$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa File: 4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa (raw, json) Hash identifier: /0TBs+AkasXu43iV+4662jqAFy33i7+58Ri/er2dIPk= Subject key identifier: B4:C1:C8:EB:3A:C6:CC:E4:1B:15:9C:9E:90:27:BA:F3:FC:E6:1F:E1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AA281E56E4A255D03BD6C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.20.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:28:1e:56:e4:a2:55:d0:3b:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=535fcec4-ef10-40b9-9732-9bf4a3f7dc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8d:e9:6a:1c:1f:90:a0:cb:c9:36:85:26:1f: 6a:96:b2:d0:16:75:ec:5d:03:c4:fc:dd:39:ea:2f: 42:d3:c4:1b:ba:44:9b:45:e1:69:f6:ef:11:55:73: bc:fe:c7:e0:a4:bf:a7:fc:30:00:10:83:a9:f5:94: 73:5d:38:54:78:e9:48:e9:00:4f:91:55:85:08:d7: 3e:dd:1e:2c:03:f5:a1:a0:f1:79:94:8c:8b:c9:71: 71:b0:7f:46:78:06:6f:c8:0e:e1:03:44:a9:c6:43: b1:41:e1:f1:19:72:65:84:59:6e:3f:c3:bf:30:07: bb:af:28:40:22:18:8c:1c:e6:10:37:4d:6c:48:5a: 14:61:ca:95:cc:d7:06:7e:0b:1c:08:e3:12:c1:e1: 7d:34:54:58:e0:44:b8:44:60:4a:f0:a4:93:e4:7f: 48:cf:cd:ad:12:c9:52:a6:08:72:53:24:a4:84:f2: 47:9f:2f:1d:a0:a4:79:5b:32:94:44:b4:b6:52:58: 0f:9b:34:ee:99:bc:dc:24:8f:21:92:d0:27:0a:c6: d5:0c:55:af:af:b6:be:94:fb:70:b0:30:0d:76:16: ca:81:1e:89:cd:b0:4e:fe:97:37:88:af:30:b3:16: c3:b8:09:60:4c:42:a2:f4:47:ca:e2:55:91:7a:1f: 67:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C1:C8:EB:3A:C6:CC:E4:1B:15:9C:9E:90:27:BA:F3:FC:E6:1F:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d1:f6:93:b1:f8:e0:7d:62:f7:6b:9a:2e:90:a3:75:97:3d: 7b:c6:8d:c4:d5:38:9b:b6:05:dd:a9:c6:77:12:7b:61:2e:09: c8:39:b6:06:ef:54:6d:d7:fb:8b:4d:29:04:e6:e1:23:ea:06: 41:7d:74:ba:66:58:af:ea:36:b3:ba:15:80:35:ab:d9:f9:d9: 2f:2b:a3:9b:12:9b:28:3f:0e:81:d1:52:0b:67:ed:2a:cd:9d: b6:2c:cd:ff:73:2a:d7:46:a1:16:a1:95:8f:d0:9f:7d:65:af: fb:11:7a:67:b3:5e:11:c8:52:1f:29:d5:30:ce:08:45:c4:0f: 98:ab:d8:0a:11:dc:ce:d1:6d:67:3b:73:d7:21:1d:7b:7d:fd: b1:7c:17:34:7d:9e:e1:a6:e2:e3:a5:b3:24:0e:95:de:5a:46: aa:97:fa:28:d4:81:68:98:2a:4c:f1:d6:18:6d:31:3f:6f:ba: 90:db:94:dd:dc:db:a8:a0:a2:23:50:85:cf:2a:8f:f5:47:91: ea:ef:6c:49:10:f6:f6:be:26:bc:36:e5:a1:3b:a4:66:37:40: d2:e7:13:c6:e7:a5:d4:78:8e:b9:57:66:37:42:c0:6e:dd:3f: 44:dd:ad:05:c3:4a:7e:5f:0e:4b:f3:8a:6d:58:ef:9b:57:74: 6f:00:76:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqigeVuSiVdA71sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NTM1ZmNlYzQtZWYxMC00MGI5LTk3MzItOWJmNGEzZjdkYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp43pahwfkKDLyTaFJh9qlrLQFnXsXQPE/N05 6i9C08QbukSbReFp9u8RVXO8/sfgpL+n/DAAEIOp9ZRzXThUeOlI6QBPkVWFCNc+ 3R4sA/WhoPF5lIyLyXFxsH9GeAZvyA7hA0SpxkOxQeHxGXJlhFluP8O/MAe7ryhA IhiMHOYQN01sSFoUYcqVzNcGfgscCOMSweF9NFRY4ES4RGBK8KST5H9Iz82tEslS pghyUySkhPJHny8doKR5WzKURLS2UlgPmzTumbzcJI8hktAnCsbVDFWvr7a+lPtw sDANdhbKgR6JzbBO/pc3iK8wsxbDuAlgTEKi9EfK4lWReh9nBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTByOs6xszkGxWcnpAnuvP85h/hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY1MmI1YjQtMWI3Ni0z M2E5LTg0MzMtZWU0YzZlNjk2YzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHR9pOx+OB9Yvdrmi6Qo3WXPXvGjcTVOJu2Bd2pxncSe2EuCcg5tgbv VG3X+4tNKQTm4SPqBkF9dLpmWK/qNrO6FYA1q9n52S8ro5sSmyg/DoHRUgtn7SrN nbYszf9zKtdGoRahlY/Qn31lr/sRemezXhHIUh8p1TDOCEXED5ir2AoR3M7RbWc7 c9chHXt9/bF8FzR9nuGm4uOlsyQOld5aRqqX+ijUgWiYKkzx1hhtMT9vupDblN3c 26igoiNQhc8qj/VHkervbEkQ9va+Jrw25aE7pGY3QNLnE8bnpdR4jrlXZjdCwG7d P0TdrQXDSn5fDkvzim1Y75tXdG8AdsE= -----END CERTIFICATE-----Generated at Thu Mar 26 08:04:08 2026 by rpki-client