$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3cfce9d5-6eaf-343e-95ce-2518aea6f001.roa File: 3cfce9d5-6eaf-343e-95ce-2518aea6f001.roa (raw, json) Hash identifier: 5kRCfdcj/SAHOF1vcGN6qGMDt/VlIOlTuWcwTSovtvU= Subject key identifier: D0:DD:3C:04:5F:B7:04:55:92:A2:A1:65:F7:A4:8C:F2:4D:A5:1B:5D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DFBBF72C2A7BBF219CAE74980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3cfce9d5-6eaf-343e-95ce-2518aea6f001.roa Signing time: Thu 28 May 2026 12:15:13 +0000 ROA not before: Thu 28 May 2026 12:15:13 +0000 ROA not after: Wed 26 Aug 2026 12:15:13 +0000 asID: 19905 IP address blocks: 173.17.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:bf:72:c2:a7:bb:f2:19:ca:e7:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 28 12:15:13 2026 GMT Not After : Aug 26 12:15:13 2026 GMT Subject: CN=de4f20e5-37c7-4ec9-a23f-152a22a8b36f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:18:82:fd:c1:c6:59:d3:79:8c:40:49:3e: b4:c5:1a:53:14:b4:ed:59:16:e9:d4:7f:a4:af:0a: 34:d1:5e:f5:0c:05:3b:cd:6b:ea:55:33:2e:d6:e9: 5a:f3:bd:cb:5d:08:53:87:a2:aa:eb:a5:7e:2d:25: f2:ca:6e:24:86:08:8d:fb:9b:c9:51:e4:d5:f9:f4: 6e:9d:4a:35:68:de:8d:bc:62:c1:09:8f:eb:a8:1f: 84:82:06:90:08:a1:37:84:dd:ec:80:ad:44:6c:5c: f8:3a:10:06:5e:d9:f7:6a:ad:b4:92:60:25:5f:aa: 74:78:b8:ba:28:f5:72:1f:bf:a5:67:9b:58:24:8d: e1:21:3b:0d:66:6d:46:8b:73:df:57:f2:75:0d:f3: 7d:db:20:e7:fb:33:aa:0a:c4:f2:1e:02:c1:e4:c4: 68:bc:83:71:f0:89:1d:d6:bc:e7:7c:be:86:0c:a7: 8b:05:f2:eb:4f:5a:f8:b9:a9:45:01:ba:db:54:d9: 97:79:87:48:ea:a3:ce:ed:df:70:b5:ea:bf:9d:3e: 9c:06:c1:5c:84:03:d1:da:8d:59:c1:5b:62:72:bf: 88:75:c9:a6:05:35:29:a5:c4:1c:7d:31:b9:19:4a: 6d:22:ba:ee:81:a2:3c:6e:ae:63:5d:a8:5e:15:0b: bc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DD:3C:04:5F:B7:04:55:92:A2:A1:65:F7:A4:8C:F2:4D:A5:1B:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3cfce9d5-6eaf-343e-95ce-2518aea6f001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b0:30:24:bb:f7:06:c7:24:97:47:e2:43:4d:29:71:d3:8e: cb:63:c1:66:9d:3d:5a:65:9d:c2:38:1c:f3:a2:ba:ea:c0:27: e2:76:dc:3c:a0:bd:f4:2b:f7:82:23:a0:99:0a:5c:60:8a:91: 20:de:7f:e8:8e:d6:a2:7e:3b:91:1c:59:dc:ad:17:ce:4c:fa: 6b:d9:f3:37:be:c8:02:10:64:d7:cf:24:1a:74:b3:de:f1:a2: 70:31:9d:91:2e:62:e8:f4:f0:27:40:7a:e8:19:fc:96:42:10: 5f:23:60:5f:49:17:64:62:fd:ce:11:33:6d:83:14:10:50:ad: 46:ec:82:98:76:e5:da:22:13:af:5e:ad:04:d3:a4:e7:31:f0: 75:fa:e5:f9:19:78:9d:b5:41:4f:e0:99:d4:a2:72:ca:b2:4f: 5a:7b:46:b6:59:2f:f0:5b:99:41:71:b6:e1:e8:a6:b9:38:0e: 2f:b3:43:fd:74:e8:45:7f:2a:14:a3:5d:87:51:de:aa:b1:b9: 74:c3:3d:76:60:81:1f:dd:10:71:fb:97:5c:59:e5:75:8c:a0: 17:61:cf:23:0e:a2:e9:c7:71:e6:8a:2f:f1:f1:c4:6b:f9:0d: d4:1c:09:be:6e:5d:45:aa:ca:61:f2:b1:28:50:1e:b2:a8:0a: 91:9a:6d:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE37v3LCp7vyGcrnSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyODEyMTUxM1oXDTI2MDgyNjEyMTUxM1owLzEtMCsGA1UEAxMk ZGU0ZjIwZTUtMzdjNy00ZWM5LWEyM2YtMTUyYTIyYThiMzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptMYgv3BxlnTeYxAST60xRpTFLTtWRbp1H+k rwo00V71DAU7zWvqVTMu1ula873LXQhTh6Kq66V+LSXyym4khgiN+5vJUeTV+fRu nUo1aN6NvGLBCY/rqB+EggaQCKE3hN3sgK1EbFz4OhAGXtn3aq20kmAlX6p0eLi6 KPVyH7+lZ5tYJI3hITsNZm1Gi3PfV/J1DfN92yDn+zOqCsTyHgLB5MRovINx8Ikd 1rznfL6GDKeLBfLrT1r4ualFAbrbVNmXeYdI6qPO7d9wteq/nT6cBsFchAPR2o1Z wVticr+IdcmmBTUppcQcfTG5GUptIrrugaI8bq5jXaheFQu8PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDdPARftwRVkqKhZfekjPJNpRtdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2NmY2U5ZDUtNmVhZi0z NDNlLTk1Y2UtMjUxOGFlYTZmMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSwMCS79wbHJJdH4kNNKXHTjstjwWadPVplncI4HPOiuurAJ+J23Dyg vfQr94IjoJkKXGCKkSDef+iO1qJ+O5EcWdytF85M+mvZ8ze+yAIQZNfPJBp0s97x onAxnZEuYuj08CdAeugZ/JZCEF8jYF9JF2Ri/c4RM22DFBBQrUbsgph25doiE69e rQTTpOcx8HX65fkZeJ21QU/gmdSicsqyT1p7RrZZL/BbmUFxtuHoprk4Di+zQ/10 6EV/KhSjXYdR3qqxuXTDPXZggR/dEHH7l1xZ5XWMoBdhzyMOounHceaKL/HxxGv5 DdQcCb5uXUWqymHysShQHrKoCpGabWk= -----END CERTIFICATE-----Generated at Thu Jun 4 11:20:00 2026 by rpki-client