$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4fb6d10f-fa44-3dd7-830b-4430075c6f2d.roa File: 4fb6d10f-fa44-3dd7-830b-4430075c6f2d.roa (raw, json) Hash identifier: 42MfoTx0UOkmXjgES+aXQVf1acQmsNYI288BVXLxSIM= Subject key identifier: 9C:A1:6B:84:88:83:55:EC:4F:3C:A2:1B:FF:FF:77:BA:C6:9A:5A:8E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E2D9F439340A164172B7CDFA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4fb6d10f-fa44-3dd7-830b-4430075c6f2d.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 19905 IP address blocks: 173.20.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:43:93:40:a1:64:17:2b:7c:df:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=ec1d7cae-bbf9-4831-a263-b9df26ecc3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f4:43:8e:61:1e:3c:23:06:48:93:b5:cd:d7: af:a5:9a:a5:08:e7:9c:fc:88:ec:e1:9a:c5:9c:67: 98:74:3a:e6:3f:f1:79:01:c2:3a:19:4d:03:47:dd: 19:b6:11:6c:c3:db:44:4c:a2:63:31:15:22:60:11: 08:5a:7b:33:f5:46:42:e1:a5:0f:84:c6:27:d6:0d: 32:26:2e:9c:1f:29:a5:29:4b:95:67:3d:32:ab:47: db:fd:99:c8:fb:39:92:29:77:68:02:9e:04:44:f2: d9:06:ca:d2:9d:92:60:a2:a6:aa:d2:b5:bd:79:e6: 1c:ae:98:3d:57:7c:2e:42:b3:0b:26:34:85:45:3e: e0:cc:42:d5:4e:ee:2d:02:3b:07:c5:7b:8c:dd:fe: a1:94:d9:60:2a:f1:b4:61:33:08:e9:6f:a3:7a:f2: 24:1e:72:15:b0:a7:83:16:75:bc:20:07:31:a5:d9: 52:08:e3:4b:1d:8c:ad:42:ee:d1:9e:49:00:db:a5: ae:e7:08:5b:93:2e:e4:a4:13:85:9c:86:cd:3a:42: 51:36:64:81:f2:ef:ee:ab:69:22:77:9f:5c:83:b5: ab:fd:9e:a6:32:a3:ad:b2:51:78:a8:4f:b6:76:d0: 3e:46:c3:02:04:93:03:2e:1e:09:62:51:7c:f3:53: 1c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A1:6B:84:88:83:55:EC:4F:3C:A2:1B:FF:FF:77:BA:C6:9A:5A:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4fb6d10f-fa44-3dd7-830b-4430075c6f2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ae:af:1c:2e:f4:e2:75:d7:ea:cb:98:39:e7:f1:e2:4c:ee: ea:d0:53:03:10:17:b2:2b:37:c5:a1:b2:5c:58:7f:a8:88:e6: 91:ee:68:57:80:56:29:28:e2:26:de:10:68:90:9b:13:d3:b4: 2e:e2:8a:5e:32:c2:56:fc:19:1a:1b:46:a6:bf:c1:b1:3b:ef: bf:46:32:72:10:22:e4:5f:6d:2b:01:6d:b6:ac:e5:0e:83:05: 34:d0:43:7c:d4:59:8c:24:4d:e9:70:0d:14:d6:4f:51:a1:0d: f7:f4:50:14:3b:72:55:a2:de:d2:2f:9a:bf:93:87:df:a8:f6: 6e:e5:48:ec:cb:fe:05:0e:3a:eb:a0:93:2c:3a:6a:19:2c:18: c9:a2:d0:69:cc:b8:8f:86:e6:6c:67:a5:37:49:10:e4:21:91: df:98:76:86:6d:14:21:da:ca:a1:c7:a4:b3:f9:d9:c6:f4:f4: 7e:a3:ba:f3:64:1c:c5:d8:6e:db:d1:9b:71:ca:f2:19:89:2d: b9:50:a1:0c:76:c1:e4:a5:f7:99:f1:f7:63:2f:15:6e:a7:42: 40:fc:4e:09:02:ae:53:c9:0b:db:06:23:bf:48:3d:b9:88:86: 3a:43:05:da:b6:68:06:30:29:64:13:93:f2:17:24:72:4a:20: 42:5a:ba:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tn0OTQKFkFyt836AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk ZWMxZDdjYWUtYmJmOS00ODMxLWEyNjMtYjlkZjI2ZWNjM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPRDjmEePCMGSJO1zdevpZqlCOec/Ijs4ZrF nGeYdDrmP/F5AcI6GU0DR90ZthFsw9tETKJjMRUiYBEIWnsz9UZC4aUPhMYn1g0y Ji6cHymlKUuVZz0yq0fb/ZnI+zmSKXdoAp4ERPLZBsrSnZJgoqaq0rW9eeYcrpg9 V3wuQrMLJjSFRT7gzELVTu4tAjsHxXuM3f6hlNlgKvG0YTMI6W+jevIkHnIVsKeD FnW8IAcxpdlSCONLHYytQu7RnkkA26Wu5whbky7kpBOFnIbNOkJRNmSB8u/uq2ki d59cg7Wr/Z6mMqOtslF4qE+2dtA+RsMCBJMDLh4JYlF881McSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyha4SIg1XsTzyiG///d7rGmlqOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGZiNmQxMGYtZmE0NC0z ZGQ3LTgzMGItNDQzMDA3NWM2ZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6urxwu9OJ11+rLmDnn8eJM7urQUwMQF7IrN8WhslxYf6iI5pHuaFeA Viko4ibeEGiQmxPTtC7iil4ywlb8GRobRqa/wbE7779GMnIQIuRfbSsBbbas5Q6D BTTQQ3zUWYwkTelwDRTWT1GhDff0UBQ7clWi3tIvmr+Th9+o9m7lSOzL/gUOOuug kyw6ahksGMmi0GnMuI+G5mxnpTdJEOQhkd+YdoZtFCHayqHHpLP52cb09H6juvNk HMXYbtvRm3HK8hmJLblQoQx2weSl95nx92MvFW6nQkD8TgkCrlPJC9sGI79IPbmI hjpDBdq2aAYwKWQTk/IXJHJKIEJauig= -----END CERTIFICATE-----Generated at Mon Jul 20 19:32:46 2026 by rpki-client