$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55578456-0242-3757-bdba-cf6a7b642cb2.roa File: 55578456-0242-3757-bdba-cf6a7b642cb2.roa (raw, json) Hash identifier: H0vz+2/2s3FpQNmIT8R1jIcIXvJWtdY6TbwHkkWMjek= Subject key identifier: EC:C2:A2:74:C6:39:37:CB:A1:7E:9C:19:79:EC:0F:0C:D8:29:AE:43 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF77EEB459656C4C775370 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55578456-0242-3757-bdba-cf6a7b642cb2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.20.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:77:ee:b4:59:65:6c:4c:77:53:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1a20040c-c6f8-443b-b3e5-e3fdc33a9339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:e4:3e:63:19:f0:d2:7f:06:c1:ec:43:a9: 43:a1:04:09:ad:70:20:ed:e7:9f:64:79:42:f0:2b: de:10:0c:39:57:a4:38:e7:16:44:08:e9:a3:fd:73: bd:c8:6d:a1:64:fd:2d:b2:02:67:f0:fc:cd:ca:77: b3:da:86:42:48:6f:ef:22:3b:2c:e9:a7:c1:3b:7b: 80:e3:00:8a:02:5e:a1:06:a3:50:1f:f3:38:36:b1: 14:98:88:08:1d:81:1a:a8:f7:aa:56:72:6f:d0:5b: 67:78:a8:d5:7d:27:4c:79:86:4b:63:3c:65:07:5a: 0e:40:3b:08:20:64:d0:30:32:13:37:53:aa:ad:e3: 77:21:6f:56:97:26:14:33:29:cd:1c:58:55:24:65: f0:e7:73:6a:ed:d5:94:63:f9:44:37:0c:7f:c9:a9: a9:a5:e3:17:dd:84:36:53:ea:97:ff:7c:9e:60:05: 1a:b5:d7:1c:9d:fd:34:70:2b:18:e9:23:90:2c:64: 3f:c8:32:d5:94:cd:29:02:cc:76:c5:eb:fa:3b:72: 3a:29:97:f3:89:c5:ce:b6:80:43:e4:a5:59:2e:5a: cd:f4:37:e1:1d:8b:e4:a8:c4:16:57:6c:c6:fb:43: c8:e7:39:2b:b8:21:4f:30:12:a5:f9:2e:89:4b:4d: f7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C2:A2:74:C6:39:37:CB:A1:7E:9C:19:79:EC:0F:0C:D8:29:AE:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55578456-0242-3757-bdba-cf6a7b642cb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:46:e8:c6:7e:bf:dc:18:6f:ea:72:34:64:d8:cc:b7:6a:d7: 7b:52:8d:33:f5:2c:42:ef:8a:79:c1:cc:16:06:c4:70:13:b2: 26:6a:90:36:2c:44:cc:dc:14:a8:1a:7d:da:f8:5f:31:89:c2: 68:93:9a:fd:2a:01:84:d5:2e:a8:e1:67:05:32:9a:ec:63:a7: 4f:62:b1:d7:69:ee:1f:5c:93:97:42:ac:c0:dd:a9:41:50:ca: 47:b9:e6:64:10:c1:11:79:6c:43:ed:87:e1:c2:66:72:7d:9a: 2f:41:65:db:a0:d4:ad:50:7e:b0:9d:57:a5:eb:fd:42:4e:86: d8:ab:83:60:f1:6f:01:55:7a:46:01:c0:53:7b:e8:80:4c:cf: ec:d6:97:cb:74:4c:2c:48:5f:bf:bb:27:54:6d:e9:41:b6:f9: 67:a5:ca:4d:ac:e4:a3:c8:7c:b9:9c:78:71:7f:79:59:4b:5c: b2:62:0c:d1:f6:5d:ca:66:08:33:df:bc:0d:ea:5f:c3:74:ae: 3a:0f:68:55:20:96:60:02:0c:82:d8:a7:2d:27:66:7e:08:9c: a0:e2:b1:4b:fa:b3:a5:02:06:e2:b5:80:61:59:a1:a0:e3:c7: a0:13:bf:68:3f:f5:22:2f:75:a3:b8:b3:64:c8:45:85:f7:d9: 68:3a:48:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k33futFllbEx3U3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWEyMDA0MGMtYzZmOC00NDNiLWIzZTUtZTNmZGMzM2E5MzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPPkPmMZ8NJ/BsHsQ6lDoQQJrXAg7eefZHlC 8CveEAw5V6Q45xZECOmj/XO9yG2hZP0tsgJn8PzNynez2oZCSG/vIjss6afBO3uA 4wCKAl6hBqNQH/M4NrEUmIgIHYEaqPeqVnJv0FtneKjVfSdMeYZLYzxlB1oOQDsI IGTQMDITN1OqreN3IW9WlyYUMynNHFhVJGXw53Nq7dWUY/lENwx/yamppeMX3YQ2 U+qX/3yeYAUatdccnf00cCsY6SOQLGQ/yDLVlM0pAsx2xev6O3I6KZfzicXOtoBD 5KVZLlrN9DfhHYvkqMQWV2zG+0PI5zkruCFPMBKl+S6JS033CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzConTGOTfLoX6cGXnsDwzYKa5DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTU1Nzg0NTYtMDI0Mi0z NzU3LWJkYmEtY2Y2YTdiNjQyY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClG6MZ+v9wYb+pyNGTYzLdq13tSjTP1LELvinnBzBYGxHATsiZqkDYs RMzcFKgafdr4XzGJwmiTmv0qAYTVLqjhZwUymuxjp09isddp7h9ck5dCrMDdqUFQ yke55mQQwRF5bEPth+HCZnJ9mi9BZdug1K1QfrCdV6Xr/UJOhtirg2DxbwFVekYB wFN76IBMz+zWl8t0TCxIX7+7J1Rt6UG2+Welyk2s5KPIfLmceHF/eVlLXLJiDNH2 XcpmCDPfvA3qX8N0rjoPaFUglmACDILYpy0nZn4InKDisUv6s6UCBuK1gGFZoaDj x6ATv2g/9SIvdaO4s2TIRYX32Wg6SMQ= -----END CERTIFICATE-----Generated at Thu Mar 26 18:29:46 2026 by rpki-client