$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/298d153c-a512-3708-8595-a633609844b1.roa File: 298d153c-a512-3708-8595-a633609844b1.roa (raw, json) Hash identifier: xefXZ04cePTU/8HaiaIG0FTluCFiF0jhw0dmPZI9QCs= Subject key identifier: 20:BF:87:A8:01:0E:71:2B:AB:C9:85:34:9A:58:1F:D4:DA:58:11:A1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DFBC0615C6ED3481C1AC3BA80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/298d153c-a512-3708-8595-a633609844b1.roa Signing time: Thu 28 May 2026 12:17:06 +0000 ROA not before: Thu 28 May 2026 12:17:06 +0000 ROA not after: Wed 26 Aug 2026 12:17:06 +0000 asID: 19905 IP address blocks: 173.20.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:c0:61:5c:6e:d3:48:1c:1a:c3:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 28 12:17:06 2026 GMT Not After : Aug 26 12:17:06 2026 GMT Subject: CN=15ad7249-1a91-41ff-a339-457ebda90b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cd:d6:19:dd:2c:7a:b8:31:98:cc:b3:38:f2: f5:3f:94:b6:b5:67:5f:0f:33:34:05:ee:70:35:7f: db:c4:ee:b6:d7:8a:50:81:9a:31:4d:48:6e:da:06: 70:1b:2a:da:ae:68:2e:8b:9b:26:34:cc:33:e3:28: 92:97:6a:50:9a:31:b8:01:6d:c8:d6:14:aa:cb:c0: 97:c4:92:58:ce:6a:c2:b1:07:94:42:12:66:64:cb: 46:5b:de:db:0d:3a:28:31:4a:f7:53:67:7e:d5:76: f6:1b:19:6f:70:5a:a6:63:47:3b:48:50:31:72:51: 03:6b:eb:4f:8a:a2:02:52:6f:ca:28:7d:23:34:96: a7:43:8d:38:59:f3:b7:3f:e1:c8:9d:e1:5b:a1:d0: df:8d:a8:73:57:dc:f9:45:61:bc:55:ec:9a:69:ae: a9:a2:ed:4c:e8:b0:ea:be:f0:8a:cd:ec:e4:24:6d: 9b:04:a7:68:5b:02:88:dc:b7:36:4a:8f:37:79:94: e7:4a:85:74:14:31:6d:6b:19:a0:1e:53:92:52:f9: 1d:3b:47:41:3f:43:2c:5a:86:2d:78:da:54:5e:09: 50:07:4f:b0:63:48:64:da:13:fa:05:31:21:b8:89: 58:2f:3a:5b:7a:cd:4c:b4:3b:85:bc:ab:06:31:26: 78:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BF:87:A8:01:0E:71:2B:AB:C9:85:34:9A:58:1F:D4:DA:58:11:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/298d153c-a512-3708-8595-a633609844b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:72:b8:bb:10:be:c7:13:59:13:8f:ae:1d:82:67:ab:9e:ad: 85:29:b2:49:ce:53:1d:d1:2f:61:61:03:23:3a:44:70:6a:0f: e7:91:ab:1a:9a:af:b1:bd:08:8a:4a:56:21:99:40:81:45:e7: 3b:1c:6d:df:03:19:b2:e3:e7:92:61:d1:3a:f0:78:21:a4:23: 0a:3e:3b:a8:a9:65:b0:fb:3c:43:c3:0f:1f:2a:f8:a6:c9:7b: 14:75:28:f2:c8:dc:45:fe:ef:d9:83:46:8c:60:32:5a:b4:1c: 5d:85:61:a1:97:33:51:d8:f4:52:2d:80:b2:52:e0:61:05:70: 4d:12:fc:3a:c0:4c:ec:c4:45:ea:95:1f:26:d1:d3:70:b7:76: b9:08:82:82:91:c4:54:30:00:99:7e:30:cd:9f:fa:de:45:46: 4e:be:0d:fb:a9:01:f8:e8:25:c8:07:75:bb:c4:09:5d:88:9c: 3e:da:b8:a2:1f:0d:fa:7e:b8:e7:8f:80:ba:f8:80:d5:59:51: 5d:f9:5b:7e:80:66:3f:37:51:57:84:90:50:e5:2a:b9:00:8b: 0c:13:43:4f:ca:33:69:0c:b6:13:aa:cf:89:27:f5:c6:a1:01: 13:e6:e8:25:2f:be:93:5b:ce:37:1f:2d:f2:f5:55:73:5b:4a: 02:65:c8:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE37wGFcbtNIHBrDuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyODEyMTcwNloXDTI2MDgyNjEyMTcwNlowLzEtMCsGA1UEAxMk MTVhZDcyNDktMWE5MS00MWZmLWEzMzktNDU3ZWJkYTkwYjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M3WGd0sergxmMyzOPL1P5S2tWdfDzM0Be5w NX/bxO6214pQgZoxTUhu2gZwGyrarmgui5smNMwz4yiSl2pQmjG4AW3I1hSqy8CX xJJYzmrCsQeUQhJmZMtGW97bDTooMUr3U2d+1Xb2GxlvcFqmY0c7SFAxclEDa+tP iqICUm/KKH0jNJanQ404WfO3P+HIneFbodDfjahzV9z5RWG8Veyaaa6pou1M6LDq vvCKzezkJG2bBKdoWwKI3Lc2So83eZTnSoV0FDFtaxmgHlOSUvkdO0dBP0MsWoYt eNpUXglQB0+wY0hk2hP6BTEhuIlYLzpbes1MtDuFvKsGMSZ4nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCC/h6gBDnErq8mFNJpYH9TaWBGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjk4ZDE1M2MtYTUxMi0z NzA4LTg1OTUtYTYzMzYwOTg0NGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtyuLsQvscTWROPrh2CZ6uerYUpsknOUx3RL2FhAyM6RHBqD+eRqxqa r7G9CIpKViGZQIFF5zscbd8DGbLj55Jh0TrweCGkIwo+O6ipZbD7PEPDDx8q+KbJ exR1KPLI3EX+79mDRoxgMlq0HF2FYaGXM1HY9FItgLJS4GEFcE0S/DrATOzEReqV HybR03C3drkIgoKRxFQwAJl+MM2f+t5FRk6+DfupAfjoJcgHdbvECV2InD7auKIf Dfp+uOePgLr4gNVZUV35W36AZj83UVeEkFDlKrkAiwwTQ0/KM2kMthOqz4kn9cah ARPm6CUvvpNbzjcfLfL1VXNbSgJlyCI= -----END CERTIFICATE-----Generated at Thu Jun 4 11:20:16 2026 by rpki-client