$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa File: bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa (raw, json) Hash identifier: O7RqyxIdhfINkibBovHI5kPW7Roy8wft1i6LFwDQ0F4= Subject key identifier: FE:71:F3:FA:95:B4:80:2F:00:CD:C4:0A:CB:48:25:57:CB:A7:FA:CB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF61EDBB64D6D1C46403E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.20.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:61:ed:bb:64:d6:d1:c4:64:03:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1760fc90-13d6-4807-98ff-937491a0b831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ca:ad:61:93:1e:21:50:e3:d6:fc:9c:d5:05: e1:85:7b:ac:2b:e1:51:57:79:06:6d:b8:39:2d:14: 04:46:d4:c6:d0:06:d7:7a:3c:5d:9c:03:33:3b:67: 47:39:da:79:f7:ad:d7:d2:20:0f:b5:29:46:fb:d6: e8:20:6b:d5:d3:96:9e:f3:af:01:74:0e:89:e2:c0: 10:50:59:24:b4:3d:6d:33:0c:c6:6c:4b:93:86:33: b4:c9:d7:84:3e:81:6d:b0:0c:05:00:46:91:4a:e9: 6d:71:26:3b:b2:7d:74:82:77:74:53:4b:9c:17:37: 60:af:c1:67:32:f4:e2:ab:08:be:e5:02:1e:ad:49: 64:c6:6b:e8:f8:83:5c:4c:30:2d:e0:82:02:95:0b: 02:29:cc:a3:c8:42:3c:c4:ce:67:3c:14:9c:68:a1: 2b:e0:f2:be:2a:7d:89:65:db:d6:1a:1b:99:ad:db: 16:dc:b7:b4:1c:6f:40:8b:fc:a8:9a:19:8c:71:cf: 64:c9:36:d0:49:52:f2:63:d2:47:9b:ef:10:bd:56: 82:dd:68:31:e6:49:59:30:59:02:64:96:17:64:f3: 41:cb:fc:23:c3:b1:5e:37:45:9f:81:3c:3c:cc:2b: 53:4d:f9:6e:51:2d:bc:0e:18:ed:ae:c1:83:8d:26: 2a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:71:F3:FA:95:B4:80:2F:00:CD:C4:0A:CB:48:25:57:CB:A7:FA:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:69:d7:f8:f6:4c:c1:62:49:7d:f9:78:95:e2:27:65:54:ed: b9:59:7d:1c:dc:f4:84:a5:54:00:a0:2b:39:c8:e1:c6:c4:fa: db:54:94:e9:98:ed:24:ed:cd:54:51:4f:a3:af:79:db:8c:ec: 35:d9:1e:45:ea:37:47:ee:91:ef:fb:59:5d:37:3b:93:b0:e9: e9:4c:ad:6f:93:a5:27:0e:0d:6e:e7:da:fc:17:a3:82:bb:fb: 75:8f:b0:64:e1:74:a5:b2:d4:d8:2e:39:ed:09:49:3d:2e:6d: 9a:4e:11:36:2c:42:4a:56:e8:29:22:48:b4:e0:23:7b:5d:2c: ae:83:33:af:e9:84:54:3d:fa:33:b7:15:97:a3:09:29:22:e2: 22:45:3d:b5:f8:64:2b:2d:75:85:d2:3e:d9:1b:20:f1:c7:ef: 3b:b3:fc:34:61:37:55:02:58:1a:ee:54:c0:d4:83:1a:5b:2a: 54:6f:6d:f7:56:b8:f1:2a:33:fe:e4:1e:d6:52:e2:7b:e6:a1: 7d:ad:13:e2:59:82:d8:45:9a:e3:91:bd:d2:cd:79:0b:15:0a: 89:1a:b8:ca:44:3f:ed:ae:cf:e0:ed:5c:68:5b:54:c4:c0:62: 83:d0:e0:46:83:e3:02:66:d3:54:a1:ee:57:11:c0:a7:bd:ff: 00:86:92:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k32Htu2TW0cRkA+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTc2MGZjOTAtMTNkNi00ODA3LTk4ZmYtOTM3NDkxYTBiODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMqtYZMeIVDj1vyc1QXhhXusK+FRV3kGbbg5 LRQERtTG0AbXejxdnAMzO2dHOdp5963X0iAPtSlG+9boIGvV05ae868BdA6J4sAQ UFkktD1tMwzGbEuThjO0ydeEPoFtsAwFAEaRSultcSY7sn10gnd0U0ucFzdgr8Fn MvTiqwi+5QIerUlkxmvo+INcTDAt4IIClQsCKcyjyEI8xM5nPBScaKEr4PK+Kn2J ZdvWGhuZrdsW3Le0HG9Ai/yomhmMcc9kyTbQSVLyY9JHm+8QvVaC3Wgx5klZMFkC ZJYXZPNBy/wjw7FeN0WfgTw8zCtTTfluUS28DhjtrsGDjSYqewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5x8/qVtIAvAM3ECstIJVfLp/rLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmFlODJmMzctNjA4Yi0z ZjJlLWIwZTQtYzAwYWQ3MTA2YTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhp1/j2TMFiSX35eJXiJ2VU7blZfRzc9ISlVACgKznI4cbE+ttUlOmY 7STtzVRRT6OveduM7DXZHkXqN0fuke/7WV03O5Ow6elMrW+TpScODW7n2vwXo4K7 +3WPsGThdKWy1NguOe0JST0ubZpOETYsQkpW6CkiSLTgI3tdLK6DM6/phFQ9+jO3 FZejCSki4iJFPbX4ZCstdYXSPtkbIPHH7zuz/DRhN1UCWBruVMDUgxpbKlRvbfdW uPEqM/7kHtZS4nvmoX2tE+JZgthFmuORvdLNeQsVCokauMpEP+2uz+DtXGhbVMTA YoPQ4EaD4wJm01Sh7lcRwKe9/wCGkmA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:37:09 2026 by rpki-client