$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a99687b-af60-3752-963d-1fa077514245.roa File: 8a99687b-af60-3752-963d-1fa077514245.roa (raw, json) Hash identifier: 8mzuemEwsgrFY7PznyVq0JumMP+P1waZNPnjhWWnwmg= Subject key identifier: 16:AC:4B:04:73:10:AF:3B:59:1C:B6:51:06:3A:79:1A:F0:20:8F:3E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F6AF2BBBFADBE983A1F9BAF90 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a99687b-af60-3752-963d-1fa077514245.roa Signing time: Wed 07 Oct 2026 01:00:12 +0000 ROA not before: Wed 07 Oct 2026 01:00:12 +0000 ROA not after: Tue 05 Jan 2027 02:00:12 +0000 asID: 19905 IP address blocks: 173.20.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6a:f2:bb:bf:ad:be:98:3a:1f:9b:af:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 7 01:00:12 2026 GMT Not After : Jan 5 02:00:12 2027 GMT Subject: CN=c96ee41d-52eb-4a33-bbfa-ef2ad3b837c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:74:f9:1d:ea:df:a5:28:b0:87:4e:32:85: 7e:ee:d0:7f:4a:ca:69:81:f7:27:f0:6d:7d:35:6d: c1:1d:69:ec:ba:f1:3e:d8:0f:eb:4a:c4:f9:63:a7: f9:34:b0:ad:7f:7c:1e:44:17:e7:00:47:24:c9:5e: 81:e4:65:cf:8e:53:25:78:cd:06:1f:9c:db:80:a8: f1:5d:a5:12:11:ae:eb:28:ac:4a:5a:29:88:1e:ed: 49:77:94:90:b9:c1:4c:ce:67:9e:27:f0:d8:30:95: 7a:ac:31:56:a4:62:dc:9e:20:53:3b:9e:bb:72:9c: 9a:c5:11:3e:5a:1a:72:68:9c:06:98:63:70:f0:17: 7f:96:98:83:8f:ca:18:6c:53:e6:53:cc:85:d3:87: 6b:90:ad:93:e2:01:9a:fd:f6:95:81:67:48:98:d4: 36:8a:36:d0:fc:80:10:f8:9f:6e:44:3b:1f:91:e4: be:8b:53:ba:d2:74:5c:54:c4:bf:66:7a:6e:63:cc: b0:c5:5b:e3:ac:62:19:9d:5e:59:ae:4b:82:e8:fb: a1:5b:eb:45:83:42:b4:91:70:61:1e:71:0e:7c:1e: 82:ae:f9:05:01:24:a3:8e:b3:30:9c:37:7c:2a:f3: 51:ea:9b:5f:7f:d8:cc:e8:70:57:fd:82:98:20:55: 60:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AC:4B:04:73:10:AF:3B:59:1C:B6:51:06:3A:79:1A:F0:20:8F:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a99687b-af60-3752-963d-1fa077514245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:34:8d:34:86:4c:86:7a:64:f9:79:97:29:7e:d0:cb:12:34: c6:3c:43:6d:cd:d5:04:8a:30:0b:9c:6b:0b:da:d3:2c:49:7f: 2a:86:fd:78:94:2d:66:42:db:86:fc:78:3e:c9:f4:f9:b0:af: 62:7f:bf:bc:c0:19:49:54:5f:87:01:6a:5c:87:61:45:ec:ae: 82:b2:94:2c:08:80:b0:7e:55:ea:df:2c:6c:7a:93:d6:9b:8f: 8c:ba:a8:27:4a:43:9c:62:a8:5a:bd:46:a5:47:eb:9c:dc:2b: 32:e6:bd:fa:41:24:02:96:cc:e9:43:53:cc:d8:26:42:e0:dc: c3:a8:f9:74:2c:c7:56:5c:45:9a:12:f7:3e:47:c4:5f:17:ad: 58:26:22:e6:be:a2:bd:da:a1:80:d3:6c:d6:7a:74:a0:13:80: f5:e0:e0:1b:9f:d2:83:3c:3d:59:7d:a3:9d:89:64:22:1f:43: 26:3e:98:0b:26:3e:cc:28:61:87:84:30:c8:78:a2:08:dd:ed: c0:39:72:a0:96:88:15:e2:38:e7:47:c0:1c:50:c7:7f:df:76: 15:e0:e3:0e:d0:d5:ba:ff:0f:51:6c:a1:55:75:72:d4:d0:1e: b3:ba:04:5a:bd:25:f8:5e:a2:3b:a7:28:41:34:4e:da:c3:63: 01:bd:7f:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9q8ru/rb6YOh+br5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAwNzAxMDAxMloXDTI3MDEwNTAyMDAxMlowLzEtMCsGA1UEAxMk Yzk2ZWU0MWQtNTJlYi00YTMzLWJiZmEtZWYyYWQzYjgzN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPJ0+R3q36UosIdOMoV+7tB/Ssppgfcn8G19 NW3BHWnsuvE+2A/rSsT5Y6f5NLCtf3weRBfnAEckyV6B5GXPjlMleM0GH5zbgKjx XaUSEa7rKKxKWimIHu1Jd5SQucFMzmeeJ/DYMJV6rDFWpGLcniBTO567cpyaxRE+ WhpyaJwGmGNw8Bd/lpiDj8oYbFPmU8yF04drkK2T4gGa/faVgWdImNQ2ijbQ/IAQ +J9uRDsfkeS+i1O60nRcVMS/ZnpuY8ywxVvjrGIZnV5ZrkuC6PuhW+tFg0K0kXBh HnEOfB6CrvkFASSjjrMwnDd8KvNR6ptff9jM6HBX/YKYIFVgPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBasSwRzEK87WRy2UQY6eRrwII8+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGE5OTY4N2ItYWY2MC0z NzUyLTk2M2QtMWZhMDc3NTE0MjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRR0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAI0jTSGTIZ6ZPl5lyl+0MsSNMY8Q23N1QSKMAucawva0yxJfyqG/XiU LWZC24b8eD7J9Pmwr2J/v7zAGUlUX4cBalyHYUXsroKylCwIgLB+VerfLGx6k9ab j4y6qCdKQ5xiqFq9RqVH65zcKzLmvfpBJAKWzOlDU8zYJkLg3MOo+XQsx1ZcRZoS 9z5HxF8XrVgmIua+or3aoYDTbNZ6dKATgPXg4Buf0oM8PVl9o52JZCIfQyY+mAsm PswoYYeEMMh4ogjd7cA5cqCWiBXiOOdHwBxQx3/fdhXg4w7Q1br/D1FsoVV1ctTQ HrO6BFq9JfheojunKEE0TtrDYwG9fwk= -----END CERTIFICATE-----Generated at Mon Oct 12 12:47:32 2026 by rpki-client