$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20aadcab-c567-3304-ae84-2160e5e0260d.roa File: 20aadcab-c567-3304-ae84-2160e5e0260d.roa (raw, json) Hash identifier: 0QnMSVw8HO65yM+YAe5BPHKofFV/7lY+0IZ2eh6yWGY= Subject key identifier: 82:CD:98:AB:7E:C2:28:DE:1F:5A:CE:2B:EC:0F:E9:54:37:52:99:91 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DF35702E4B64E14AAA7D09DC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20aadcab-c567-3304-ae84-2160e5e0260d.roa Signing time: Mon 25 May 2026 11:58:19 +0000 ROA not before: Mon 25 May 2026 11:58:19 +0000 ROA not after: Sun 23 Aug 2026 11:58:19 +0000 asID: 19905 IP address blocks: 173.20.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f3:57:02:e4:b6:4e:14:aa:a7:d0:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 25 11:58:19 2026 GMT Not After : Aug 23 11:58:19 2026 GMT Subject: CN=f45a1c70-032e-441e-af10-0f9c09133557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:36:a1:7c:1d:d3:22:e5:7e:d0:bb:a4:63:01: be:bf:e8:a9:6c:62:bc:a1:22:9f:90:09:c2:a7:dc: 49:d6:28:b8:1a:c1:5b:af:71:c8:c5:ac:e2:ca:0c: de:c6:f6:36:f5:58:f3:15:ff:56:a0:87:92:32:e0: 54:e6:4a:ae:b9:5f:83:eb:33:98:8d:ad:f1:73:80: 82:5c:cb:e2:a1:a7:72:85:58:6d:63:84:6b:ac:68: 4c:f1:33:1b:7b:bb:fd:5a:d6:d3:a9:22:75:0b:4c: 58:23:50:3e:e6:8b:d9:72:f2:e4:9a:f1:73:72:99: 65:04:06:cf:d8:9a:a5:c0:35:db:d1:dc:c3:8c:3a: f4:7b:68:4b:79:e6:83:43:a4:bb:e6:b3:ff:8e:a6: 6e:9c:7e:6c:36:1c:cf:10:b0:fb:17:bf:16:85:66: 71:63:97:6d:85:45:de:68:25:8f:aa:b5:b1:a8:53: cb:5b:4e:34:00:0a:ae:13:df:d7:81:65:22:3e:40: 58:22:5d:a7:56:ed:11:8a:a0:ff:2e:e4:4b:16:00: 86:1f:eb:04:03:b7:fe:0c:cc:55:c2:e3:c4:70:82: db:39:df:27:ab:3e:a7:86:4a:cd:9b:22:8e:cd:04: 22:95:6f:6c:cf:4a:c8:58:55:f1:11:ad:e7:a1:dd: 36:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CD:98:AB:7E:C2:28:DE:1F:5A:CE:2B:EC:0F:E9:54:37:52:99:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/20aadcab-c567-3304-ae84-2160e5e0260d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:2f:d8:77:d8:65:9c:05:a0:f3:ca:6f:26:e7:ed:4b:ba:c5: fc:23:88:0b:d7:9f:f9:4a:a6:4b:45:2c:68:e6:3d:50:96:14: 8c:3a:08:3e:45:1a:34:4e:27:df:e8:18:cd:ad:71:25:8f:21: be:eb:2e:48:a3:6c:b1:35:56:1e:de:cd:ea:78:72:10:74:3e: c9:fe:df:4e:f6:6a:d2:4f:dc:e5:82:98:bf:e5:a4:46:b0:2f: af:0a:bf:7f:db:13:3b:1f:9f:27:61:15:92:bb:24:57:f0:27: 57:e6:ea:99:6b:a6:47:32:23:8b:79:18:a5:73:c4:f2:1f:0f: ee:df:83:75:cc:32:aa:a2:92:aa:50:16:50:38:bf:78:9b:87: ad:0a:41:bb:f6:29:f1:9f:34:c0:47:5b:3e:40:f8:6a:5a:89: a2:90:a8:07:5e:03:fa:b4:82:25:14:a1:57:0a:b1:06:6e:b4: f9:63:05:5d:34:0c:c1:23:f9:21:f6:9f:91:02:7a:b1:03:13: 76:58:be:60:5d:4f:af:63:d3:01:e7:d2:ec:34:d4:34:c6:9c: 99:54:21:f8:af:4f:9f:2f:38:20:a5:6e:b4:c9:16:b6:7a:31: 43:44:e5:83:d8:6f:73:81:70:87:3e:02:c6:d4:b6:8d:98:12: 56:63:cf:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zVwLktk4UqqfQncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyNTExNTgxOVoXDTI2MDgyMzExNTgxOVowLzEtMCsGA1UEAxMk ZjQ1YTFjNzAtMDMyZS00NDFlLWFmMTAtMGY5YzA5MTMzNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TahfB3TIuV+0LukYwG+v+ipbGK8oSKfkAnC p9xJ1ii4GsFbr3HIxaziygzexvY29VjzFf9WoIeSMuBU5kquuV+D6zOYja3xc4CC XMvioadyhVhtY4RrrGhM8TMbe7v9WtbTqSJ1C0xYI1A+5ovZcvLkmvFzcpllBAbP 2JqlwDXb0dzDjDr0e2hLeeaDQ6S75rP/jqZunH5sNhzPELD7F78WhWZxY5dthUXe aCWPqrWxqFPLW040AAquE9/XgWUiPkBYIl2nVu0RiqD/LuRLFgCGH+sEA7f+DMxV wuPEcILbOd8nqz6nhkrNmyKOzQQilW9sz0rIWFXxEa3nod02AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILNmKt+wijeH1rOK+wP6VQ3UpmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjBhYWRjYWItYzU2Ny0z MzA0LWFlODQtMjE2MGU1ZTAyNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQv2HfYZZwFoPPKbybn7Uu6xfwjiAvXn/lKpktFLGjmPVCWFIw6CD5F GjROJ9/oGM2tcSWPIb7rLkijbLE1Vh7ezep4chB0Psn+3072atJP3OWCmL/lpEaw L68Kv3/bEzsfnydhFZK7JFfwJ1fm6plrpkcyI4t5GKVzxPIfD+7fg3XMMqqikqpQ FlA4v3ibh60KQbv2KfGfNMBHWz5A+GpaiaKQqAdeA/q0giUUoVcKsQZutPljBV00 DMEj+SH2n5ECerEDE3ZYvmBdT69j0wHn0uw01DTGnJlUIfivT58vOCClbrTJFrZ6 MUNE5YPYb3OBcIc+AsbUto2YElZjzwU= -----END CERTIFICATE-----Generated at Thu Jun 4 11:19:18 2026 by rpki-client