$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/374bb8e2-9062-3201-a934-3c485d88682e.roa File: 374bb8e2-9062-3201-a934-3c485d88682e.roa (raw, json) Hash identifier: QgYsx/MqKOVqd5wjuBQL2k9IMBksCoRKE0CgE7NDjpw= Subject key identifier: DE:64:A7:9C:8A:8A:50:13:14:40:F9:3A:CC:9C:00:D5:1E:09:58:52 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA79D3B888B11C6E170088140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/374bb8e2-9062-3201-a934-3c485d88682e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30036 IP address blocks: 173.28.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:3b:88:8b:11:c6:e1:70:08:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=18e04f65-1c45-4f21-b17c-d6d98a9d0754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3c:a9:1a:78:87:28:00:e1:7d:31:21:27:2c: f0:c3:35:ab:f8:bb:fb:8a:83:31:89:94:45:9b:90: d2:7a:2a:11:0e:76:d8:66:fa:1a:4a:8e:13:d6:2a: 60:1d:5c:7c:f3:20:82:68:27:e2:a7:01:88:13:87: ab:45:05:ca:09:8d:53:8a:6a:93:1b:a6:31:26:42: e4:a2:fb:74:98:96:89:fd:f2:53:97:7b:b4:f0:18: 44:22:c9:b3:22:55:fb:89:4a:17:75:5c:4a:d4:f0: 7a:23:f2:a1:d3:ca:76:45:25:bf:7c:96:78:3f:e3: 7d:27:55:04:a5:96:91:b8:1b:0c:94:e2:2e:ba:3e: 3f:33:34:8b:16:7a:a7:c8:d9:dd:d3:73:3f:bb:e5: 22:2c:25:3c:c3:78:29:f3:5e:91:7e:62:6a:be:fc: 22:0a:c7:66:37:81:63:e6:41:63:85:03:60:e2:f4: 80:d8:fc:e9:49:3d:8b:80:04:17:ca:aa:17:ee:45: 4f:30:f3:08:cf:f8:aa:30:69:76:69:15:42:fb:60: fa:c8:99:fd:88:60:74:d3:52:03:b2:85:6a:e9:2b: 92:31:e0:9c:df:a7:9d:2d:73:fc:f5:34:2b:8d:a5: cc:7e:8f:66:ad:bf:6c:72:f7:7b:35:a2:be:80:74: 51:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:64:A7:9C:8A:8A:50:13:14:40:F9:3A:CC:9C:00:D5:1E:09:58:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/374bb8e2-9062-3201-a934-3c485d88682e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:4c:28:60:3f:75:e3:89:01:05:9b:0e:48:74:86:90:de:32: 2a:8d:4c:51:c7:b0:93:31:b2:5a:a8:e1:c8:dc:9a:fc:e6:58: fa:25:fd:16:06:fb:44:bc:08:a8:45:ab:6b:a3:b5:2a:35:89: d7:4d:1a:4d:ac:20:31:6a:1b:25:0b:f1:37:d0:ac:a0:6e:11: af:e9:c5:74:2b:3f:02:35:55:ab:0d:a1:be:06:04:10:18:68: e6:db:77:83:6d:12:4d:be:a8:18:7f:e8:e4:a7:60:f5:2e:9f: 2c:b9:b6:2d:d5:24:64:ed:f1:c6:95:72:c8:4d:ff:fa:19:67: 70:60:05:bb:96:75:42:e4:9b:a2:67:a0:d8:8b:5e:b6:53:46: 14:cf:0a:dc:61:2c:32:f0:00:f1:07:d6:d0:7f:b5:8f:9b:c7: 6b:1e:04:01:e0:46:6d:c5:f0:02:c8:c7:eb:98:92:a5:e7:a2: 5c:07:be:0f:3c:36:34:44:35:ac:dd:8f:ec:3e:7f:3b:c8:d1: 7c:6f:30:5a:1c:8a:6b:78:2a:64:9d:e7:0b:82:d4:33:cc:89: 77:96:75:43:16:eb:28:4d:50:ef:0e:4f:c9:76:28:94:1e:4e: 82:d2:f4:fb:cf:ee:41:8a:dd:8c:89:bd:ef:5c:c6:89:7f:a2: 49:ce:76:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnTuIixHG4XAIgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MThlMDRmNjUtMWM0NS00ZjIxLWIxN2MtZDZkOThhOWQwNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDypGniHKADhfTEhJyzwwzWr+Lv7ioMxiZRF m5DSeioRDnbYZvoaSo4T1ipgHVx88yCCaCfipwGIE4erRQXKCY1TimqTG6YxJkLk ovt0mJaJ/fJTl3u08BhEIsmzIlX7iUoXdVxK1PB6I/Kh08p2RSW/fJZ4P+N9J1UE pZaRuBsMlOIuuj4/MzSLFnqnyNnd03M/u+UiLCU8w3gp816RfmJqvvwiCsdmN4Fj 5kFjhQNg4vSA2PzpST2LgAQXyqoX7kVPMPMIz/iqMGl2aRVC+2D6yJn9iGB001ID soVq6SuSMeCc36edLXP89TQrjaXMfo9mrb9scvd7NaK+gHRRewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5kp5yKilATFED5OsycANUeCVhSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzc0YmI4ZTItOTA2Mi0z MjAxLWE5MzQtM2M0ODVkODg2ODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1MKGA/deOJAQWbDkh0hpDeMiqNTFHHsJMxslqo4cjcmvzmWPol/RYG +0S8CKhFq2ujtSo1iddNGk2sIDFqGyUL8TfQrKBuEa/pxXQrPwI1VasNob4GBBAY aObbd4NtEk2+qBh/6OSnYPUunyy5ti3VJGTt8caVcshN//oZZ3BgBbuWdULkm6Jn oNiLXrZTRhTPCtxhLDLwAPEH1tB/tY+bx2seBAHgRm3F8ALIx+uYkqXnolwHvg88 NjRENazdj+w+fzvI0XxvMFocimt4KmSd5wuC1DPMiXeWdUMW6yhNUO8OT8l2KJQe ToLS9PvP7kGK3YyJve9cxol/oknOdlA= -----END CERTIFICATE-----Generated at Fri Aug 21 01:02:01 2026 by rpki-client