$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa File: b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa (raw, json) Hash identifier: zg7w1RhgDAuKZS3cEH4iBv2nCZqXDdOg+qhqVv9xQ8g= Subject key identifier: 37:0F:11:99:1D:1D:6C:79:06:64:EA:4A:4A:3A:41:AA:F5:7F:E0:11 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E1194B0E008CA0B9067500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.20.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:19:4b:0e:00:8c:a0:b9:06:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6fbe96c3-bf9c-4926-a6ef-8fa322eda785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:70:9e:fc:47:3a:7c:73:ba:d6:77:83:01:ad: 89:55:39:e0:4e:e7:f8:3d:4b:9f:90:4d:44:ab:11: e0:97:83:d4:b2:7c:01:19:18:9f:6f:54:39:a0:ef: c2:f6:40:88:e4:ce:3a:39:b3:7a:e2:64:6d:e9:53: de:69:3e:36:7c:ab:bb:ca:a6:e5:36:51:88:b0:0e: 62:b3:6d:a3:c8:c3:14:99:dd:f0:58:f1:0c:1c:7a: 66:df:71:52:e7:ff:4c:38:b0:e2:7a:e7:d9:7d:84: 28:96:b5:80:20:37:63:52:0c:3b:62:43:1b:94:6e: c7:29:a7:5a:c5:08:d6:09:c7:b0:9b:1d:28:31:78: 91:5c:83:4b:a9:70:4b:a7:bd:ff:8c:67:86:ed:8b: 2d:cb:ab:39:d4:ce:ca:09:39:35:ac:39:7a:4b:9c: 98:c7:50:f2:c4:3e:ca:af:8d:b1:47:f9:8b:20:a2: e0:74:db:13:66:e3:f2:01:81:97:c5:65:2a:be:4b: 9f:e2:e1:63:6d:dd:56:94:90:39:66:92:1d:b9:9d: a8:60:70:f0:9c:cb:9b:96:4b:96:83:c0:73:c7:d7: 01:4a:c2:52:1b:4f:0d:ab:9a:59:33:1a:39:53:dc: 34:aa:b4:1a:0e:0d:41:66:21:1a:bb:98:ae:52:10: b8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0F:11:99:1D:1D:6C:79:06:64:EA:4A:4A:3A:41:AA:F5:7F:E0:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:64:45:de:36:f6:ca:32:ba:86:cc:68:07:76:4d:2a:81:6c: a8:d2:37:9c:f9:3d:92:67:74:33:9b:e9:59:d8:95:07:d3:2d: 9b:0b:5f:76:e2:41:df:b5:15:2c:8d:cf:47:99:60:29:33:53: a9:96:2a:53:07:b1:1c:6a:c6:67:3d:d1:e5:0f:19:a1:6e:d3: dc:36:94:f6:da:49:a9:99:3f:c7:68:6c:0c:e9:93:b9:2b:16: 59:a3:1c:66:a2:ee:6b:ac:83:1b:e5:04:f5:ce:92:36:fe:ae: fb:4a:1e:ef:e2:7b:b5:22:ac:4c:b4:e9:34:57:92:2d:65:86: f5:96:07:0b:4e:a8:76:2a:be:44:4c:c7:55:13:01:83:35:ad: 44:0a:72:fd:fe:6a:51:c1:af:ca:63:f9:7c:f7:91:05:23:95: 3e:f8:f7:1f:27:20:61:a6:f6:bb:24:45:da:e3:f0:d1:03:3c: f6:f9:8e:e1:f0:f3:10:19:3d:f7:5b:96:d7:c9:70:d4:31:54: be:f0:00:1b:e7:32:4c:ee:91:4e:37:8b:24:ca:0b:88:e2:8f: cb:41:12:6f:dd:a7:ff:77:ab:1a:8e:48:12:2a:88:b9:ef:f1: b1:06:06:a8:b4:2b:c2:69:97:09:3a:74:0f:a5:d7:7f:80:61: 52:17:b1:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RlLDgCMoLkGdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NmZiZTk2YzMtYmY5Yy00OTI2LWE2ZWYtOGZhMzIyZWRhNzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XCe/Ec6fHO61neDAa2JVTngTuf4PUufkE1E qxHgl4PUsnwBGRifb1Q5oO/C9kCI5M46ObN64mRt6VPeaT42fKu7yqblNlGIsA5i s22jyMMUmd3wWPEMHHpm33FS5/9MOLDieufZfYQolrWAIDdjUgw7YkMblG7HKada xQjWCcewmx0oMXiRXINLqXBLp73/jGeG7Ysty6s51M7KCTk1rDl6S5yYx1DyxD7K r42xR/mLIKLgdNsTZuPyAYGXxWUqvkuf4uFjbd1WlJA5ZpIduZ2oYHDwnMublkuW g8Bzx9cBSsJSG08Nq5pZMxo5U9w0qrQaDg1BZiEau5iuUhC4wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcPEZkdHWx5BmTqSko6Qar1f+ARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjBjMWZmNmMtMDk3MC0z NzU4LThkOGMtMjM5ZDZiMjhmYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZkRd429soyuobMaAd2TSqBbKjSN5z5PZJndDOb6VnYlQfTLZsLX3bi Qd+1FSyNz0eZYCkzU6mWKlMHsRxqxmc90eUPGaFu09w2lPbaSamZP8dobAzpk7kr FlmjHGai7musgxvlBPXOkjb+rvtKHu/ie7UirEy06TRXki1lhvWWBwtOqHYqvkRM x1UTAYM1rUQKcv3+alHBr8pj+Xz3kQUjlT749x8nIGGm9rskRdrj8NEDPPb5juHw 8xAZPfdbltfJcNQxVL7wABvnMkzukU43iyTKC4jij8tBEm/dp/93qxqOSBIqiLnv 8bEGBqi0K8Jplwk6dA+l13+AYVIXsbs= -----END CERTIFICATE-----Generated at Thu Mar 26 15:17:45 2026 by rpki-client