$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a76314ae-59f4-3476-b766-0a9d1e2f435c.roa File: a76314ae-59f4-3476-b766-0a9d1e2f435c.roa (raw, json) Hash identifier: qSH16D91OaKpEKfRrAdgSZun5p5LFN75f/ptTkc4530= Subject key identifier: 42:EB:83:9F:E0:EB:37:37:AA:97:69:DE:5D:06:94:AF:EE:5F:A0:30 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E11D8263507E1A3AF0C080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a76314ae-59f4-3476-b766-0a9d1e2f435c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.20.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:1d:82:63:50:7e:1a:3a:f0:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1f045d68-b57d-4369-bf05-5bf6bca34f9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d2:5b:2f:a0:b2:f7:8a:4e:bc:0a:49:d4:52: fb:5e:60:9a:c7:b8:cc:40:e3:13:e0:ec:fe:d1:1f: 7b:39:a2:e2:3a:ee:7b:08:83:34:40:27:a8:fe:de: 4d:17:45:c2:32:62:f1:97:7a:31:cf:d4:92:c9:7c: 6a:9a:2b:6a:ff:92:f8:af:22:63:a5:04:13:6a:c9: b5:de:ba:dc:e0:00:9f:65:51:fa:b0:ab:c8:df:1e: bf:ae:46:b8:58:01:ce:25:55:f0:5d:af:ae:b3:a6: 46:aa:76:d0:d8:ce:74:96:5a:04:29:81:e5:1a:44: 7f:ab:ee:4d:48:b3:9b:4a:1f:08:3e:0b:4f:6f:60: ce:76:1d:61:46:4a:20:79:be:5d:96:46:9d:7a:20: 2d:72:0e:2d:3a:3c:2f:b5:b8:d7:60:12:66:45:d0: 30:f0:ee:62:11:88:22:2a:30:b4:05:74:f7:ed:af: 50:df:7d:82:b8:d2:a6:6a:7f:93:35:b1:71:19:a2: ab:6f:ad:81:21:67:28:d1:e3:f5:f4:71:89:79:66: 29:34:4f:81:1e:f8:43:b6:bb:2c:88:1f:7e:bc:54: 2f:f2:5d:cf:b1:39:b8:9c:de:c9:70:60:89:e9:34: e0:a7:4a:05:48:af:ec:da:b3:28:88:99:ef:80:14: 8a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EB:83:9F:E0:EB:37:37:AA:97:69:DE:5D:06:94:AF:EE:5F:A0:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a76314ae-59f4-3476-b766-0a9d1e2f435c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:45:42:eb:82:7f:cb:c9:80:34:51:3a:6f:d8:52:3a:19:78: 3a:bd:5a:10:27:75:48:65:f2:a0:79:a8:b3:62:2a:11:fb:df: d3:90:b3:38:65:4b:73:07:56:55:e0:0f:5b:f0:54:85:ff:a5: c1:49:7b:d5:8e:aa:19:54:42:19:3c:7a:a3:08:33:3d:d3:fa: 76:71:e2:43:a8:61:36:df:95:9d:de:33:b9:03:d7:74:69:12: 89:a0:f3:45:fc:7c:cf:a4:0d:c4:ca:06:35:0b:d5:39:63:66: c1:0d:97:46:87:a5:a3:f3:42:67:fd:3e:a6:48:9f:72:76:e9: 02:df:86:b6:26:86:23:34:97:3f:a4:0c:de:28:3f:79:46:1d: 60:13:a1:7c:0d:53:78:0d:e1:c3:8c:28:aa:8f:0b:90:ac:e5: c6:0c:cb:47:a3:1a:41:2f:ff:37:4a:08:04:83:ca:1a:d7:de: 1a:24:97:85:34:89:fb:7a:72:2a:8a:c1:ba:02:15:88:12:6d: 37:d0:0a:b1:40:94:c8:1f:8d:84:4d:7a:28:3d:1c:3f:87:7d: c1:98:3c:35:77:42:15:6e:e7:a5:28:e6:ce:d6:f9:a1:e5:42: 89:80:e6:9b:2f:47:a8:fc:2d:6e:ca:a5:1f:63:31:e8:da:0e: 60:59:9b:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4R2CY1B+GjrwwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWYwNDVkNjgtYjU3ZC00MzY5LWJmMDUtNWJmNmJjYTM0ZjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9JbL6Cy94pOvApJ1FL7XmCax7jMQOMT4Oz+ 0R97OaLiOu57CIM0QCeo/t5NF0XCMmLxl3oxz9SSyXxqmitq/5L4ryJjpQQTasm1 3rrc4ACfZVH6sKvI3x6/rka4WAHOJVXwXa+us6ZGqnbQ2M50lloEKYHlGkR/q+5N SLObSh8IPgtPb2DOdh1hRkogeb5dlkadeiAtcg4tOjwvtbjXYBJmRdAw8O5iEYgi KjC0BXT37a9Q332CuNKman+TNbFxGaKrb62BIWco0eP19HGJeWYpNE+BHvhDtrss iB9+vFQv8l3PsTm4nN7JcGCJ6TTgp0oFSK/s2rMoiJnvgBSKaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELrg5/g6zc3qpdp3l0GlK/uX6AwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTc2MzE0YWUtNTlmNC0z NDc2LWI3NjYtMGE5ZDFlMmY0MzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVFQuuCf8vJgDRROm/YUjoZeDq9WhAndUhl8qB5qLNiKhH739OQszhl S3MHVlXgD1vwVIX/pcFJe9WOqhlUQhk8eqMIMz3T+nZx4kOoYTbflZ3eM7kD13Rp Eomg80X8fM+kDcTKBjUL1TljZsENl0aHpaPzQmf9PqZIn3J26QLfhrYmhiM0lz+k DN4oP3lGHWAToXwNU3gN4cOMKKqPC5Cs5cYMy0ejGkEv/zdKCASDyhrX3hokl4U0 ift6ciqKwboCFYgSbTfQCrFAlMgfjYRNeig9HD+HfcGYPDV3QhVu56Uo5s7W+aHl QomA5psvR6j8LW7KpR9jMejaDmBZmys= -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:29 2026 by rpki-client