$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/585206e8-1a36-3482-a2c6-807365b7b25c.roa File: 585206e8-1a36-3482-a2c6-807365b7b25c.roa (raw, json) Hash identifier: k4BT3lV46gSHYAeAMeMn4VbSjOeixrCnkP5Epdr4Ioo= Subject key identifier: F2:B6:D5:6C:8E:9A:28:C3:D9:47:AE:AA:57:CC:D5:B1:C0:E0:08:36 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DCCF5247DE5E88BA6FBAA1800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/585206e8-1a36-3482-a2c6-807365b7b25c.roa Signing time: Mon 11 May 2026 18:00:25 +0000 ROA not before: Mon 11 May 2026 18:00:25 +0000 ROA not after: Sun 09 Aug 2026 18:00:25 +0000 asID: 19905 IP address blocks: 173.28.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:f5:24:7d:e5:e8:8b:a6:fb:aa:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 11 18:00:25 2026 GMT Not After : Aug 9 18:00:25 2026 GMT Subject: CN=797e35f0-c792-4abe-a083-540a4d1a8e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:36:9e:7a:bf:e3:80:52:20:25:5f:df:75: 91:27:62:68:ca:8e:48:2b:45:83:2e:e7:e2:6d:3f: fc:de:29:a3:e4:66:43:cf:5d:96:18:a6:ff:68:cf: 8b:eb:54:3f:e2:fa:62:b0:82:6f:58:71:fb:55:04: 6d:dd:5e:0e:4b:28:ef:a3:db:49:af:43:b6:ec:08: 94:0c:62:b9:dd:13:c4:6c:dd:4a:20:6d:94:bc:6c: 71:83:fc:e6:ad:9f:b5:b3:af:bf:b5:4a:21:73:ca: da:ef:d7:f0:93:3b:6f:64:24:11:fb:6d:56:83:46: c1:8b:fa:ea:93:46:0f:ca:97:ba:63:67:a3:ff:a3: 65:d9:c4:2b:d4:0a:27:43:f3:69:62:1d:19:87:f2: 69:d0:35:cb:52:03:f4:af:72:be:c9:19:86:e7:4a: eb:cc:ef:5c:1d:85:b2:81:a4:47:62:a2:58:c5:38: 44:a8:d3:fa:31:bc:91:ae:8f:a7:bb:6d:c3:9d:06: 17:19:d3:db:8d:dd:f0:fa:23:86:67:f4:04:97:46: e7:c2:a0:c8:13:23:d4:f1:11:e1:61:13:d3:b8:bd: 91:06:c0:8d:73:ef:cd:9c:8c:cf:31:39:c7:48:3a: ed:55:e7:5b:15:e2:83:81:17:d9:5c:b4:de:74:d6: 54:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B6:D5:6C:8E:9A:28:C3:D9:47:AE:AA:57:CC:D5:B1:C0:E0:08:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/585206e8-1a36-3482-a2c6-807365b7b25c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:8f:8c:0c:5c:bd:73:95:3c:5a:98:9c:20:90:90:4c:dd:b2: 12:99:ed:fc:35:74:49:ff:37:94:24:37:96:69:3e:74:8c:e1: 4a:c6:5b:11:c1:7b:d3:f2:12:9f:55:b6:c0:05:f2:97:7c:d5: ef:bc:dc:de:32:e6:0c:99:40:00:2e:f7:e9:43:e2:07:e6:73: a9:6d:15:7b:61:72:66:f1:dd:25:24:a7:04:77:e5:e0:19:c8: 10:37:6c:37:2d:fc:fe:2b:4e:88:4f:9d:6a:5c:ba:bd:59:c4: 7d:99:a7:3f:e7:ce:74:9b:b6:70:77:b6:bf:d2:9c:5a:36:1f: e9:58:4b:06:72:f1:bf:94:7b:3c:cb:2a:56:f3:ba:06:18:7a: 1b:0e:f4:e0:fc:ba:d5:2b:4d:fb:97:42:d7:ec:4a:ac:ae:05: 28:89:e7:53:6b:13:04:a1:88:26:71:5f:b3:c1:69:c3:87:98: 32:1b:b7:f7:8e:17:3e:cf:5f:e0:4b:10:99:74:80:e8:7f:e9: f3:39:c8:d0:71:f3:b3:95:a8:fe:ac:b0:ad:27:ac:ae:86:ca: 8c:95:9c:66:01:b4:5b:42:4e:e5:dd:62:e3:14:c3:0d:fe:db: 56:f4:e2:e3:1c:31:1d:c6:c8:95:c3:2d:d0:fb:c6:d8:1b:36: b6:3a:73:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3M9SR95eiLpvuqGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUxMTE4MDAyNVoXDTI2MDgwOTE4MDAyNVowLzEtMCsGA1UEAxMk Nzk3ZTM1ZjAtYzc5Mi00YWJlLWEwODMtNTQwYTRkMWE4ZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT82nnq/44BSICVf33WRJ2Joyo5IK0WDLufi bT/83imj5GZDz12WGKb/aM+L61Q/4vpisIJvWHH7VQRt3V4OSyjvo9tJr0O27AiU DGK53RPEbN1KIG2UvGxxg/zmrZ+1s6+/tUohc8ra79fwkztvZCQR+21Wg0bBi/rq k0YPype6Y2ej/6Nl2cQr1AonQ/NpYh0Zh/Jp0DXLUgP0r3K+yRmG50rrzO9cHYWy gaRHYqJYxThEqNP6MbyRro+nu23DnQYXGdPbjd3w+iOGZ/QEl0bnwqDIEyPU8RHh YRPTuL2RBsCNc+/NnIzPMTnHSDrtVedbFeKDgRfZXLTedNZUvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPK21WyOmijD2UeuqlfM1bHA4Ag2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTg1MjA2ZTgtMWEzNi0z NDgyLWEyYzYtODA3MzY1YjdiMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACPjAxcvXOVPFqYnCCQkEzdshKZ7fw1dEn/N5QkN5ZpPnSM4UrGWxHB e9PyEp9VtsAF8pd81e+83N4y5gyZQAAu9+lD4gfmc6ltFXthcmbx3SUkpwR35eAZ yBA3bDct/P4rTohPnWpcur1ZxH2Zpz/nznSbtnB3tr/SnFo2H+lYSwZy8b+UezzL KlbzugYYehsO9OD8utUrTfuXQtfsSqyuBSiJ51NrEwShiCZxX7PBacOHmDIbt/eO Fz7PX+BLEJl0gOh/6fM5yNBx87OVqP6ssK0nrK6GyoyVnGYBtFtCTuXdYuMUww3+ 21b04uMcMR3GyJXDLdD7xtgbNrY6cws= -----END CERTIFICATE-----Generated at Wed May 13 12:01:49 2026 by rpki-client