$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa File: d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa (raw, json) Hash identifier: N5DAqih2wFv+jxLShLYpqthuT2+iELReHv/qrg/1o/c= Subject key identifier: B5:AC:A8:D4:14:39:FF:7F:20:7A:F5:45:8E:6B:4E:F7:8A:48:72:CC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D39CF7F7B20FABF308BCA5C20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.20.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:7f:7b:20:fa:bf:30:8b:ca:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=509ccb41-36a8-4916-acef-97816d8d67e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f3:e9:a4:e6:98:61:c3:29:9d:2b:cb:d1:21: 00:71:e6:5f:0e:38:04:25:bc:81:d9:d1:b3:93:94: fc:02:24:5a:12:c4:ff:1a:55:3b:74:88:fa:c1:ff: cb:2e:76:75:02:a8:d3:b4:bc:b4:0e:02:40:ed:93: 1c:92:aa:aa:a2:b0:97:92:36:3c:cc:17:d8:d8:13: 6d:f7:0e:cf:28:7e:8e:03:c4:ab:e7:b0:c2:a6:c6: a1:8b:54:8a:f8:d8:ed:09:d8:10:b7:f9:57:83:40: 2b:68:59:ff:a2:aa:dd:2b:be:23:97:a1:5a:bc:c9: 44:a8:aa:66:39:1a:2a:23:21:ff:3a:7d:08:6a:cf: d1:9b:b7:fe:01:0c:01:23:b3:a3:54:19:da:a6:7b: 76:1e:97:d7:50:1e:31:d5:49:a5:05:6d:c5:57:50: 26:a6:f9:be:56:e5:72:7f:97:a4:c3:ff:ad:83:b6: d4:2c:70:ed:c5:12:83:62:5d:cc:fa:ef:0c:94:22: 73:c2:e8:46:d1:7f:b9:7c:99:ff:10:4d:cd:66:ae: 43:40:17:fd:dc:79:a0:14:8d:68:a0:6f:ef:a2:2b: 66:30:2f:12:93:bf:eb:bd:b0:4a:25:b0:43:08:2e: 23:86:c3:a2:08:63:01:56:92:6a:fe:99:b0:8a:8c: 37:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AC:A8:D4:14:39:FF:7F:20:7A:F5:45:8E:6B:4E:F7:8A:48:72:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ae:ef:0d:8a:61:b9:0c:76:da:1e:11:79:14:0a:31:fe:31: cf:27:ae:b3:80:13:a2:7b:c8:54:96:c9:a5:88:4a:0d:7c:46: b3:7c:87:70:05:45:7b:d2:69:5d:0a:9e:bf:b4:e7:b1:67:a5: fd:ea:21:b2:ae:5c:ae:e9:36:e4:d7:0d:ba:ac:3c:7f:b5:ec: df:d8:a9:08:f2:d8:ba:24:dc:f6:e6:1d:1b:c0:16:11:ce:1d: 9f:3c:a3:fe:26:91:74:52:3a:8e:fa:fd:5f:b7:1c:2f:db:e9: db:de:41:c5:f7:44:da:1c:e6:60:03:1a:78:5d:e1:75:e3:05: 5f:46:1c:84:16:73:9b:03:ad:04:c9:d1:18:32:76:71:83:12: 02:c6:ea:fc:5f:3b:e8:a5:58:75:26:42:3b:4c:99:68:e5:16: c5:9d:3f:c7:a0:17:ad:c3:0c:bf:b2:f6:49:83:4c:a9:72:3e: 2a:d5:f4:81:6e:f1:5a:ad:ae:1c:1f:d0:40:9a:e4:4a:0b:f2: b7:14:e5:2b:ff:27:04:b8:8f:78:54:27:45:2f:b0:a6:9b:e8: 06:f6:5d:ea:22:3f:93:6b:18:58:b9:07:88:32:19:a3:df:72: 4a:65:ce:2d:80:dc:1e:17:24:94:de:e0:47:a2:64:e9:5b:a8: 15:00:91:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z397IPq/MIvKXCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NTA5Y2NiNDEtMzZhOC00OTE2LWFjZWYtOTc4MTZkOGQ2N2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/PppOaYYcMpnSvL0SEAceZfDjgEJbyB2dGz k5T8AiRaEsT/GlU7dIj6wf/LLnZ1AqjTtLy0DgJA7ZMckqqqorCXkjY8zBfY2BNt 9w7PKH6OA8Sr57DCpsahi1SK+NjtCdgQt/lXg0AraFn/oqrdK74jl6FavMlEqKpm ORoqIyH/On0Ias/Rm7f+AQwBI7OjVBnapnt2HpfXUB4x1UmlBW3FV1Ampvm+VuVy f5ekw/+tg7bULHDtxRKDYl3M+u8MlCJzwuhG0X+5fJn/EE3NZq5DQBf93HmgFI1o oG/voitmMC8Sk7/rvbBKJbBDCC4jhsOiCGMBVpJq/pmwiow38wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWsqNQUOf9/IHr1RY5rTveKSHLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBhYTcwYjMtZjNkNS0z NmY3LThhOWItODhjYWQ3OWZiNWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiu7w2KYbkMdtoeEXkUCjH+Mc8nrrOAE6J7yFSWyaWISg18RrN8h3AF RXvSaV0Knr+057Fnpf3qIbKuXK7pNuTXDbqsPH+17N/YqQjy2Lok3PbmHRvAFhHO HZ88o/4mkXRSOo76/V+3HC/b6dveQcX3RNoc5mADGnhd4XXjBV9GHIQWc5sDrQTJ 0RgydnGDEgLG6vxfO+ilWHUmQjtMmWjlFsWdP8egF63DDL+y9kmDTKlyPirV9IFu 8Vqtrhwf0ECa5EoL8rcU5Sv/JwS4j3hUJ0UvsKab6Ab2XeoiP5NrGFi5B4gyGaPf ckplzi2A3B4XJJTe4EeiZOlbqBUAkWU= -----END CERTIFICATE-----Generated at Thu Mar 26 05:55:57 2026 by rpki-client