$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4601a129-5e5f-3484-82ed-6f52c998960d.roa File: 4601a129-5e5f-3484-82ed-6f52c998960d.roa (raw, json) Hash identifier: pFJcB/rKtikE6atAz/Aqj46RbPJ5qSZRok+fG1IZtlI= Subject key identifier: C7:65:37:70:73:E9:C1:F8:0D:88:E8:93:A5:FA:31:E5:BF:23:73:79 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DF35774DEC01B0AE3801F7F60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4601a129-5e5f-3484-82ed-6f52c998960d.roa Signing time: Mon 25 May 2026 11:59:13 +0000 ROA not before: Mon 25 May 2026 11:59:13 +0000 ROA not after: Sun 23 Aug 2026 11:59:13 +0000 asID: 19905 IP address blocks: 173.21.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f3:57:74:de:c0:1b:0a:e3:80:1f:7f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 25 11:59:13 2026 GMT Not After : Aug 23 11:59:13 2026 GMT Subject: CN=67e15c2d-4710-4b7a-bb9e-4e6a8d6521b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4a:30:a2:c1:6d:24:67:eb:27:8a:93:3b:2f: bf:e2:b6:ac:1e:32:13:f3:44:22:ef:f1:3c:4b:d6: 63:f6:81:ac:71:77:18:27:c0:4a:3a:f0:29:18:f4: 90:f1:66:bf:23:59:1f:be:89:af:30:b1:e4:32:4e: 34:83:58:5e:3d:66:1b:68:ef:8f:3a:28:98:a6:1f: 6b:6b:f9:84:dc:09:57:aa:60:e4:3b:44:e6:a1:21: c6:60:89:d8:a7:b1:9e:a2:67:09:1d:81:a9:a5:64: 8c:47:e8:f3:82:8c:46:27:02:af:e6:c0:a9:dd:34: dc:14:7b:1f:5b:2e:d7:ae:f3:89:3c:05:03:1f:0d: 55:d7:ce:e3:7a:a2:9d:c8:d3:88:50:50:13:02:63: 24:78:8e:1f:02:db:f0:02:ab:7f:94:52:62:45:e5: ff:e0:74:93:6f:7c:87:72:9d:21:d4:6d:85:f9:bc: b0:23:e4:7f:3b:a3:fc:46:86:d3:5a:56:d9:a8:21: 47:e3:27:8e:81:ce:be:56:e8:8d:9d:9a:69:55:d4: 5f:50:27:11:2a:d1:38:67:f8:d1:d9:c0:93:b3:2d: 7f:ba:0a:b2:44:47:10:80:2e:25:a2:b9:49:4b:db: 24:92:8d:de:8d:71:79:de:5b:36:24:08:81:b4:ae: 2b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:65:37:70:73:E9:C1:F8:0D:88:E8:93:A5:FA:31:E5:BF:23:73:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4601a129-5e5f-3484-82ed-6f52c998960d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:25:9c:bd:97:59:cf:4d:4c:58:f8:bb:42:33:5a:90:7f:27: 86:b5:87:8f:ef:2b:20:36:d4:c6:c5:e0:8d:89:e5:86:93:12: a3:72:7f:a5:42:a7:18:c2:10:3e:d2:29:0f:5e:6c:7b:e5:4f: 01:d3:64:f9:2c:72:29:ef:79:08:9d:48:b3:eb:b6:48:de:44: 18:3e:8b:c2:98:fb:90:d6:89:68:9b:c8:f2:bf:4e:35:be:59: ca:0a:bd:c8:62:e7:89:a1:18:ef:d7:cc:07:62:85:ed:f1:e1: f9:57:e2:be:3b:db:ed:b7:25:3f:82:14:52:0b:2b:83:5c:99: 9e:e8:1e:69:fd:39:f0:cb:6b:a2:07:3c:82:bd:90:ae:e6:6c: 9c:44:a8:a9:c2:f7:8d:5b:26:eb:66:95:d9:60:35:69:6a:a0: ee:50:55:81:dd:32:4b:57:f3:30:ef:36:2b:b2:bf:06:91:61: a3:c9:02:a5:e9:24:ff:b5:ee:02:9f:78:ee:e4:2d:a3:00:03: 9b:0e:64:5c:e5:c5:f4:1a:71:d8:ca:ae:1a:d9:22:20:db:ac: fc:4f:95:7e:a2:a7:34:51:d2:04:fb:6a:5c:0a:08:97:11:ae: fa:ae:26:11:10:0d:6c:9c:df:cf:db:88:49:26:11:62:a9:d0: 57:6b:33:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zV3TewBsK44Aff2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyNTExNTkxM1oXDTI2MDgyMzExNTkxM1owLzEtMCsGA1UEAxMk NjdlMTVjMmQtNDcxMC00YjdhLWJiOWUtNGU2YThkNjUyMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0owosFtJGfrJ4qTOy+/4rasHjIT80Qi7/E8 S9Zj9oGscXcYJ8BKOvApGPSQ8Wa/I1kfvomvMLHkMk40g1hePWYbaO+POiiYph9r a/mE3AlXqmDkO0TmoSHGYInYp7GeomcJHYGppWSMR+jzgoxGJwKv5sCp3TTcFHsf Wy7XrvOJPAUDHw1V187jeqKdyNOIUFATAmMkeI4fAtvwAqt/lFJiReX/4HSTb3yH cp0h1G2F+bywI+R/O6P8RobTWlbZqCFH4yeOgc6+VuiNnZppVdRfUCcRKtE4Z/jR 2cCTsy1/ugqyREcQgC4lorlJS9skko3ejXF53ls2JAiBtK4r9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdlN3Bz6cH4DYjok6X6MeW/I3N5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDYwMWExMjktNWU1Zi0z NDg0LTgyZWQtNmY1MmM5OTg5NjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRWGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAlnL2XWc9NTFj4u0IzWpB/J4a1h4/vKyA21MbF4I2J5YaTEqNyf6VC pxjCED7SKQ9ebHvlTwHTZPkscinveQidSLPrtkjeRBg+i8KY+5DWiWibyPK/TjW+ WcoKvchi54mhGO/XzAdihe3x4flX4r472+23JT+CFFILK4NcmZ7oHmn9OfDLa6IH PIK9kK7mbJxEqKnC941bJutmldlgNWlqoO5QVYHdMktX8zDvNiuyvwaRYaPJAqXp JP+17gKfeO7kLaMAA5sOZFzlxfQacdjKrhrZIiDbrPxPlX6ipzRR0gT7alwKCJcR rvquJhEQDWyc38/biEkmEWKp0FdrM1o= -----END CERTIFICATE-----Generated at Thu Jun 4 11:19:31 2026 by rpki-client