$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/619dbe15-3c4e-3483-9dd7-e5dc09f3e203.roa File: 619dbe15-3c4e-3483-9dd7-e5dc09f3e203.roa (raw, json) Hash identifier: QoTLYNDTO7NrNpSV1/aJASfkUpXTptXDdM18rVXzbWw= Subject key identifier: 57:FF:5C:11:85:9E:31:AC:E7:55:B6:AD:5C:BD:6A:AD:37:18:3C:E1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF82C52EC936B6419B8070 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/619dbe15-3c4e-3483-9dd7-e5dc09f3e203.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.20.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:82:c5:2e:c9:36:b6:41:9b:80:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=d3a406a8-cc82-4168-a437-f544d281afb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:26:13:00:6f:15:82:d4:98:77:25:d0:2d:39: 4a:82:91:d9:d8:cb:7e:ae:e7:c2:28:cd:be:39:dc: ad:50:34:51:d4:ad:a1:83:78:b5:23:fe:df:51:03: ce:a7:6a:52:31:88:cf:ed:ba:29:0c:e9:7c:bb:66: db:51:e9:74:79:db:2c:2e:19:7f:da:aa:13:66:ce: 52:6a:89:0e:8b:40:e8:ef:1c:96:b4:a8:00:93:ed: 93:e8:54:79:dd:73:a6:21:f8:3e:d0:fb:49:12:40: 6e:d4:18:2b:8a:a7:18:15:fd:38:1a:e5:50:5a:25: 22:ce:d1:0a:85:7f:b4:c1:71:81:35:f5:17:5b:65: 95:d3:0c:18:53:e0:55:76:22:5a:6f:b7:72:c3:9e: 5e:27:92:34:38:43:49:16:01:e7:43:dc:c0:b0:7e: 78:fb:db:70:54:e3:e4:1d:8e:ec:07:dd:16:51:4e: 78:00:ac:ea:91:f9:54:75:26:13:c0:4c:37:7c:5e: fd:6d:59:c5:8e:5d:42:30:51:fe:9a:8b:bc:da:38: 3c:55:89:9b:a5:97:9c:c7:b3:56:44:a6:d9:e1:28: 58:56:98:71:bd:5f:5b:ce:0c:2a:aa:be:29:f2:39: 13:08:10:4f:06:bb:16:85:83:21:a0:19:2d:fa:0c: 5e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FF:5C:11:85:9E:31:AC:E7:55:B6:AD:5C:BD:6A:AD:37:18:3C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/619dbe15-3c4e-3483-9dd7-e5dc09f3e203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4a:a7:e1:f5:0f:aa:20:27:14:0d:c1:e4:b8:be:fc:fd:65: 69:82:57:44:b8:35:4c:88:59:e2:2c:d4:21:6b:57:aa:a7:69: 63:5f:b2:37:72:f3:b9:1a:c4:49:48:2a:a1:7f:36:f3:c2:e6: b1:73:7d:7a:f5:bc:17:97:3a:43:50:d7:36:c8:16:3d:8a:7d: d6:db:56:e8:72:50:d4:ca:51:96:28:26:e0:8a:39:59:9a:86: 5f:ce:cc:1b:8c:3a:d6:16:c4:5f:c8:82:c9:d9:d1:71:e2:76: 22:bb:37:d9:26:b9:b4:de:0b:ca:c7:60:0a:e2:1b:7e:4d:c7: db:bf:5b:1e:2a:ad:5a:a8:ff:2d:77:57:92:03:00:0d:28:03: 47:6e:12:f0:d2:9e:2e:05:f0:e3:d9:94:99:69:f2:31:cb:31: 87:24:ea:f6:3d:55:ef:27:78:ee:9b:83:16:05:76:82:7c:47: 4f:38:d9:16:ee:15:c2:ef:42:e6:15:86:0c:d8:5d:dc:25:cc: 9c:12:50:e8:ee:c6:08:cd:71:b0:cc:a6:69:3a:b5:9f:4c:45: ac:71:f2:60:1b:a5:3f:55:2c:62:8b:de:bc:7a:cc:95:18:b5: 4c:5e:53:57:b7:d5:56:19:37:cf:29:2a:63:52:fc:94:36:ae: de:1b:5d:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k34LFLsk2tkGbgHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZDNhNDA2YTgtY2M4Mi00MTY4LWE0MzctZjU0NGQyODFhZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SYTAG8VgtSYdyXQLTlKgpHZ2Mt+rufCKM2+ OdytUDRR1K2hg3i1I/7fUQPOp2pSMYjP7bopDOl8u2bbUel0edssLhl/2qoTZs5S aokOi0Do7xyWtKgAk+2T6FR53XOmIfg+0PtJEkBu1BgriqcYFf04GuVQWiUiztEK hX+0wXGBNfUXW2WV0wwYU+BVdiJab7dyw55eJ5I0OENJFgHnQ9zAsH54+9twVOPk HY7sB90WUU54AKzqkflUdSYTwEw3fF79bVnFjl1CMFH+mou82jg8VYmbpZecx7NW RKbZ4ShYVphxvV9bzgwqqr4p8jkTCBBPBrsWhYMhoBkt+gxekQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFf/XBGFnjGs51W2rVy9aq03GDzhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjE5ZGJlMTUtM2M0ZS0z NDgzLTlkZDctZTVkYzA5ZjNlMjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRQIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNKp+H1D6ogJxQNweS4vvz9ZWmCV0S4NUyIWeIs1CFrV6qnaWNfsjdy 87kaxElIKqF/NvPC5rFzfXr1vBeXOkNQ1zbIFj2KfdbbVuhyUNTKUZYoJuCKOVma hl/OzBuMOtYWxF/IgsnZ0XHidiK7N9kmubTeC8rHYAriG35Nx9u/Wx4qrVqo/y13 V5IDAA0oA0duEvDSni4F8OPZlJlp8jHLMYck6vY9Ve8neO6bgxYFdoJ8R0842Rbu FcLvQuYVhgzYXdwlzJwSUOjuxgjNcbDMpmk6tZ9MRaxx8mAbpT9VLGKL3rx6zJUY tUxeU1e31VYZN88pKmNS/JQ2rt4bXaQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:27:26 2026 by rpki-client