$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da1a3fa1-b944-3e45-919b-c81a4006b961.roa File: da1a3fa1-b944-3e45-919b-c81a4006b961.roa (raw, json) Hash identifier: 1c/NWphR0+5FssfW8D6XQNhLEOywph1E0Uqv6/MZVVo= Subject key identifier: 44:50:16:57:2F:78:ED:0C:63:74:E9:DF:AE:0B:75:DF:30:DB:5D:18 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D44FA6305F28660C6FBD31980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da1a3fa1-b944-3e45-919b-c81a4006b961.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 30036 IP address blocks: 173.20.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:63:05:f2:86:60:c6:fb:d3:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=3963f833-68e5-4a98-92f0-352b1c838ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:f1:9f:bc:ef:a5:7e:82:6e:02:6d:19:49: 76:f9:4d:66:24:fe:8f:d1:e4:ee:84:66:32:10:b4: eb:b6:28:1d:1d:74:b5:f8:60:c4:12:00:3c:e8:5c: 00:f4:8d:28:47:37:01:9e:e1:1f:6f:4e:45:e3:43: e9:69:1c:08:c1:04:7d:a4:59:d3:b1:8c:19:5e:44: ec:41:57:03:07:88:54:ef:80:e4:5c:e9:6d:9e:3c: 44:3e:03:cf:90:5a:04:a4:12:59:01:e6:49:f1:4f: f0:bb:f9:8a:f6:79:0d:82:1a:6d:ab:f5:63:a7:79: d9:0a:96:e9:4a:57:8d:d4:ef:b2:4e:fa:61:13:cd: 32:05:c0:db:a6:5e:8f:e5:d1:41:5e:d7:1d:8d:a6: 62:fe:4b:91:b9:e5:5a:36:5e:36:44:2b:cb:90:b5: 95:85:00:38:64:f0:7f:30:58:6c:62:38:f3:73:a4: 0c:d4:58:24:09:f0:1d:f0:2a:1c:6f:e3:7c:77:33: e9:ab:19:38:03:3f:51:57:17:07:a7:ce:bc:79:39: 3e:8d:8c:5a:b8:7e:93:ad:4f:31:03:8d:09:d6:33: 2c:ae:4d:77:be:a2:df:0b:b5:49:b7:ae:69:ae:13: ef:69:ce:d4:15:5b:3a:be:8c:f7:71:81:7d:62:fe: 24:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:50:16:57:2F:78:ED:0C:63:74:E9:DF:AE:0B:75:DF:30:DB:5D:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/da1a3fa1-b944-3e45-919b-c81a4006b961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:22:5d:58:19:e0:ee:cc:04:c3:05:7f:0c:29:79:72:35:b2: 4d:bd:2d:73:b3:36:a1:d7:24:d5:02:be:2c:e5:66:47:d1:a6: 8c:15:22:ce:29:7f:a9:cf:2a:d4:d3:02:8e:22:f6:d5:04:76: ca:ba:01:35:83:e2:e7:99:10:43:c5:d1:71:b5:db:a2:01:50: d4:d2:a8:34:a0:9a:a9:8c:c2:e5:4d:5d:75:75:d5:e0:0d:6b: da:a2:ff:0b:b0:59:43:f7:0b:32:3e:4c:ef:08:97:25:8a:7c: 20:5b:c1:4e:bd:e0:fd:be:31:3e:06:ec:8d:4f:be:63:31:85: 48:c1:3a:1e:1a:21:c2:47:77:01:77:77:1f:73:d4:07:5d:6e: fd:ff:be:46:9f:02:21:01:7a:a5:cf:8d:ad:80:9c:02:b6:e0: 9c:66:5a:54:4c:ca:28:bd:e1:18:34:2d:af:2a:3f:24:16:cc: 5d:b9:03:7b:08:ad:af:76:dd:df:4e:cc:cd:88:2b:25:53:88: ca:8b:c7:ea:cb:83:72:ce:8f:50:d5:ff:84:2d:75:8d:b2:59: 93:e1:b0:e7:a0:b6:1d:2a:0c:7b:f2:05:e8:41:f9:56:04:a8: ba:41:ae:8f:76:7c:3e:25:b8:66:00:cd:55:ed:21:9a:3e:27: 97:a0:4e:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+mMF8oZgxvvTGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk Mzk2M2Y4MzMtNjhlNS00YTk4LTkyZjAtMzUyYjFjODM4Y2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr3xn7zvpX6CbgJtGUl2+U1mJP6P0eTuhGYy ELTrtigdHXS1+GDEEgA86FwA9I0oRzcBnuEfb05F40PpaRwIwQR9pFnTsYwZXkTs QVcDB4hU74DkXOltnjxEPgPPkFoEpBJZAeZJ8U/wu/mK9nkNghptq/Vjp3nZCpbp SleN1O+yTvphE80yBcDbpl6P5dFBXtcdjaZi/kuRueVaNl42RCvLkLWVhQA4ZPB/ MFhsYjjzc6QM1FgkCfAd8Cocb+N8dzPpqxk4Az9RVxcHp868eTk+jYxauH6TrU8x A40J1jMsrk13vqLfC7VJt65prhPvac7UFVs6voz3cYF9Yv4knwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERQFlcveO0MY3Tp364Ldd8w210YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGExYTNmYTEtYjk0NC0z ZTQ1LTkxOWItYzgxYTQwMDZiOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQiXVgZ4O7MBMMFfwwpeXI1sk29LXOzNqHXJNUCvizlZkfRpowVIs4p f6nPKtTTAo4i9tUEdsq6ATWD4ueZEEPF0XG126IBUNTSqDSgmqmMwuVNXXV11eAN a9qi/wuwWUP3CzI+TO8IlyWKfCBbwU694P2+MT4G7I1PvmMxhUjBOh4aIcJHdwF3 dx9z1Addbv3/vkafAiEBeqXPja2AnAK24JxmWlRMyii94Rg0La8qPyQWzF25A3sI ra923d9OzM2IKyVTiMqLx+rLg3LOj1DV/4QtdY2yWZPhsOegth0qDHvyBehB+VYE qLpBro92fD4luGYAzVXtIZo+J5egToE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:13:22 2026 by rpki-client