$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf38020-85dc-33fa-8296-a789f8c70a70.roa File: 0bf38020-85dc-33fa-8296-a789f8c70a70.roa (raw, json) Hash identifier: uUqIVXWpfeC4Bnqi9eOeeXRgDuiWDRgijpfpP39RRQw= Subject key identifier: 18:B3:C1:2A:7E:51:F9:A2:C0:FF:B8:61:DC:EC:66:05:C4:A4:E2:F0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AA17385CB80FF25F33B540 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf38020-85dc-33fa-8296-a789f8c70a70.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.20.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:17:38:5c:b8:0f:f2:5f:33:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=bc440b0a-f3cc-41b9-9831-72f440b9c366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a2:2a:5f:21:4a:ee:18:7b:ba:a6:ee:da:34: 6f:ee:8f:53:09:90:f0:b9:20:6c:26:da:09:58:37: 07:6c:1d:cc:92:48:70:25:97:03:2d:30:96:20:d6: 33:30:68:eb:6b:83:f7:5f:d0:f8:21:eb:d4:8d:75: 87:7f:04:58:7e:39:f9:46:c4:f5:8d:a2:b7:12:c8: 11:17:7b:33:62:12:2f:46:51:a7:74:bf:f4:c4:e7: 6b:ee:9e:2d:1e:8f:02:cd:3e:f4:e6:5a:27:a9:b4: d2:fd:10:6a:27:7c:b8:42:e1:f3:a8:a2:73:63:29: e9:4d:c4:b8:fa:97:86:84:b5:a1:2b:6e:47:fd:2d: 62:c5:c6:fa:ac:50:3d:8a:fc:f9:54:8f:88:81:f5: 56:f4:2b:87:78:b4:d7:3c:f4:8f:10:49:52:2d:bf: d7:3c:92:85:3e:ec:4c:77:7d:e2:13:fa:22:d7:95: b7:11:51:27:87:28:40:9b:e4:65:65:f3:46:f6:45: 0f:f7:a9:e3:8f:ac:2d:de:dc:2e:0e:70:b6:ed:3e: 30:4b:4d:04:a8:67:c1:37:a2:c6:ef:92:8f:90:fd: 82:df:b2:b9:dd:52:a0:27:80:44:84:6e:36:9a:2c: e0:dd:5b:91:9f:81:fd:15:1a:0f:04:dd:28:3d:74: 57:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B3:C1:2A:7E:51:F9:A2:C0:FF:B8:61:DC:EC:66:05:C4:A4:E2:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf38020-85dc-33fa-8296-a789f8c70a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:68:ac:15:c7:a2:76:15:0d:b6:36:7f:41:bf:af:c7:e5:bc: 2a:51:b3:8f:64:6e:48:c3:85:45:6b:76:46:ec:a3:ee:42:bf: 38:31:e7:39:a6:fa:30:70:45:a6:86:31:24:e4:b5:62:a2:6c: fd:31:ac:5c:07:47:fc:a0:3e:4f:54:5b:79:86:2b:b8:21:11: 06:93:d6:74:b7:cc:c4:d4:00:71:a8:51:70:c4:4d:08:50:83: bd:54:b0:4c:a7:40:cb:65:1d:83:8d:8a:8b:b8:5b:42:aa:84: 4a:52:35:60:8f:5a:58:aa:0c:a4:33:9b:a0:3c:0a:a4:22:26: 3c:2f:15:5a:bb:3e:e1:1b:27:f4:54:3b:16:8c:dd:99:35:a6: dc:35:ad:da:80:82:83:59:33:53:4a:98:d8:34:9e:21:a0:9e: 99:19:54:ea:70:45:d3:0c:47:76:26:5d:ec:43:cf:e2:a7:22: b2:c2:1c:f7:37:73:f1:6f:1d:82:44:41:d6:54:52:2f:be:60: f5:18:0f:62:80:5c:a2:a6:dc:6b:c2:72:fb:a6:3b:ae:0f:15: a2:e7:96:7f:b9:2d:38:04:c5:50:82:57:b4:40:80:e0:19:fa: bc:90:5a:fd:3d:f0:f9:92:ad:22:aa:2c:0f:5e:de:b6:39:16: 95:2f:46:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqhc4XLgP8l8ztUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YmM0NDBiMGEtZjNjYy00MWI5LTk4MzEtNzJmNDQwYjljMzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaIqXyFK7hh7uqbu2jRv7o9TCZDwuSBsJtoJ WDcHbB3MkkhwJZcDLTCWINYzMGjra4P3X9D4IevUjXWHfwRYfjn5RsT1jaK3EsgR F3szYhIvRlGndL/0xOdr7p4tHo8CzT705lonqbTS/RBqJ3y4QuHzqKJzYynpTcS4 +peGhLWhK25H/S1ixcb6rFA9ivz5VI+IgfVW9CuHeLTXPPSPEElSLb/XPJKFPuxM d33iE/oi15W3EVEnhyhAm+RlZfNG9kUP96njj6wt3twuDnC27T4wS00EqGfBN6LG 75KPkP2C37K53VKgJ4BEhG42mizg3VuRn4H9FRoPBN0oPXRXfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBizwSp+UfmiwP+4YdzsZgXEpOLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGJmMzgwMjAtODVkYy0z M2ZhLTgyOTYtYTc4OWY4YzcwYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHForBXHonYVDbY2f0G/r8flvCpRs49kbkjDhUVrdkbso+5Cvzgx5zmm +jBwRaaGMSTktWKibP0xrFwHR/ygPk9UW3mGK7ghEQaT1nS3zMTUAHGoUXDETQhQ g71UsEynQMtlHYONiou4W0KqhEpSNWCPWliqDKQzm6A8CqQiJjwvFVq7PuEbJ/RU OxaM3Zk1ptw1rdqAgoNZM1NKmNg0niGgnpkZVOpwRdMMR3YmXexDz+KnIrLCHPc3 c/FvHYJEQdZUUi++YPUYD2KAXKKm3GvCcvumO64PFaLnln+5LTgExVCCV7RAgOAZ +ryQWv098PmSrSKqLA9e3rY5FpUvRpQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:42 2026 by rpki-client