$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdb75b66-d90c-3fa4-a79d-34958a337fea.roa File: fdb75b66-d90c-3fa4-a79d-34958a337fea.roa (raw, json) Hash identifier: /YTJfUsbYa4Np1lO4AG2c6KlhlB21XLenBiStgT7hAQ= Subject key identifier: 98:8C:29:00:7B:AF:20:89:AD:EA:8C:F3:C5:00:0D:35:93:D7:D7:0C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA786E4E23702923B1998C480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdb75b66-d90c-3fa4-a79d-34958a337fea.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 173.20.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:e4:e2:37:02:92:3b:19:98:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=528d11be-3f1d-460a-a68f-396ac3ea188e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:62:21:61:30:16:c6:95:07:7d:ad:11:c3: da:cf:4c:67:56:3d:bf:d7:5b:41:4d:af:dd:f4:3e: cf:70:cb:78:4f:41:36:46:60:b6:73:26:a6:d0:17: d9:cf:45:ea:a1:7c:7e:1d:73:d9:e1:07:0d:1d:51: 18:70:e2:a2:03:f1:76:1a:31:33:c4:cb:97:29:f2: 75:28:31:52:4b:51:3c:0d:ef:a6:ac:78:59:4b:cd: cd:73:c5:18:79:1c:a2:2e:86:27:40:cc:1d:c8:cb: 83:81:18:df:61:87:36:83:69:41:56:2c:2a:81:4f: 3c:b3:f9:04:12:fc:f9:3e:ab:e2:de:ca:1d:42:0f: 45:0a:14:68:4f:26:71:47:ab:b9:4b:27:92:0c:31: 68:bf:41:53:61:e6:99:50:8c:4e:53:89:80:fe:87: 06:5c:53:84:00:1d:2c:96:47:a2:ed:2c:de:b5:b8: 50:08:5b:9d:c3:2f:ac:c5:f6:37:1e:b8:8c:b1:66: 99:bd:85:9e:4a:66:d1:23:a1:a9:02:97:3b:47:f6: 27:43:d5:8a:06:45:75:0c:06:fc:83:c8:d8:1e:75: a3:28:1f:55:4c:94:1b:74:38:ed:e8:20:d7:aa:69: a4:24:c6:35:84:ee:a8:a8:a1:04:c8:05:ca:97:97: 38:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8C:29:00:7B:AF:20:89:AD:EA:8C:F3:C5:00:0D:35:93:D7:D7:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdb75b66-d90c-3fa4-a79d-34958a337fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:8e:e5:3d:4c:f8:59:f2:4e:3d:a9:89:e2:26:ac:96:b3:46: c9:b3:90:28:87:64:d7:bd:b2:44:14:13:12:d3:ed:68:ec:0e: 8c:94:b6:8a:63:cc:25:5f:72:29:79:4d:39:0e:db:9c:cf:13: a8:ea:ca:68:63:5d:56:6c:48:75:22:f8:29:3b:1d:47:31:23: 42:30:d3:71:a9:43:8e:dd:2b:df:a0:b4:8d:c8:03:bf:f9:a2: 2b:eb:7d:b8:c2:6a:e1:2a:0f:1a:8f:0b:fa:87:a8:b9:20:92: 94:94:a0:15:b2:9a:b0:d0:23:e2:4c:a9:94:35:cd:68:b4:cf: e2:bc:78:f9:ba:2b:94:cd:96:88:5e:1f:d6:6d:ad:da:fd:1e: 4f:8f:aa:5e:82:60:46:31:94:95:e0:b3:e8:11:7c:8c:16:e1: 99:7b:a1:a3:92:b2:77:06:96:4f:e8:21:cf:d4:1b:e8:f8:06: 51:7b:18:88:20:73:37:fc:93:a2:0f:e8:e0:2d:d2:9b:b3:74: 20:93:a8:da:df:c9:df:8d:aa:9b:78:9f:35:00:6e:b0:1a:f0: 7e:12:7e:08:20:0f:00:96:36:7c:df:81:d7:88:de:ee:03:9d: 7b:7b:bf:64:ef:53:b5:9e:32:df:b6:35:8d:19:6b:e9:ca:79: 7c:dd:05:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhuTiNwKSOxmYxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTI4ZDExYmUtM2YxZC00NjBhLWE2OGYtMzk2YWMzZWExODhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7RiIWEwFsaVB32tEcPaz0xnVj2/11tBTa/d 9D7PcMt4T0E2RmC2cyam0BfZz0XqoXx+HXPZ4QcNHVEYcOKiA/F2GjEzxMuXKfJ1 KDFSS1E8De+mrHhZS83Nc8UYeRyiLoYnQMwdyMuDgRjfYYc2g2lBViwqgU88s/kE Evz5Pqvi3sodQg9FChRoTyZxR6u5SyeSDDFov0FTYeaZUIxOU4mA/ocGXFOEAB0s lkei7SzetbhQCFudwy+sxfY3HriMsWaZvYWeSmbRI6GpApc7R/YnQ9WKBkV1DAb8 g8jYHnWjKB9VTJQbdDjt6CDXqmmkJMY1hO6oqKEEyAXKl5c4xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiMKQB7ryCJreqM88UADTWT19cMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmRiNzViNjYtZDkwYy0z ZmE0LWE3OWQtMzQ5NThhMzM3ZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6O5T1M+FnyTj2pieImrJazRsmzkCiHZNe9skQUExLT7WjsDoyUtopj zCVfcil5TTkO25zPE6jqymhjXVZsSHUi+Ck7HUcxI0Iw03GpQ47dK9+gtI3IA7/5 oivrfbjCauEqDxqPC/qHqLkgkpSUoBWymrDQI+JMqZQ1zWi0z+K8ePm6K5TNlohe H9Ztrdr9Hk+Pql6CYEYxlJXgs+gRfIwW4Zl7oaOSsncGlk/oIc/UG+j4BlF7GIgg czf8k6IP6OAt0puzdCCTqNrfyd+Nqpt4nzUAbrAa8H4SfgggDwCWNnzfgdeI3u4D nXt7v2TvU7WeMt+2NY0Za+nKeXzdBWw= -----END CERTIFICATE-----Generated at Fri Aug 21 02:24:56 2026 by rpki-client