$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37fb6013-32c5-3358-99f2-57e7e2f87612.roa File: 37fb6013-32c5-3358-99f2-57e7e2f87612.roa (raw, json) Hash identifier: DyU9hlutk7vHC9Xk9LE+4x+jJNvZqMVRKaTOBxp9ZyI= Subject key identifier: 75:F3:D0:14:EC:C3:8B:EB:94:D1:88:D6:39:CA:41:84:99:3C:9B:52 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A59FE5F424D97DF468240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37fb6013-32c5-3358-99f2-57e7e2f87612.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.20.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:59:fe:5f:42:4d:97:df:46:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=50ebfb4b-1c72-4f58-999a-7c0e0909fc85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f6:20:bc:7b:3d:5c:c0:15:73:48:16:dd:98: dd:b0:6c:54:7a:38:f0:b9:0d:2e:ab:c2:14:e9:6b: 0d:cd:dd:4b:6e:47:6c:eb:21:26:5d:22:b6:d4:fd: 5e:76:f2:67:99:44:0c:12:19:bc:0e:19:ce:30:52: 31:c5:91:c7:a6:80:fe:4f:2d:bb:cb:63:12:04:35: bd:2b:35:0e:02:72:62:c0:fa:bb:92:46:9a:84:6b: ce:32:cd:63:5f:fd:7c:b5:ea:d9:a2:ef:b0:5a:27: 82:57:19:7a:8e:15:47:be:b0:19:6a:39:0c:1e:83: 84:58:10:c8:a7:4e:31:23:af:bc:f4:59:3a:6f:8c: 3e:1e:fc:50:3e:5d:0d:2b:b8:3e:fb:1b:02:0c:c0: 00:86:66:b4:97:6b:97:cd:37:1d:2b:0f:a4:ab:5e: 38:3b:77:93:b2:df:47:0b:d5:41:8e:39:ff:57:39: 1e:89:58:5e:58:1d:76:09:ae:5b:81:cb:35:36:22: bc:c2:11:73:9a:b0:64:63:7b:b5:f5:ff:6f:be:43: 1d:a6:5b:95:0e:33:ac:a5:b1:94:15:51:21:8d:9a: f7:29:07:6a:bf:17:03:c2:39:75:0a:65:81:6c:54: 58:26:41:f2:0b:9f:24:3e:e1:53:1b:21:5c:5a:33: 33:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F3:D0:14:EC:C3:8B:EB:94:D1:88:D6:39:CA:41:84:99:3C:9B:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37fb6013-32c5-3358-99f2-57e7e2f87612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:94:a6:10:47:4e:b5:6e:72:b3:18:9f:11:46:8b:b9:21:9d: 83:b6:88:89:8e:b8:a4:ec:2c:80:7f:cd:a0:89:83:0a:13:3e: c0:1b:9f:34:15:f0:06:6a:09:ff:de:9f:3e:52:83:47:59:8b: 5c:39:d3:37:f0:90:f3:50:97:50:69:e1:52:ea:be:a9:13:23: 04:79:69:ea:80:8e:57:0f:a7:cb:df:ea:ca:89:1a:46:92:fc: 34:bd:01:8b:cc:81:09:2c:64:1e:55:0d:30:63:33:4d:56:55: 3a:d1:1f:2b:db:f2:2c:68:57:60:ab:b2:c5:66:ed:2d:55:5b: dd:e0:94:21:45:95:28:5d:6e:59:61:84:f9:be:e0:0b:37:8a: 6a:4f:d2:a8:91:e4:b4:47:ef:3b:de:29:5a:1a:1b:fd:ca:78: f2:6c:40:8c:df:72:19:83:b6:20:d8:43:64:1a:51:3c:59:c5: 44:fc:0e:4c:19:82:45:89:46:73:7e:14:dd:2f:47:62:e9:eb: d4:8c:89:88:03:d0:5f:57:d3:c9:aa:54:3f:1e:7c:d5:47:52: e0:ac:f6:89:33:4e:84:8f:c6:9b:5e:96:e8:9e:52:ec:ce:71: 6e:ae:1f:6b:f7:c2:19:09:51:c9:80:51:33:89:cb:a3:7e:90: 9d:13:4c:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeln+X0JNl99GgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NTBlYmZiNGItMWM3Mi00ZjU4LTk5OWEtN2MwZTA5MDlmYzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PYgvHs9XMAVc0gW3ZjdsGxUejjwuQ0uq8IU 6WsNzd1Lbkds6yEmXSK21P1edvJnmUQMEhm8DhnOMFIxxZHHpoD+Ty27y2MSBDW9 KzUOAnJiwPq7kkaahGvOMs1jX/18terZou+wWieCVxl6jhVHvrAZajkMHoOEWBDI p04xI6+89Fk6b4w+HvxQPl0NK7g++xsCDMAAhma0l2uXzTcdKw+kq144O3eTst9H C9VBjjn/VzkeiVheWB12Ca5bgcs1NiK8whFzmrBkY3u19f9vvkMdpluVDjOspbGU FVEhjZr3KQdqvxcDwjl1CmWBbFRYJkHyC58kPuFTGyFcWjMzEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXz0BTsw4vrlNGI1jnKQYSZPJtSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzdmYjYwMTMtMzJjNS0z MzU4LTk5ZjItNTdlN2UyZjg3NjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiUphBHTrVucrMYnxFGi7khnYO2iImOuKTsLIB/zaCJgwoTPsAbnzQV 8AZqCf/enz5Sg0dZi1w50zfwkPNQl1Bp4VLqvqkTIwR5aeqAjlcPp8vf6sqJGkaS /DS9AYvMgQksZB5VDTBjM01WVTrRHyvb8ixoV2CrssVm7S1VW93glCFFlShdbllh hPm+4As3impP0qiR5LRH7zveKVoaG/3KePJsQIzfchmDtiDYQ2QaUTxZxUT8DkwZ gkWJRnN+FN0vR2Lp69SMiYgD0F9X08mqVD8efNVHUuCs9okzToSPxpteluieUuzO cW6uH2v3whkJUcmAUTOJy6N+kJ0TTHE= -----END CERTIFICATE-----Generated at Thu Mar 12 03:42:36 2026 by rpki-client