$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdb75b66-d90c-3fa4-a79d-34958a337fea.roa File: fdb75b66-d90c-3fa4-a79d-34958a337fea.roa (raw, json) Hash identifier: 5QwvrtCkgd3V2LaIRTO5MArbm4EptrCcATR85OkQrRY= Subject key identifier: DC:4A:5D:33:6D:D1:92:83:C4:AB:16:C3:4F:49:EB:13:A1:83:4A:4F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49743BACC1419D9FA5358200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdb75b66-d90c-3fa4-a79d-34958a337fea.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.20.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:3b:ac:c1:41:9d:9f:a5:35:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=38a7193f-2d96-4f6e-b3ee-ebddf5f3e0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:8c:a7:ce:22:ac:66:56:79:41:fb:1d:4a: 58:2e:b4:5a:fa:19:03:8b:48:70:36:51:eb:5f:5e: 6f:6e:07:21:94:f5:1e:63:25:e1:fd:ae:87:4e:fd: 91:12:07:81:93:28:39:5f:f8:26:7d:9b:cd:aa:c7: 0a:f8:d0:46:79:f2:d4:a1:4f:d9:88:8e:d7:b0:dc: b9:02:90:bc:cd:7f:78:e6:4f:d8:d9:0f:eb:7a:9e: 61:c2:a5:f3:a0:fe:fa:51:1a:47:71:0e:53:3d:74: 61:e5:a1:45:6b:d1:ad:e4:84:46:89:81:93:5c:aa: ed:0a:ff:4f:ca:40:02:d6:c1:19:80:c2:3a:5d:2f: ab:4e:6a:36:fe:5b:ee:bc:c9:11:00:f1:4d:4e:42: 4c:a6:3e:f3:e0:84:c0:24:d0:92:4d:7c:e5:53:79: 5c:06:6c:2e:09:24:f0:16:f8:b1:a4:13:20:7f:41: 40:2b:34:93:da:3a:33:e5:f6:9d:51:72:45:b2:dd: 19:a5:d7:df:6c:20:aa:b2:cb:df:d2:08:a1:62:c5: 67:98:8d:3f:37:d6:f0:e5:cc:18:bb:6a:ab:75:d5: c0:6f:aa:f8:77:cb:fd:3d:d1:b3:7c:61:9d:27:07: 41:53:b5:26:e5:de:d6:b3:38:5a:dd:d9:7b:36:8f: 3b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4A:5D:33:6D:D1:92:83:C4:AB:16:C3:4F:49:EB:13:A1:83:4A:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fdb75b66-d90c-3fa4-a79d-34958a337fea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:37:0b:68:11:76:57:3f:82:f3:d1:cb:fc:21:61:1b:e9:04: 43:e3:23:c4:cd:05:10:01:8a:9f:1c:ff:53:a8:ce:60:81:8f: 08:5e:f7:9f:58:22:68:66:d7:cb:f7:e6:21:5e:f1:f4:91:0b: b6:36:66:35:92:20:28:39:c7:65:ce:10:a4:a0:4f:32:ca:60: 2a:07:aa:af:ac:30:08:75:a4:78:92:a9:2b:e3:b2:8c:90:3e: dd:0a:18:4a:8f:c5:f9:eb:b3:16:dd:9c:d7:8a:fc:f8:7c:d7: 86:b3:94:12:15:cd:6c:cd:8a:12:67:60:5a:91:0d:9d:08:fb: f6:ee:fc:da:28:b0:17:c3:70:b7:d9:34:90:18:e4:6f:87:73: 46:6d:fe:3c:e2:4b:ae:7a:54:4a:e7:b8:96:2d:8d:13:87:36: 0f:ab:23:01:04:c4:ce:48:7e:74:f7:bb:6a:6f:3d:70:a0:82: 15:84:97:7a:53:ae:86:59:d9:6a:6b:d5:07:18:dc:61:d1:e0: e3:b0:a2:2c:3a:4e:a5:be:68:3b:b7:64:b2:3f:72:7f:66:35: d7:55:ec:1d:f7:66:89:25:fd:50:28:49:47:08:08:37:f2:83: b2:58:1e:e2:85:2d:ee:2f:8d:9d:05:c8:9a:94:eb:72:a8:52: a0:15:8e:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdDuswUGdn6U1ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzhhNzE5M2YtMmQ5Ni00ZjZlLWIzZWUtZWJkZGY1ZjNlMGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjiMp84irGZWeUH7HUpYLrRa+hkDi0hwNlHr X15vbgchlPUeYyXh/a6HTv2REgeBkyg5X/gmfZvNqscK+NBGefLUoU/ZiI7XsNy5 ApC8zX945k/Y2Q/rep5hwqXzoP76URpHcQ5TPXRh5aFFa9Gt5IRGiYGTXKrtCv9P ykAC1sEZgMI6XS+rTmo2/lvuvMkRAPFNTkJMpj7z4ITAJNCSTXzlU3lcBmwuCSTw FvixpBMgf0FAKzST2joz5fadUXJFst0ZpdffbCCqssvf0gihYsVnmI0/N9bw5cwY u2qrddXAb6r4d8v9PdGzfGGdJwdBU7Um5d7Wszha3dl7No877QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxKXTNt0ZKDxKsWw09J6xOhg0pPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmRiNzViNjYtZDkwYy0z ZmE0LWE3OWQtMzQ5NThhMzM3ZmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD03C2gRdlc/gvPRy/whYRvpBEPjI8TNBRABip8c/1OozmCBjwhe959Y Imhm18v35iFe8fSRC7Y2ZjWSICg5x2XOEKSgTzLKYCoHqq+sMAh1pHiSqSvjsoyQ Pt0KGEqPxfnrsxbdnNeK/Ph814azlBIVzWzNihJnYFqRDZ0I+/bu/NoosBfDcLfZ NJAY5G+Hc0Zt/jziS656VErnuJYtjROHNg+rIwEExM5IfnT3u2pvPXCgghWEl3pT roZZ2Wpr1QcY3GHR4OOwoiw6TqW+aDu3ZLI/cn9mNddV7B33Zokl/VAoSUcICDfy g7JYHuKFLe4vjZ0FyJqU63KoUqAVjgc= -----END CERTIFICATE-----Generated at Sun Oct 11 21:53:42 2026 by rpki-client