$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca678994-138f-3640-a31c-0c61ce87c7a5.roa File: ca678994-138f-3640-a31c-0c61ce87c7a5.roa (raw, json) Hash identifier: C0bJlM58QpIjNpjzlGSa1azyLyMVJtgxnFb0f6l8jL0= Subject key identifier: FA:AD:3E:64:00:B8:F2:08:B0:08:73:06:C5:D4:AD:FD:9F:D8:C5:8D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AA27D0D290F3D0D8DB2D40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca678994-138f-3640-a31c-0c61ce87c7a5.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.20.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:27:d0:d2:90:f3:d0:d8:db:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=dc9bf0d4-820f-4619-ad7a-69892a970cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:43:c6:75:f0:8d:73:55:59:9d:dd:1b:9d:8c: 3b:d3:2c:4b:51:9e:8f:e0:1f:88:0f:ad:1a:9e:34: 98:89:07:b4:63:0e:64:d9:fb:7e:89:8c:75:3b:fa: 03:85:45:6a:a2:fa:e1:ef:e4:b1:cb:2b:21:1b:14: 53:13:47:72:dc:c5:f2:7a:3b:77:0f:fd:9d:b8:32: d1:f7:d8:55:7a:f6:f8:b1:7b:ad:5b:6d:c0:51:4d: bd:6a:9e:2b:2f:fd:b0:34:c7:d4:64:e1:63:4e:c9: 85:a2:c5:7f:12:07:55:72:66:54:2c:8c:2e:4d:80: 42:a5:f2:18:fc:8b:d1:53:ca:81:e4:51:48:da:46: 61:65:40:52:fd:90:f4:3e:86:b3:19:c9:5b:cd:7d: f3:37:13:ad:62:11:42:e6:5b:6d:ee:ac:83:7e:69: 64:e0:e3:8e:11:dd:6e:31:35:84:90:6c:58:92:f1: 8b:70:a6:fa:1b:a4:32:5f:a1:72:5c:f8:6a:e7:d9: a9:db:4a:e9:09:8e:d1:21:89:37:74:6b:8c:93:07: 36:5a:5a:30:95:d1:45:2b:b3:1f:ac:f0:76:7f:15: e3:a0:95:3b:28:93:3c:ba:07:0f:a9:75:f8:41:24: 3d:ab:df:56:3a:59:15:7c:64:13:08:06:d6:c1:2a: 0e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AD:3E:64:00:B8:F2:08:B0:08:73:06:C5:D4:AD:FD:9F:D8:C5:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca678994-138f-3640-a31c-0c61ce87c7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:c0:76:0f:15:da:53:d6:8b:ea:94:bd:ab:04:75:f0:8a:cb: dd:0a:b3:6f:99:5a:dd:ad:cd:16:cc:b8:8e:9c:46:7e:a4:45: 09:e6:20:ba:b2:2e:d2:44:fd:6a:8b:87:33:2e:77:5b:cf:d6: 67:4a:89:f7:a1:12:d9:a0:e2:a0:b9:86:c1:e8:07:b8:36:53: 07:92:b2:3c:75:95:db:4e:f7:df:ae:b2:6c:d7:c1:f2:43:8f: 3a:70:f5:75:5d:7a:cc:e8:4a:72:75:84:14:78:c9:1a:e1:28: 7c:af:38:6e:94:6c:5f:df:35:eb:91:76:08:e4:37:eb:bb:78: ec:8f:6a:20:a2:ea:d6:5a:df:4d:27:68:e4:e2:fe:36:2c:7a: 1c:5b:46:fc:57:40:b9:87:d2:49:de:a1:cf:90:a4:51:be:6a: 85:35:8c:3c:cc:45:50:a2:40:0d:32:89:41:5c:78:2e:c7:93: 8d:d4:c4:6a:67:31:44:43:ea:fc:53:39:97:7a:41:ca:be:53: 43:44:df:a2:b0:83:88:f2:1b:f2:ab:a7:02:09:fa:2b:36:74: e0:f6:6e:af:21:ab:81:46:0a:db:ef:d8:11:6d:94:da:9f:27: c4:54:10:bd:1e:83:8d:09:11:c0:86:cb:33:d3:26:63:4d:ce: ef:e9:ac:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqifQ0pDz0NjbLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZGM5YmYwZDQtODIwZi00NjE5LWFkN2EtNjk4OTJhOTcwY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0PGdfCNc1VZnd0bnYw70yxLUZ6P4B+ID60a njSYiQe0Yw5k2ft+iYx1O/oDhUVqovrh7+SxyyshGxRTE0dy3MXyejt3D/2duDLR 99hVevb4sXutW23AUU29ap4rL/2wNMfUZOFjTsmFosV/EgdVcmZULIwuTYBCpfIY /IvRU8qB5FFI2kZhZUBS/ZD0PoazGclbzX3zNxOtYhFC5ltt7qyDfmlk4OOOEd1u MTWEkGxYkvGLcKb6G6QyX6FyXPhq59mp20rpCY7RIYk3dGuMkwc2WlowldFFK7Mf rPB2fxXjoJU7KJM8ugcPqXX4QSQ9q99WOlkVfGQTCAbWwSoOJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqtPmQAuPIIsAhzBsXUrf2f2MWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2E2Nzg5OTQtMTM4Zi0z NjQwLWEzMWMtMGM2MWNlODdjN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELAdg8V2lPWi+qUvasEdfCKy90Ks2+ZWt2tzRbMuI6cRn6kRQnmILqy LtJE/WqLhzMud1vP1mdKifehEtmg4qC5hsHoB7g2UweSsjx1ldtO99+usmzXwfJD jzpw9XVdeszoSnJ1hBR4yRrhKHyvOG6UbF/fNeuRdgjkN+u7eOyPaiCi6tZa300n aOTi/jYsehxbRvxXQLmH0kneoc+QpFG+aoU1jDzMRVCiQA0yiUFceC7Hk43UxGpn MURD6vxTOZd6Qcq+U0NE36Kwg4jyG/KrpwIJ+is2dOD2bq8hq4FGCtvv2BFtlNqf J8RUEL0eg40JEcCGyzPTJmNNzu/prEw= -----END CERTIFICATE-----Generated at Thu Mar 26 15:24:39 2026 by rpki-client