$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3422b541-bc0e-3042-99ae-b7593fb582e3.roa File: 3422b541-bc0e-3042-99ae-b7593fb582e3.roa (raw, json) Hash identifier: 5eflw9r5O3f5bzAlOBygZwnUWnU/yN9p0ibCfmQWhuc= Subject key identifier: 08:2E:74:90:A7:94:CD:72:2B:91:C9:BF:22:49:AB:FB:A7:D9:DD:E1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D1B1A0719AC4824B02A023F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3422b541-bc0e-3042-99ae-b7593fb582e3.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.20.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:07:19:ac:48:24:b0:2a:02:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=42fc6aa1-c5bb-4a46-97cc-8a599bb4898d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:6b:19:78:22:1b:0f:8e:9e:ee:10:d0:3d:06: 4b:13:c7:cf:ae:69:c1:84:88:62:53:79:5c:31:4f: f5:18:ad:90:a8:91:c5:f8:be:40:65:20:2f:99:ab: 65:a6:98:c0:f9:c8:01:11:fe:1d:a4:b5:b7:c6:8e: 19:58:75:4a:77:66:d9:64:bf:bc:60:ba:21:d4:52: 91:6b:bc:05:fe:3c:e2:72:22:13:02:a1:3b:c9:d0: 32:87:97:85:d0:98:5c:06:95:34:24:12:c1:9e:66: 26:90:55:1c:22:ad:4f:7e:a1:0d:69:3c:8b:2a:53: b5:b7:58:05:4d:28:e8:0d:85:99:93:d5:97:78:56: 28:24:67:50:f9:8e:7d:4c:12:40:af:90:9c:14:40: fe:f9:f3:cb:d7:d0:97:23:28:b1:4b:75:c0:f9:0b: a4:51:9a:00:5c:e4:d9:a3:e2:04:6d:a8:b8:75:3b: 1a:e3:31:d6:e8:be:30:68:0c:44:fb:1d:ba:2c:6c: 3d:19:8b:57:44:90:e6:28:dc:d1:2e:a9:d6:d6:e5: 0b:e0:17:b5:fd:58:61:88:a7:7c:6a:35:1f:a2:cb: 59:4c:9a:97:cb:46:aa:37:af:aa:e1:23:c3:06:24: d0:e1:c3:e7:97:7a:1d:75:ec:da:88:3a:89:f1:ec: d0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2E:74:90:A7:94:CD:72:2B:91:C9:BF:22:49:AB:FB:A7:D9:DD:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3422b541-bc0e-3042-99ae-b7593fb582e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:3b:bf:4a:8c:48:79:18:4b:dc:7e:cb:b9:be:6a:94:60:b0: a1:00:07:53:ca:60:fd:a5:9a:7a:6e:72:55:d3:1e:c9:1a:56: 8f:a5:26:8d:ee:08:4a:cb:0d:7b:a4:c6:c3:91:c2:74:db:b4: 40:bd:ff:e5:ea:4e:f9:cb:3f:b8:fc:d8:c8:49:38:8f:7b:cf: 6d:a7:9d:eb:8e:0c:55:bb:4f:87:69:2f:21:96:5a:a3:eb:95: 6b:89:e5:2f:48:3e:4d:c6:e9:5b:70:08:aa:44:52:42:e5:0c: 29:f3:38:93:fc:47:04:38:3e:4b:ba:ca:9d:24:e9:ca:a9:fe: 0f:11:99:2e:f5:ae:65:46:97:cb:56:52:ae:6b:e4:48:ba:a5: 12:c2:34:a2:c9:a6:3f:9f:84:49:49:10:f8:1b:20:27:03:4d: ff:0a:fe:26:4b:41:97:60:f1:50:a7:26:70:9c:26:1b:99:84: b4:24:21:a1:cc:c6:66:9b:ae:50:cd:61:ea:ee:5f:ec:64:cc: d6:79:b0:10:d9:fd:fb:49:ba:9a:df:ac:c6:66:88:53:cc:78: 6b:8f:06:97:a8:85:5b:9f:91:23:2d:b7:40:55:ea:13:24:4d: 89:5f:71:df:c0:c1:48:21:dc:d7:c9:33:28:92:75:1a:2e:79: 8f:13:dc:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGgcZrEgksCoCPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk NDJmYzZhYTEtYzViYi00YTQ2LTk3Y2MtOGE1OTliYjQ4OThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWsZeCIbD46e7hDQPQZLE8fPrmnBhIhiU3lc MU/1GK2QqJHF+L5AZSAvmatlppjA+cgBEf4dpLW3xo4ZWHVKd2bZZL+8YLoh1FKR a7wF/jziciITAqE7ydAyh5eF0JhcBpU0JBLBnmYmkFUcIq1PfqENaTyLKlO1t1gF TSjoDYWZk9WXeFYoJGdQ+Y59TBJAr5CcFED++fPL19CXIyixS3XA+QukUZoAXOTZ o+IEbai4dTsa4zHW6L4waAxE+x26LGw9GYtXRJDmKNzRLqnW1uUL4Be1/VhhiKd8 ajUfostZTJqXy0aqN6+q4SPDBiTQ4cPnl3oddezaiDqJ8ezQ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgudJCnlM1yK5HJvyJJq/un2d3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzQyMmI1NDEtYmMwZS0z MDQyLTk5YWUtYjc1OTNmYjU4MmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA7v0qMSHkYS9x+y7m+apRgsKEAB1PKYP2lmnpuclXTHskaVo+lJo3u CErLDXukxsORwnTbtEC9/+XqTvnLP7j82MhJOI97z22nneuODFW7T4dpLyGWWqPr lWuJ5S9IPk3G6VtwCKpEUkLlDCnzOJP8RwQ4Pku6yp0k6cqp/g8RmS71rmVGl8tW Uq5r5Ei6pRLCNKLJpj+fhElJEPgbICcDTf8K/iZLQZdg8VCnJnCcJhuZhLQkIaHM xmabrlDNYeruX+xkzNZ5sBDZ/ftJuprfrMZmiFPMeGuPBpeohVufkSMtt0BV6hMk TYlfcd/AwUgh3NfJMyiSdRoueY8T3H4= -----END CERTIFICATE-----Generated at Thu Mar 12 03:43:11 2026 by rpki-client