$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99fc4a6a-c757-3b96-98a8-03d52a13a94f.roa File: 99fc4a6a-c757-3b96-98a8-03d52a13a94f.roa (raw, json) Hash identifier: +vlTUe1+B5U6YXAHxIJULpfhaxOGX34iJqXWcpMOhPM= Subject key identifier: B1:4E:41:27:C3:6D:42:FB:3F:3A:95:7A:73:55:41:C9:19:11:08:DA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E11CD828E1E8FB9CD902C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99fc4a6a-c757-3b96-98a8-03d52a13a94f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.20.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:1c:d8:28:e1:e8:fb:9c:d9:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6dec2666-55e8-470f-9e62-95fb1d65d490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:48:96:bb:0c:1c:1e:b6:8b:24:48:54:e7:fc: d2:18:bb:aa:b0:b2:56:0a:ee:ba:9b:ca:1a:a8:5c: 9c:53:9d:fa:b9:f5:b0:00:8b:e4:69:42:49:a1:24: 2d:50:a6:03:22:ef:88:e4:4a:0b:ba:fd:a4:66:d8: f2:a8:af:e7:12:78:78:b1:55:93:70:38:ee:42:bc: bc:43:37:7a:f5:f2:5a:8a:35:f4:ac:bc:ce:3b:1c: 30:c7:6c:15:7f:b0:68:4f:b7:d1:8c:a1:82:5e:48: d4:bd:37:c6:6a:2a:6d:63:6f:ce:67:97:56:8d:a8: 6d:a9:36:14:ad:dc:ef:c1:6c:95:4a:56:e7:c8:e9: 7f:d8:ed:18:e2:57:51:76:bd:a2:f6:15:a4:01:83: c3:c8:d1:ea:a6:f7:2c:49:30:87:7b:ef:05:cc:32: 49:5c:3d:f9:bf:30:05:22:6b:99:38:8d:57:7f:07: 17:66:8d:e6:fe:64:fb:93:f4:19:41:08:a6:4e:96: 67:94:7e:65:c9:6b:36:ba:aa:05:33:cf:1b:51:c2: e9:84:f8:08:25:dc:78:50:3c:75:11:dd:db:2a:78: 80:f7:ae:e6:a5:f1:9c:42:64:d8:1b:8f:b2:a0:63: 58:f9:6f:52:32:ee:83:41:e7:70:af:f4:e0:cb:a1: 17:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4E:41:27:C3:6D:42:FB:3F:3A:95:7A:73:55:41:C9:19:11:08:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99fc4a6a-c757-3b96-98a8-03d52a13a94f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b4:7e:37:d2:03:9d:eb:dc:35:50:f9:92:a6:62:19:4e:fa: e5:f0:ac:79:8d:01:54:0b:7d:ad:ab:86:10:76:a6:4d:e7:90: a5:91:15:58:dc:ed:2b:24:ce:12:ae:f7:e1:2b:63:a0:89:e2: 8b:26:62:c2:33:57:62:cb:b5:49:17:05:b8:d4:d6:ed:71:95: dd:f1:1f:60:df:f2:30:62:5a:0b:81:46:88:39:07:11:04:d8: 9f:05:16:c0:46:6f:0b:34:4f:1a:07:57:4a:15:c0:77:07:ed: ed:cd:88:19:f3:a7:d8:1d:65:12:da:a8:cc:b9:fa:72:9b:0d: 05:5b:25:b7:c5:d8:89:f6:66:75:be:5e:6f:bf:21:f4:21:55: d1:8d:d9:ab:cf:ec:5c:ab:86:85:24:e7:a6:5b:ce:a8:0c:85: 09:1d:8b:cc:fe:39:a3:e5:4c:17:c9:17:0c:c9:f4:cd:7d:6d: ea:54:9e:15:6c:e3:bb:22:4e:73:20:32:fa:a9:99:36:cf:0f: 1e:d0:93:63:27:df:4c:0d:8c:22:68:3a:c6:f8:c5:8b:98:89: 0d:6e:f3:b6:4b:1e:a6:fb:cc:95:b2:79:1b:3e:a4:43:8f:ef: e4:06:5b:7d:55:dd:29:71:4d:09:45:20:88:b6:35:36:56:15: ce:13:5d:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RzYKOHo+5zZAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmRlYzI2NjYtNTVlOC00NzBmLTllNjItOTVmYjFkNjVkNDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70iWuwwcHraLJEhU5/zSGLuqsLJWCu66m8oa qFycU536ufWwAIvkaUJJoSQtUKYDIu+I5EoLuv2kZtjyqK/nEnh4sVWTcDjuQry8 Qzd69fJaijX0rLzOOxwwx2wVf7BoT7fRjKGCXkjUvTfGaiptY2/OZ5dWjahtqTYU rdzvwWyVSlbnyOl/2O0Y4ldRdr2i9hWkAYPDyNHqpvcsSTCHe+8FzDJJXD35vzAF ImuZOI1XfwcXZo3m/mT7k/QZQQimTpZnlH5lyWs2uqoFM88bUcLphPgIJdx4UDx1 Ed3bKniA967mpfGcQmTYG4+yoGNY+W9SMu6DQedwr/Tgy6EXZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFOQSfDbUL7PzqVenNVQckZEQjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTlmYzRhNmEtYzc1Ny0z Yjk2LTk4YTgtMDNkNTJhMTNhOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm0fjfSA53r3DVQ+ZKmYhlO+uXwrHmNAVQLfa2rhhB2pk3nkKWRFVjc 7SskzhKu9+ErY6CJ4osmYsIzV2LLtUkXBbjU1u1xld3xH2Df8jBiWguBRog5BxEE 2J8FFsBGbws0TxoHV0oVwHcH7e3NiBnzp9gdZRLaqMy5+nKbDQVbJbfF2In2ZnW+ Xm+/IfQhVdGN2avP7FyrhoUk56ZbzqgMhQkdi8z+OaPlTBfJFwzJ9M19bepUnhVs 47siTnMgMvqpmTbPDx7Qk2Mn30wNjCJoOsb4xYuYiQ1u87ZLHqb7zJWyeRs+pEOP 7+QGW31V3SlxTQlFIIi2NTZWFc4TXbo= -----END CERTIFICATE-----Generated at Thu Mar 26 17:24:18 2026 by rpki-client