$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf4fda82-e2e9-343a-9f86-c070e4061099.roa File: cf4fda82-e2e9-343a-9f86-c070e4061099.roa (raw, json) Hash identifier: FDWhZIlE9HWFY57vnO2cQ3Zcm406Xn04e4kjvF9159w= Subject key identifier: 99:7F:6B:DF:65:6E:4A:71:FF:06:2D:C4:98:1E:16:F6:E8:A1:20:D8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498AE0828C034367110D4300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf4fda82-e2e9-343a-9f86-c070e4061099.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.20.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:e0:82:8c:03:43:67:11:0d:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=092ead5a-f5f7-473d-b6ef-e8a6042a8b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d3:db:97:08:8e:61:40:ba:38:12:7a:eb:dd: 8d:d2:b7:d0:2b:71:2b:9a:01:83:c0:ac:ff:0f:4b: 89:69:22:e7:74:5f:f6:a0:59:fa:02:9e:8a:f9:b0: 4e:47:01:9c:48:41:09:4f:5e:fa:91:7b:e9:f3:8b: 97:cc:3b:b7:7d:a6:e1:94:c3:f0:ff:06:b8:ee:a8: cb:ab:75:62:77:62:91:84:0a:6f:f9:c3:e7:ef:1d: 96:ca:34:00:91:4c:21:f7:e6:22:d6:64:b1:64:fd: 54:06:68:89:03:29:8a:54:d9:cc:8f:27:f8:55:f7: 37:1d:69:bf:f9:76:3a:f8:60:66:25:e4:f8:3b:36: e1:b8:73:52:21:f5:7a:d4:b4:8e:cf:dc:33:b4:a9: 78:b2:9b:fc:3b:60:6f:71:2f:21:12:2a:1e:55:87: 1e:9d:b8:d8:bc:f7:30:fd:58:8a:0f:21:2d:d0:09: bc:3a:8d:f6:aa:61:18:d5:1e:31:5a:40:41:dd:04: cc:07:54:7d:34:fb:b8:b1:9a:6f:cb:ae:42:e8:3c: 00:1b:a9:8b:18:39:07:d4:6f:a5:d5:d9:6a:24:ed: d9:68:91:58:6b:fc:3e:ce:1e:17:5f:79:c4:e4:4e: 1e:ea:85:92:8e:83:5e:4a:cb:db:05:50:36:7d:ae: 2a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7F:6B:DF:65:6E:4A:71:FF:06:2D:C4:98:1E:16:F6:E8:A1:20:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf4fda82-e2e9-343a-9f86-c070e4061099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f6:d5:ec:26:ce:7a:1e:92:d1:08:d2:39:81:af:48:2b:95: cd:1f:cb:0d:e7:b2:dd:c2:5d:38:6e:cb:09:22:fe:34:1d:a5: c0:63:04:12:a7:47:46:16:3f:b7:8b:3d:ba:c1:f2:2a:c1:2b: 17:25:f7:9a:a5:38:0e:fe:c4:d1:a5:9d:26:22:55:6f:dc:2b: bd:52:f1:db:54:2d:7e:cf:70:de:8e:96:d5:da:f5:ce:f1:45: 30:78:8a:b6:ee:24:8b:de:4a:9f:e2:75:51:2d:79:f8:09:12: 07:20:5b:ef:76:04:90:58:dc:b8:37:bb:ea:db:ef:e7:61:99: ee:fc:ad:c8:3b:4d:f0:de:27:70:4a:12:48:43:c3:cc:9b:6a: d6:71:a2:a0:cc:7c:e8:26:66:db:60:9e:84:91:31:87:58:99: d8:53:88:31:c6:6a:0d:83:58:d1:32:06:c2:44:77:b2:58:82: 92:e3:76:ba:a6:bc:e7:df:0d:84:e1:94:4e:84:20:2d:4d:89: a1:57:26:de:f7:13:f1:b5:b5:63:14:5f:0b:ab:5e:96:e0:1b: 68:39:f8:9a:e0:94:6d:9e:f6:2d:61:91:e7:5c:96:ea:fb:3f: cc:05:5f:92:0b:d1:33:31:63:9b:e4:64:70:15:23:63:7f:40: 2a:2a:9f:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiuCCjANDZxENQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDkyZWFkNWEtZjVmNy00NzNkLWI2ZWYtZThhNjA0MmE4YjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdPblwiOYUC6OBJ6692N0rfQK3ErmgGDwKz/ D0uJaSLndF/2oFn6Ap6K+bBORwGcSEEJT176kXvp84uXzDu3fabhlMPw/wa47qjL q3Vid2KRhApv+cPn7x2WyjQAkUwh9+Yi1mSxZP1UBmiJAymKVNnMjyf4Vfc3HWm/ +XY6+GBmJeT4OzbhuHNSIfV61LSOz9wztKl4spv8O2BvcS8hEioeVYcenbjYvPcw /ViKDyEt0Am8Oo32qmEY1R4xWkBB3QTMB1R9NPu4sZpvy65C6DwAG6mLGDkH1G+l 1dlqJO3ZaJFYa/w+zh4XX3nE5E4e6oWSjoNeSsvbBVA2fa4qmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJl/a99lbkpx/wYtxJgeFvbooSDYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y0ZmRhODItZTJlOS0z NDNhLTlmODYtYzA3MGU0MDYxMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/21ewmznoektEI0jmBr0grlc0fyw3nst3CXThuywki/jQdpcBjBBKn R0YWP7eLPbrB8irBKxcl95qlOA7+xNGlnSYiVW/cK71S8dtULX7PcN6OltXa9c7x RTB4irbuJIveSp/idVEtefgJEgcgW+92BJBY3Lg3u+rb7+dhme78rcg7TfDeJ3BK EkhDw8ybatZxoqDMfOgmZttgnoSRMYdYmdhTiDHGag2DWNEyBsJEd7JYgpLjdrqm vOffDYThlE6EIC1NiaFXJt73E/G1tWMUXwurXpbgG2g5+JrglG2e9i1hkedclur7 P8wFX5IL0TMxY5vkZHAVI2N/QCoqnyE= -----END CERTIFICATE-----Generated at Thu Oct 15 00:18:06 2026 by rpki-client