ef:bd:a0:4a:aa:a6:00:f2:e6:d2: a5:0d:ce:b4:7c:04:72:4b:aa:1c:b6:6a:33:aa:7f: 82:02:ba:bc:ce:43:86:17:e1:0a:56:ee:1c:97:d3: d0:4a:6c:e7:04:87:cc:64:e0:c9:f0:32:2f:25:ff: fa:b2:9a:b9:35:1f:01:b7:ba:7d:de:a8:99:9f:b2: e1:0a:05:06:93:aa:14:98:ed:d7:50:c7:34:16:22: ad:0b:20:d7:2c:e8:7b:bd:9b:40:da:db:0a:ac:96: c9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:06:38:B4:95:06:BC:DE:EC:B7:66:01:06:D2:BC:11:37:D2:62:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a8a1aef-d3c9-3407-be99-5421100118d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:95:3d:97:ae:66:9b:8a:b9:16:e0:1a:c2:21:e7:aa:c9:96: 4a:79:46:29:b2:7a:ae:b0:51:1b:e4:05:8a:b9:79:8c:de:a1: 66:44:0b:ab:54:11:ca:78:26:e3:31:91:42:3d:6e:40:7e:6a: 13:55:4d:30:45:cb:ae:fd:e7:5c:c6:d2:43:50:a2:e5:55:dd: 16:fb:a4:6b:a0:7a:0a:48:0f:a6:af:5b:54:d0:41:50:d2:cf: ab:93:b0:f9:e3:a2:d4:7b:31:f7:be:ce:40:bc:cb:66:7b:c9: cd:64:d3:09:3a:8b:0e:1a:7c:8a:c6:d5:95:82:7e:81:68:32: 87:88:79:f8:61:43:57:6d:c3:02:ab:56:af:b9:f3:7a:a1:c4: 0b:09:7d:da:45:14:de:1f:49:ee:fd:5b:07:da:35:9c:e8:1f: d3:90:2a:2e:ed:ad:c2:8a:71:26:cc:98:ba:ef:08:30:ea:ea: 78:98:82:25:c9:a3:2e:66:59:e1:c2:d8:06:03:b9:1c:f2:32: 83:ed:9c:2b:91:71:c9:33:c8:eb:13:6f:be:d4:66:66:b2:0e: 33:4f:5c:ef:d8:1e:ad:77:66:e9:53:62:81:f9:2e:a6:2f:28: e1:84:d1:c4:7b:94:60:c9:91:dc:1f:88:8f:e3:6d:8f:6e:be: 72:98:e7:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d90QvXYcUFCu5+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk MjYxNDQyYzMtNGIzYy00N2E0LWI4MmMtZmYwMzE1OWJkNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhoaeaQ8BPLtTLdg+OoJavGQ4InVQXSjBH8s fBOc+AKX3QCQkEeYUcdNU84tBQsXdliQVwQaaW7ocMQQZhPcjZnrJTAp9OubdYn2 dtRPNJVTXRRMB+LBsvS/Lg+C15nCAKUYT4IX8XJRVsg5Tpj9YMzg46ASc51eTdqg x6a4ZD/YCjZilaNuzmQ9LPwoIp5DFImSt9g5UTVopO+9oEqqpgDy5tKlDc60fARy S6octmozqn+CArq8zkOGF+EKVu4cl9PQSmznBIfMZODJ8DIvJf/6spq5NR8Bt7p9 3qiZn7LhCgUGk6oUmO3XUMc0FiKtCyDXLOh7vZtA2tsKrJbJaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4GOLSVBrze7LdmAQbSvBE30mIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGE4YTFhZWYtZDNjOS0z NDA3LWJlOTktNTQyMTEwMDExOGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyVPZeuZpuKuRbgGsIh56rJlkp5Rimyeq6wURvkBYq5eYzeoWZEC6tU Ecp4JuMxkUI9bkB+ahNVTTBFy67951zG0kNQouVV3Rb7pGugegpID6avW1TQQVDS z6uTsPnjotR7Mfe+zkC8y2Z7yc1k0wk6iw4afIrG1ZWCfoFoMoeIefhhQ1dtwwKr Vq+583qhxAsJfdpFFN4fSe79WwfaNZzoH9OQKi7trcKKcSbMmLrvCDDq6niYgiXJ oy5mWeHC2AYDuRzyMoPtnCuRcckzyOsTb77UZmayDjNPXO/YHq13ZulTYoH5LqYv KOGE0cR7lGDJkdwfiI/jbY9uvnKY5yQ= -----END CERTIFICATE-----Generated at Fri Aug 21 01:45:12 2026 by rpki-client