$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa File: d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa (raw, json) Hash identifier: eS1+NmIbE4RPuz02jNlElre8Pyg3p/GnsIyj+fQlW/0= Subject key identifier: 35:80:21:98:40:E9:B5:E4:C2:9D:1C:CC:C7:BD:23:78:02:91:F6:1D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F5E62E2BFE954E76DF46A0980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 19905 IP address blocks: 173.20.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e2:bf:e9:54:e7:6d:f4:6a:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=ba5e7161-190e-4edb-a9fd-0c376340c19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a4:72:af:eb:98:23:3c:ca:1f:a1:a8:98:2a: 0e:fb:ce:38:eb:ff:bc:c5:ae:64:c9:5c:e8:1c:7b: 8c:ce:10:00:11:67:35:40:f1:8e:f0:3f:59:0a:9b: 32:8a:4b:c6:e4:a0:72:7b:fc:c5:25:a5:d8:ed:9c: 2c:67:17:79:15:be:46:33:f2:da:e1:d3:cb:d9:45: 07:2e:4f:f3:bb:f3:78:ab:97:5b:4f:56:f4:0d:53: 7c:27:4f:a2:af:94:f7:33:fb:c1:2b:a7:10:91:a9: b1:e7:20:ac:05:e0:e2:51:cf:83:58:f3:56:ff:83: e9:fa:8a:14:6f:d3:03:72:3a:dc:58:19:12:19:40: 95:14:13:eb:3b:b2:3f:55:01:49:7b:d7:45:eb:e4: 38:4f:ef:0d:75:6c:27:47:1b:ec:64:c1:ac:5b:fd: 01:c1:4e:33:93:61:04:86:85:06:c4:95:9b:33:2e: 50:f0:bf:8b:42:0b:60:64:27:c1:64:0d:b1:48:dc: 23:07:4c:af:33:bc:cc:a1:7b:bf:e8:13:80:99:9e: 7d:15:1f:7b:51:a0:b7:37:47:21:67:d1:56:70:3b: 94:14:9c:f5:fb:9d:46:77:8a:2f:e0:9d:48:a9:cf: 9c:c1:5a:c1:ac:08:5e:1a:28:c7:4e:b9:df:94:8d: 3f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:80:21:98:40:E9:B5:E4:C2:9D:1C:CC:C7:BD:23:78:02:91:F6:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9e:01:fe:d3:61:b5:f6:bb:93:11:1a:6d:3f:cb:bb:a9:1b: 65:d5:a9:99:84:fe:9b:bd:13:71:45:1a:4e:62:f8:6e:f1:ca: e4:5b:ac:36:37:2f:df:56:37:9d:4f:57:69:55:2c:46:14:86: d8:89:b1:92:0a:2a:d3:fb:4d:d7:b7:e0:83:81:1b:a8:b1:0f: 9d:63:5a:26:b4:61:29:d2:92:fd:9e:18:d2:f2:ac:7a:79:78: 31:e7:fa:7e:a9:dd:dc:65:f3:0b:45:5f:58:1d:15:d4:93:1f: ab:dc:ad:10:6b:a6:c3:d0:c0:17:bb:4c:f3:00:75:68:ac:cd: d8:3e:44:4c:cd:c1:66:8b:77:38:4a:94:e9:10:d6:b9:11:12: d8:b0:d6:b1:d3:63:9e:84:f0:83:7b:0b:11:73:60:07:ae:a7: c9:c4:af:cf:ea:ea:ff:40:77:f7:f5:30:5f:5b:9f:29:59:94: 10:b9:1e:a2:c0:e8:54:63:25:dc:70:17:f5:9c:ea:d8:70:25: 6d:83:79:c2:53:4c:19:70:84:dd:f6:a4:bd:8a:f1:4a:f4:3c: 67:d2:b9:a1:28:6a:89:28:e1:7d:5b:a0:1d:fd:d3:b1:57:22: 4a:6a:cf:99:b7:26:7f:46:2f:c9:50:24:d9:0b:7f:a2:92:68: a6:06:1c:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuK/6VTnbfRqCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YmE1ZTcxNjEtMTkwZS00ZWRiLWE5ZmQtMGMzNzYzNDBjMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKRyr+uYIzzKH6GomCoO+8446/+8xa5kyVzo HHuMzhAAEWc1QPGO8D9ZCpsyikvG5KBye/zFJaXY7ZwsZxd5Fb5GM/La4dPL2UUH Lk/zu/N4q5dbT1b0DVN8J0+ir5T3M/vBK6cQkamx5yCsBeDiUc+DWPNW/4Pp+ooU b9MDcjrcWBkSGUCVFBPrO7I/VQFJe9dF6+Q4T+8NdWwnRxvsZMGsW/0BwU4zk2EE hoUGxJWbMy5Q8L+LQgtgZCfBZA2xSNwjB0yvM7zMoXu/6BOAmZ59FR97UaC3N0ch Z9FWcDuUFJz1+51Gd4ov4J1Iqc+cwVrBrAheGijHTrnflI0/twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWAIZhA6bXkwp0czMe9I3gCkfYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBhYTcwYjMtZjNkNS0z NmY3LThhOWItODhjYWQ3OWZiNWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2eAf7TYbX2u5MRGm0/y7upG2XVqZmE/pu9E3FFGk5i+G7xyuRbrDY3 L99WN51PV2lVLEYUhtiJsZIKKtP7Tde34IOBG6ixD51jWia0YSnSkv2eGNLyrHp5 eDHn+n6p3dxl8wtFX1gdFdSTH6vcrRBrpsPQwBe7TPMAdWiszdg+REzNwWaLdzhK lOkQ1rkREtiw1rHTY56E8IN7CxFzYAeup8nEr8/q6v9Ad/f1MF9bnylZlBC5HqLA 6FRjJdxwF/Wc6thwJW2DecJTTBlwhN32pL2K8Ur0PGfSuaEoaoko4X1boB3907FX Ikpqz5m3Jn9GL8lQJNkLf6KSaKYGHNI= -----END CERTIFICATE-----Generated at Mon Oct 12 18:28:46 2026 by rpki-client