$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/444de57e-8f69-305a-89db-3b58f1b4cb8e.roa File: 444de57e-8f69-305a-89db-3b58f1b4cb8e.roa (raw, json) Hash identifier: 2vhmovbzLpD2TUg3eBkP1vJrsLuYX3ChOqQHdtpbIiw= Subject key identifier: 0E:B9:20:39:A2:26:61:51:EA:3E:3A:DA:72:DD:50:E2:08:AE:1B:A8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DF3584E5B3CB81FD388852560 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/444de57e-8f69-305a-89db-3b58f1b4cb8e.roa Signing time: Mon 25 May 2026 12:00:56 +0000 ROA not before: Mon 25 May 2026 12:00:56 +0000 ROA not after: Sun 23 Aug 2026 12:00:56 +0000 asID: 19905 IP address blocks: 173.29.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f3:58:4e:5b:3c:b8:1f:d3:88:85:25:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 25 12:00:56 2026 GMT Not After : Aug 23 12:00:56 2026 GMT Subject: CN=fc72bcad-0976-42b9-be2c-c08951d3cee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:ad:1b:b0:4e:93:c7:af:6d:39:54:89:13: 94:48:83:5e:5e:69:41:eb:f1:7a:6a:1e:68:04:af: 85:ef:bf:48:16:07:8c:14:bc:13:1d:b8:67:b8:84: f8:64:8d:9a:96:3d:15:19:37:24:06:05:3f:a3:fb: f8:2f:24:50:b3:e5:96:2c:5c:7f:f9:77:36:fe:47: 44:15:c1:2b:b6:81:dc:81:92:17:cc:e6:fe:a4:04: 8a:21:08:cd:52:e7:07:be:0b:19:f8:79:32:32:6a: f7:49:ca:18:43:95:1c:cc:89:49:ff:95:bc:0e:c3: fc:1d:3d:e5:81:af:76:45:d2:39:89:01:01:f8:81: 04:9a:19:e7:ce:c1:b3:9d:e3:8a:b7:d0:ed:27:80: 9e:5c:74:10:dc:29:63:f8:bd:df:d2:74:64:50:4e: 6d:ec:59:fb:6d:0f:a1:0f:a2:1d:af:aa:30:b9:d5: 63:71:83:32:0f:9c:71:17:49:cb:fa:18:f7:3c:05: 77:d2:9f:b4:dd:89:6f:3d:a2:38:86:06:36:4c:57: b7:8c:d0:d8:18:bf:da:e8:5f:a0:74:22:fa:70:a5: ee:c4:63:9a:2c:51:2e:cb:9a:7d:ab:3b:7d:38:04: da:81:7a:30:b2:98:41:30:a8:10:9d:d0:36:10:56: 1d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B9:20:39:A2:26:61:51:EA:3E:3A:DA:72:DD:50:E2:08:AE:1B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/444de57e-8f69-305a-89db-3b58f1b4cb8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:87:fa:c6:d5:44:7c:b4:58:5b:47:86:11:da:94:0f:57:ab: a8:fc:a5:6a:6c:65:6e:8a:2b:6d:c9:50:1c:b1:1a:0b:04:0c: ca:c5:3e:24:25:1f:82:08:86:16:5f:75:a2:4d:da:68:f5:4d: c4:bd:c5:8e:5b:45:5d:00:36:54:fc:11:f8:10:e8:38:39:33: ce:7e:b3:3d:14:d9:66:38:65:17:be:89:1b:e3:48:9b:51:3b: 96:5c:61:78:68:56:99:be:c4:06:13:1a:00:8d:16:b9:08:bb: 69:70:2e:75:a1:16:60:ee:2f:e5:76:76:10:f2:a2:87:f7:c6: b5:da:7d:ec:a8:d8:b0:6e:3d:73:d5:14:4a:98:2c:67:aa:f3: dc:13:fe:bc:ee:71:18:20:08:e4:06:b8:2a:d9:a5:e1:f8:2a: a5:d5:ad:42:57:cb:6a:a9:b8:01:5e:b8:0f:ff:59:77:26:ef: ed:09:20:b6:7f:d8:71:7b:36:d1:88:0f:75:44:7c:f8:6f:9f: 34:99:12:54:81:5f:7a:14:cc:b1:29:67:2f:b3:d6:58:16:87: d6:7f:1c:e6:93:b4:d7:46:54:92:9d:c4:11:bf:04:27:fb:c3: d5:ef:25:32:d2:19:e2:9c:e8:44:20:d5:59:b7:73:97:2e:1c: 01:33:4c:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zWE5bPLgf04iFJWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyNTEyMDA1NloXDTI2MDgyMzEyMDA1NlowLzEtMCsGA1UEAxMk ZmM3MmJjYWQtMDk3Ni00MmI5LWJlMmMtYzA4OTUxZDNjZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcKtG7BOk8evbTlUiROUSINeXmlB6/F6ah5o BK+F779IFgeMFLwTHbhnuIT4ZI2alj0VGTckBgU/o/v4LyRQs+WWLFx/+Xc2/kdE FcErtoHcgZIXzOb+pASKIQjNUucHvgsZ+HkyMmr3ScoYQ5UczIlJ/5W8DsP8HT3l ga92RdI5iQEB+IEEmhnnzsGzneOKt9DtJ4CeXHQQ3Clj+L3f0nRkUE5t7Fn7bQ+h D6Idr6owudVjcYMyD5xxF0nL+hj3PAV30p+03YlvPaI4hgY2TFe3jNDYGL/a6F+g dCL6cKXuxGOaLFEuy5p9qzt9OATagXowsphBMKgQndA2EFYdeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA65IDmiJmFR6j462nLdUOIIrhuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDQ0ZGU1N2UtOGY2OS0z MDVhLTg5ZGItM2I1OGYxYjRjYjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+H+sbVRHy0WFtHhhHalA9Xq6j8pWpsZW6KK23JUByxGgsEDMrFPiQl H4IIhhZfdaJN2mj1TcS9xY5bRV0ANlT8EfgQ6Dg5M85+sz0U2WY4ZRe+iRvjSJtR O5ZcYXhoVpm+xAYTGgCNFrkIu2lwLnWhFmDuL+V2dhDyoof3xrXafeyo2LBuPXPV FEqYLGeq89wT/rzucRggCOQGuCrZpeH4KqXVrUJXy2qpuAFeuA//WXcm7+0JILZ/ 2HF7NtGID3VEfPhvnzSZElSBX3oUzLEpZy+z1lgWh9Z/HOaTtNdGVJKdxBG/BCf7 w9XvJTLSGeKc6EQg1Vm3c5cuHAEzTOk= -----END CERTIFICATE-----Generated at Thu Jun 4 11:19:19 2026 by rpki-client