$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a20ed0da-7729-3ea1-aa03-72c852aa1b13.roa File: a20ed0da-7729-3ea1-aa03-72c852aa1b13.roa (raw, json) Hash identifier: FNPjKRc+3IklfmGnQmbxckMAFOhhjgPVMWfYtRuLxdo= Subject key identifier: 0D:21:C3:F9:9B:C3:F1:D7:E7:54:98:71:B7:D6:F6:ED:26:4A:08:4D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DCDC5D2011222B03BFD3ABB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a20ed0da-7729-3ea1-aa03-72c852aa1b13.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 19905 IP address blocks: 170.52.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:d2:01:12:22:b0:3b:fd:3a:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=14e01c67-0896-472e-b50f-982831ed5429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:74:bb:97:ce:6e:31:34:5d:35:c0:f2:76:1f: c6:1e:8e:16:c0:f2:be:d2:8b:13:da:17:88:ba:3c: 22:6d:39:04:78:23:a7:47:e2:72:e2:2d:34:84:af: 7a:79:3e:21:ea:84:0d:04:07:ea:80:3a:0b:40:42: d2:ce:e3:c1:d8:10:b3:09:ef:9f:aa:d1:a3:fa:42: 6c:da:8d:19:3a:24:c9:eb:36:48:c7:ca:9a:4d:b8: 26:f0:31:57:72:28:d7:01:c6:12:c7:e4:a6:65:f4: 61:b6:97:71:06:e4:e4:3c:bc:1d:a5:53:a9:4d:43: b6:07:0b:7b:0d:fc:2f:d2:fe:c8:9b:f0:2c:5e:fc: 61:5e:bf:5a:c2:83:a7:52:f8:b9:c3:f2:51:c8:f5: 8d:b1:47:54:ac:e9:e9:66:83:a5:5d:58:63:87:9b: b0:0b:ed:47:6e:f8:ac:5f:e0:95:b2:00:a9:20:0c: 68:8d:17:d2:15:fa:5f:8c:29:7a:c5:de:24:e1:4d: df:34:ce:50:4a:62:2b:63:cc:0e:0b:d6:b4:b4:80: 35:e7:83:59:5f:fa:3a:43:72:4e:be:00:99:ee:76: ab:10:93:a7:e0:48:05:25:8c:39:d2:d3:39:f9:63: 65:1f:68:e0:a4:e5:2a:89:22:d8:c1:2a:6e:82:c6: de:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:21:C3:F9:9B:C3:F1:D7:E7:54:98:71:B7:D6:F6:ED:26:4A:08:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a20ed0da-7729-3ea1-aa03-72c852aa1b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 170.52.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:07:92:0c:c2:ef:fd:3c:a8:0d:df:7b:c1:a9:94:09:dd:e7: 9a:22:57:02:e8:3e:d8:3d:e3:c2:c9:f6:d7:83:4f:0c:26:fe: 24:4b:1f:38:b2:79:92:12:1f:e5:ee:3b:bf:7f:e6:99:ac:0f: 65:3d:7d:d9:78:d6:c9:12:91:3a:f0:b5:98:32:09:40:e5:f0: eb:b7:6d:c8:27:a9:72:50:44:11:ca:58:e8:cf:ef:15:62:37: a5:7f:0c:5b:60:4d:68:80:49:42:b6:0c:45:5c:c0:b6:d7:dd: 70:bd:09:d3:00:c5:49:49:da:0d:07:c4:e6:dc:8f:2e:f2:0e: e9:e3:00:83:4c:85:3c:29:ee:86:88:7a:15:91:b3:f4:46:1e: 54:f0:fd:b1:57:03:45:bb:b1:61:a3:4d:72:ac:91:1a:78:58: 0a:1d:44:fa:5b:fe:e0:fc:97:ef:1b:bd:df:9d:87:3a:96:c9: f0:93:8e:c5:1d:fd:bd:49:48:79:8c:99:58:b8:6c:ba:00:63: 1b:d4:36:11:69:df:6f:0b:75:7a:98:66:24:d6:b6:a1:e7:28: 80:9b:01:89:17:b6:e5:c5:ca:28:d2:d6:5a:ba:7e:f6:27:29: b3:a3:79:86:5e:7f:a8:a0:a2:21:99:24:d4:cb:9f:70:81:34: 31:5f:eb:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxdIBEiKwO/06uwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk MTRlMDFjNjctMDg5Ni00NzJlLWI1MGYtOTgyODMxZWQ1NDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXS7l85uMTRdNcDydh/GHo4WwPK+0osT2heI ujwibTkEeCOnR+Jy4i00hK96eT4h6oQNBAfqgDoLQELSzuPB2BCzCe+fqtGj+kJs 2o0ZOiTJ6zZIx8qaTbgm8DFXcijXAcYSx+SmZfRhtpdxBuTkPLwdpVOpTUO2Bwt7 Dfwv0v7Im/AsXvxhXr9awoOnUvi5w/JRyPWNsUdUrOnpZoOlXVhjh5uwC+1Hbvis X+CVsgCpIAxojRfSFfpfjCl6xd4k4U3fNM5QSmIrY8wOC9a0tIA154NZX/o6Q3JO vgCZ7narEJOn4EgFJYw50tM5+WNlH2jgpOUqiSLYwSpugsbeOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0hw/mbw/HX51SYcbfW9u0mSghNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIwZWQwZGEtNzcyOS0z ZWExLWFhMDMtNzJjODUyYWExYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqjQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEHkgzC7/08qA3fe8GplAnd55oiVwLoPtg948LJ9teDTwwm/iRLHziy eZISH+XuO79/5pmsD2U9fdl41skSkTrwtZgyCUDl8Ou3bcgnqXJQRBHKWOjP7xVi N6V/DFtgTWiASUK2DEVcwLbX3XC9CdMAxUlJ2g0HxObcjy7yDunjAINMhTwp7oaI ehWRs/RGHlTw/bFXA0W7sWGjTXKskRp4WAodRPpb/uD8l+8bvd+dhzqWyfCTjsUd /b1JSHmMmVi4bLoAYxvUNhFp328LdXqYZiTWtqHnKICbAYkXtuXFyijS1lq6fvYn KbOjeYZef6igoiGZJNTLn3CBNDFf63M= -----END CERTIFICATE-----Generated at Wed May 13 06:27:50 2026 by rpki-client