$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20a1f0dd-f241-3e13-8808-635340a4dfc4.roa File: 20a1f0dd-f241-3e13-8808-635340a4dfc4.roa (raw, json) Hash identifier: uUd+mJiFbA5dcpIXFu9b1IKwIKJI2tBU3/o1dYIp3jU= Subject key identifier: 61:67:6A:8C:18:AC:93:50:D6:B6:67:4E:54:0D:6A:6D:FA:40:F3:7A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DF357111ABC43DF3896678290 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20a1f0dd-f241-3e13-8808-635340a4dfc4.roa Signing time: Mon 25 May 2026 11:58:26 +0000 ROA not before: Mon 25 May 2026 11:58:26 +0000 ROA not after: Sun 23 Aug 2026 11:58:26 +0000 asID: 19905 IP address blocks: 173.18.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f3:57:11:1a:bc:43:df:38:96:67:82:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 25 11:58:26 2026 GMT Not After : Aug 23 11:58:26 2026 GMT Subject: CN=b23aff0b-6f03-4e36-b2be-2173f892e7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:07:13:3f:b4:45:63:4a:e7:1c:f8:b6:5f:e2: 13:6e:28:97:f3:d7:d5:af:6f:c1:f5:48:a3:68:11: 7f:2e:1f:de:25:07:4c:86:25:cf:50:2b:a1:82:00: 2d:0b:e2:84:79:cf:e9:a1:ca:c9:49:4b:91:48:94: 70:18:9c:d2:26:52:7f:f5:46:46:22:b3:4d:de:ca: da:b0:56:1b:fc:b3:68:e9:ba:31:06:ae:50:c7:6a: 9f:fc:58:a6:50:36:58:4a:70:c3:06:7b:e7:a7:c5: cf:f3:10:35:16:e5:c3:bb:93:13:e0:fc:49:76:b7: 18:3d:e5:71:5e:47:44:08:b4:7b:a8:97:54:68:fd: 5e:d3:22:ed:66:77:b7:2e:c0:84:b9:e9:06:42:2f: b4:d7:1c:e7:21:ab:f7:10:9a:59:68:58:d5:57:01: 37:ea:ef:90:48:fe:d9:a5:5d:2a:e5:3c:ee:b1:bd: 4c:d7:c0:e0:06:5b:01:10:20:9d:56:bb:1f:5b:a7: b3:2b:5b:70:a1:46:fe:db:a7:6d:07:c7:ef:8d:c5: 3b:62:01:80:22:1e:0f:30:3e:a3:4b:df:d9:5c:63: 88:15:81:f7:d5:cc:1d:00:1f:e9:cf:59:db:bd:ef: 4c:10:74:23:41:ca:5c:d4:34:7d:cb:0b:aa:5c:4d: 9f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:67:6A:8C:18:AC:93:50:D6:B6:67:4E:54:0D:6A:6D:FA:40:F3:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20a1f0dd-f241-3e13-8808-635340a4dfc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a2:4f:22:7b:91:14:3a:26:36:a2:a2:be:ea:22:f7:c0:db: 59:9f:71:b7:51:7a:7b:51:9a:05:51:c9:30:7f:bf:3f:36:6a: 42:24:ad:6d:01:cd:e3:0b:b2:07:c3:37:31:df:30:91:44:e2: 7b:85:7b:8a:27:04:87:ac:dd:83:d0:cc:52:95:32:60:e4:13: b4:ad:8d:df:bf:57:1e:81:fd:c9:1c:01:f1:dd:a9:4c:a0:7a: a6:c4:d5:9b:cb:e1:0b:16:0e:10:f7:27:5a:eb:d0:cb:86:1a: d2:9d:c3:45:ba:ce:0a:5e:c0:f7:66:dd:62:3e:9d:bb:1b:4e: 7a:a2:0d:54:01:1a:0c:c1:24:bb:3c:f6:ac:06:83:6a:a9:b7: 6b:67:36:4d:31:89:e0:1d:35:77:89:18:70:60:a4:99:31:f5: a1:f8:e0:19:08:a1:d6:89:e1:48:83:9a:95:69:5f:ea:3a:62: 7e:d7:5c:da:95:94:c8:6d:e6:f8:45:27:a4:a1:4a:8a:fa:d7: dc:90:17:49:b7:ff:c5:df:63:2b:5f:c3:ba:90:2a:00:a7:23: 2f:62:c0:1e:46:93:01:f9:88:4d:b0:f1:d7:03:ff:22:92:ef: 84:46:c9:11:9a:c7:d4:88:56:a0:25:96:1a:ea:62:c2:03:0a: 97:9e:a9:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zVxEavEPfOJZngpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyNTExNTgyNloXDTI2MDgyMzExNTgyNlowLzEtMCsGA1UEAxMk YjIzYWZmMGItNmYwMy00ZTM2LWIyYmUtMjE3M2Y4OTJlN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gcTP7RFY0rnHPi2X+ITbiiX89fVr2/B9Uij aBF/Lh/eJQdMhiXPUCuhggAtC+KEec/pocrJSUuRSJRwGJzSJlJ/9UZGIrNN3sra sFYb/LNo6boxBq5Qx2qf/FimUDZYSnDDBnvnp8XP8xA1FuXDu5MT4PxJdrcYPeVx XkdECLR7qJdUaP1e0yLtZne3LsCEuekGQi+01xznIav3EJpZaFjVVwE36u+QSP7Z pV0q5Tzusb1M18DgBlsBECCdVrsfW6ezK1twoUb+26dtB8fvjcU7YgGAIh4PMD6j S9/ZXGOIFYH31cwdAB/pz1nbve9MEHQjQcpc1DR9ywuqXE2fOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFnaowYrJNQ1rZnTlQNam36QPN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjBhMWYwZGQtZjI0MS0z ZTEzLTg4MDgtNjM1MzQwYTRkZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyiTyJ7kRQ6Jjaior7qIvfA21mfcbdRentRmgVRyTB/vz82akIkrW0B zeMLsgfDNzHfMJFE4nuFe4onBIes3YPQzFKVMmDkE7Stjd+/Vx6B/ckcAfHdqUyg eqbE1ZvL4QsWDhD3J1rr0MuGGtKdw0W6zgpewPdm3WI+nbsbTnqiDVQBGgzBJLs8 9qwGg2qpt2tnNk0xieAdNXeJGHBgpJkx9aH44BkIodaJ4UiDmpVpX+o6Yn7XXNqV lMht5vhFJ6ShSor619yQF0m3/8XfYytfw7qQKgCnIy9iwB5GkwH5iE2w8dcD/yKS 74RGyRGax9SIVqAllhrqYsIDCpeeqUg= -----END CERTIFICATE-----Generated at Thu Jun 4 11:20:25 2026 by rpki-client