$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b754e13-afea-3f6f-b341-04d616782a8a.roa File: 2b754e13-afea-3f6f-b341-04d616782a8a.roa (raw, json) Hash identifier: Dnc2Mk+BwY7s4/w7NpEE5sVdtd320sTcueudtEU6YJU= Subject key identifier: 60:8A:D6:FE:14:B7:66:D1:63:D5:1E:E7:8E:07:43:A9:7C:CF:E8:E1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D20AF78985796388F73729880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b754e13-afea-3f6f-b341-04d616782a8a.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.20.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:78:98:57:96:38:8f:73:72:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=5dd6f566-af81-4d37-8f06-84126e4c055d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:92:d8:58:1d:fa:e1:2b:fe:e7:5f:b1:cc: 7b:21:e7:57:9f:7b:5b:3d:fc:d5:87:54:07:38:cc: 3b:c8:10:95:6a:f6:0f:8c:3b:18:95:49:1d:3f:83: 34:70:62:2a:8d:bb:1d:6b:ab:9e:45:69:1c:ee:10: 76:b3:52:f7:10:b8:c3:7a:2a:47:43:fd:60:d7:30: fb:85:be:97:07:b0:6e:62:cd:7d:dc:08:05:a3:72: 71:63:b8:1c:06:56:82:2f:09:e7:00:7b:34:6d:cf: ae:71:e8:65:56:98:c4:2c:46:4c:7a:49:d6:52:d9: cd:e3:84:02:46:99:f1:a0:e1:cc:2f:0c:bf:7d:c7: 8b:e7:23:c0:57:2f:e5:70:0a:bb:b4:df:b7:a4:d0: 2a:42:c8:d5:30:b9:a6:a1:0f:53:07:24:ae:02:a6: 56:73:9b:85:0a:35:ad:07:8d:0b:76:59:6c:c8:08: c5:56:1b:89:c2:29:88:31:aa:7f:ca:a2:3c:de:5a: 4b:f3:44:43:3d:b9:81:81:af:04:79:01:90:34:0e: b7:8d:61:3b:c2:e2:79:64:35:c6:2e:48:7a:6b:92: 82:c2:bb:dd:5a:35:5b:ea:fd:2a:ab:83:3a:59:da: 17:f1:d5:8e:42:b0:b3:00:5f:a0:e5:11:dd:f9:d7: d7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8A:D6:FE:14:B7:66:D1:63:D5:1E:E7:8E:07:43:A9:7C:CF:E8:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b754e13-afea-3f6f-b341-04d616782a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:18:6f:06:71:9b:75:db:05:4f:de:16:b9:1b:d8:04:f7:fa: a1:cf:ae:fd:ce:8f:53:1a:57:be:b8:42:1a:47:1e:34:68:ba: c4:a5:21:ca:48:ef:e0:78:72:5d:90:80:80:e3:ed:57:03:b3: 2d:c6:5f:fe:88:d4:65:fa:77:11:9e:8e:f1:e0:ef:f3:24:fe: 6a:9a:6a:f6:23:9f:55:f5:22:9b:c3:fb:76:b0:8e:86:22:83: de:47:ec:ed:c3:ca:8e:c6:71:b7:d6:9a:fd:fe:7e:69:33:7e: 75:90:e2:97:8e:85:97:39:de:39:79:4a:c9:cf:39:b8:00:45: 11:39:a4:d7:97:2f:04:1d:d3:7e:5c:d9:ce:90:b3:56:3e:b1: 00:12:83:59:01:7d:f9:ca:9d:7e:12:6c:76:08:2a:fa:96:80: 91:8f:99:5c:8a:23:c0:55:ce:97:61:11:54:9f:4d:7a:91:7b: ea:40:71:c1:d7:b9:12:4b:63:2a:86:b2:ba:14:c2:67:9b:e7: 27:12:e9:ef:87:bc:0b:13:7c:88:dd:27:e5:ea:8f:55:3c:cb: e4:8b:e7:1d:93:46:4c:37:9b:fd:6f:d6:15:47:b8:5b:36:df: 07:bb:73:b2:ef:e8:5a:ff:09:27:06:b1:63:6d:5f:97:da:f8: 75:f6:d1:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr3iYV5Y4j3NymIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk NWRkNmY1NjYtYWY4MS00ZDM3LThmMDYtODQxMjZlNGMwNTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7mS2Fgd+uEr/udfscx7IedXn3tbPfzVh1QH OMw7yBCVavYPjDsYlUkdP4M0cGIqjbsda6ueRWkc7hB2s1L3ELjDeipHQ/1g1zD7 hb6XB7BuYs193AgFo3JxY7gcBlaCLwnnAHs0bc+ucehlVpjELEZMeknWUtnN44QC RpnxoOHMLwy/fceL5yPAVy/lcAq7tN+3pNAqQsjVMLmmoQ9TBySuAqZWc5uFCjWt B40LdllsyAjFVhuJwimIMap/yqI83lpL80RDPbmBga8EeQGQNA63jWE7wuJ5ZDXG Lkh6a5KCwrvdWjVb6v0qq4M6WdoX8dWOQrCzAF+g5RHd+dfX7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCK1v4Ut2bRY9Ue544HQ6l8z+jhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmI3NTRlMTMtYWZlYS0z ZjZmLWIzNDEtMDRkNjE2NzgyYThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0YbwZxm3XbBU/eFrkb2AT3+qHPrv3Oj1MaV764QhpHHjRousSlIcpI 7+B4cl2QgIDj7VcDsy3GX/6I1GX6dxGejvHg7/Mk/mqaavYjn1X1IpvD+3awjoYi g95H7O3Dyo7GcbfWmv3+fmkzfnWQ4peOhZc53jl5SsnPObgARRE5pNeXLwQd035c 2c6Qs1Y+sQASg1kBffnKnX4SbHYIKvqWgJGPmVyKI8BVzpdhEVSfTXqRe+pAccHX uRJLYyqGsroUwmeb5ycS6e+HvAsTfIjdJ+Xqj1U8y+SL5x2TRkw3m/1v1hVHuFs2 3we7c7Lv6Fr/CScGsWNtX5fa+HX20Wg= -----END CERTIFICATE-----Generated at Thu Mar 12 05:02:26 2026 by rpki-client