$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0976502a-f131-3d7a-a31f-fc656ea083be.roa File: 0976502a-f131-3d7a-a31f-fc656ea083be.roa (raw, json) Hash identifier: o3vxHl91x3E8mYSut+Mvkesp77Y0tctgouhsugg3Hlk= Subject key identifier: 03:B4:C5:8A:D6:67:78:D2:5F:B2:03:63:56:20:DA:3C:60:04:BC:39 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AAC7EAE5873E881B4426B0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0976502a-f131-3d7a-a31f-fc656ea083be.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.20.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:c7:ea:e5:87:3e:88:1b:44:26:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=87a950d8-d454-4ac4-ab9a-8d536222eaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e1:b3:ed:cc:7b:37:05:4e:26:8f:42:4d:c8: 4c:91:58:ad:26:67:14:e3:04:0a:84:37:26:a1:d7: 32:e1:71:22:87:bd:e7:10:03:2f:91:13:68:60:84: 61:72:30:e2:36:eb:ed:32:fd:67:01:19:ff:97:99: ce:ec:76:c2:b4:82:8e:a9:51:bf:ed:3c:d3:38:17: 07:92:a8:da:55:e1:b3:d5:09:51:76:e4:d4:9f:77: 6d:b8:d4:bb:18:98:aa:07:9b:f3:1f:c4:8c:b3:1f: 81:1a:9a:57:7f:15:67:24:26:c3:cf:9f:09:1d:32: 9f:a7:c7:a1:4b:85:2e:cb:3e:2d:96:cc:c9:d6:c0: 90:1e:70:31:83:41:f7:f2:21:9a:e3:15:04:11:29: 3f:11:e3:1f:b1:4f:03:fd:da:2c:fa:d3:cd:3e:0f: 37:b6:0c:f3:d6:55:aa:86:d9:72:2e:bc:35:aa:14: ca:df:d0:d1:b5:f8:40:7e:93:b1:f0:17:db:d7:c0: df:dd:91:9c:70:dc:d3:41:aa:5b:60:c3:24:e9:95: 3a:77:18:64:3d:35:fd:7c:69:6d:13:9c:ff:57:ce: e9:26:3b:0c:27:54:ae:1c:9b:b6:55:f5:08:8b:43: 24:73:b0:26:1e:7f:04:86:65:32:4b:8b:ae:2c:35: 15:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B4:C5:8A:D6:67:78:D2:5F:B2:03:63:56:20:DA:3C:60:04:BC:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0976502a-f131-3d7a-a31f-fc656ea083be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:7d:db:4b:04:e0:c3:6d:24:68:46:35:10:3e:54:ea:29:3c: b8:a3:bb:2e:e2:0b:e4:56:03:83:e0:c0:56:a7:88:70:42:ca: 20:4e:72:cf:2d:70:d6:18:2e:51:c0:9b:6e:d8:6b:80:3a:bf: 9d:22:bb:da:3d:29:c4:ba:84:5b:fd:b3:98:44:ce:7b:c5:7d: bb:9d:1a:d4:60:8f:62:68:30:f4:53:09:0d:41:80:81:c0:a3: 7d:28:07:7e:00:38:61:35:16:60:01:19:3c:b2:35:5a:77:16: 70:d3:1d:25:ef:11:fc:cc:1a:95:4d:68:a2:e0:01:47:3d:20: d5:74:9b:72:00:27:bd:54:52:85:83:dd:af:9c:19:97:1a:b9: b5:01:a5:fe:69:ff:97:e6:87:52:89:dc:57:b4:33:51:0a:90: ff:00:13:da:32:49:1b:93:bc:6a:5c:a4:dc:60:96:02:d7:e5: 9b:a2:c6:b2:60:bc:93:bd:c9:da:5a:43:3b:f5:d7:fa:eb:ef: 0f:5d:74:3e:ef:c1:aa:49:1c:5c:3b:5b:2c:66:2f:eb:53:d5: b9:d5:8f:15:cc:d3:c8:55:bb:7b:82:f6:56:90:36:c7:d1:08: 70:91:ff:c6:5d:ed:d8:f6:2a:aa:ce:b6:c7:cd:4c:81:5c:04: 14:9e:de:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqsfq5Yc+iBtEJrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ODdhOTUwZDgtZDQ1NC00YWM0LWFiOWEtOGQ1MzYyMjJlYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOGz7cx7NwVOJo9CTchMkVitJmcU4wQKhDcm odcy4XEih73nEAMvkRNoYIRhcjDiNuvtMv1nARn/l5nO7HbCtIKOqVG/7TzTOBcH kqjaVeGz1QlRduTUn3dtuNS7GJiqB5vzH8SMsx+BGppXfxVnJCbDz58JHTKfp8eh S4Uuyz4tlszJ1sCQHnAxg0H38iGa4xUEESk/EeMfsU8D/dos+tPNPg83tgzz1lWq htlyLrw1qhTK39DRtfhAfpOx8Bfb18Df3ZGccNzTQapbYMMk6ZU6dxhkPTX9fGlt E5z/V87pJjsMJ1SuHJu2VfUIi0Mkc7AmHn8EhmUyS4uuLDUV0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAO0xYrWZ3jSX7IDY1Yg2jxgBLw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDk3NjUwMmEtZjEzMS0z ZDdhLWEzMWYtZmM2NTZlYTA4M2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJ920sE4MNtJGhGNRA+VOopPLijuy7iC+RWA4PgwFaniHBCyiBOcs8t cNYYLlHAm27Ya4A6v50iu9o9KcS6hFv9s5hEznvFfbudGtRgj2JoMPRTCQ1BgIHA o30oB34AOGE1FmABGTyyNVp3FnDTHSXvEfzMGpVNaKLgAUc9INV0m3IAJ71UUoWD 3a+cGZcaubUBpf5p/5fmh1KJ3Fe0M1EKkP8AE9oySRuTvGpcpNxglgLX5ZuixrJg vJO9ydpaQzv11/rr7w9ddD7vwapJHFw7WyxmL+tT1bnVjxXM08hVu3uC9laQNsfR CHCR/8Zd7dj2KqrOtsfNTIFcBBSe3jM= -----END CERTIFICATE-----Generated at Thu Mar 26 18:58:37 2026 by rpki-client