$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b0b0de9-09b8-3430-bf86-e301cf883913.roa File: 4b0b0de9-09b8-3430-bf86-e301cf883913.roa (raw, json) Hash identifier: LploLIuDkzLN6LNpbdynnXACMIg5fk+eTL23zCmcqFw= Subject key identifier: 06:BD:92:84:E9:0A:EC:B9:72:34:94:B1:E0:09:52:DA:41:7E:2D:02 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A036E5B689028156847C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b0b0de9-09b8-3430-bf86-e301cf883913.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.20.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:03:6e:5b:68:90:28:15:68:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=26cd920a-d75d-4e79-82dd-985a124c210a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:53:40:d1:8c:f4:fb:fc:49:f5:48:71:27: 49:5d:56:64:b2:48:88:a7:81:2d:b7:6d:22:92:91: 4e:1e:b4:bb:1d:78:af:9c:3b:d5:a5:34:92:28:a3: 52:a4:4e:84:1f:e2:12:56:47:c8:35:6c:12:c5:91: 14:3b:15:44:07:42:79:03:91:2e:ed:e9:54:e7:85: 7a:aa:94:20:c7:9f:1d:ca:a4:81:00:23:47:46:0f: 5a:c9:ef:c0:e1:b7:07:46:6b:86:3f:2c:0b:22:da: 66:f5:6a:0f:db:e3:6e:ce:9f:f9:32:43:f1:15:a8: 34:4c:15:cc:b8:43:48:30:05:0c:eb:44:bf:75:a5: ef:c2:ec:70:8a:e6:15:23:2c:25:b4:08:26:38:78: ba:2b:87:12:f3:9e:33:ac:3e:b8:97:19:e7:66:65: 73:ef:92:bd:7e:07:10:14:f0:39:62:78:a4:b5:8e: 35:df:f3:31:a3:79:7c:22:d3:73:fa:2a:4b:be:c2: f5:2b:1b:5d:83:b3:ff:c0:f3:08:92:b9:3e:32:f7: fb:56:f3:cc:f4:a0:4d:43:fb:75:a7:d1:48:ee:87: a3:cd:75:aa:87:5f:d3:5b:4c:d4:84:dc:1f:f0:d4: a4:89:ce:58:a7:a7:87:fe:ff:e0:70:d7:6a:9e:0d: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BD:92:84:E9:0A:EC:B9:72:34:94:B1:E0:09:52:DA:41:7E:2D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b0b0de9-09b8-3430-bf86-e301cf883913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:13:ae:d6:5f:1c:d1:96:30:23:de:ae:26:be:b2:6b:1b:42: a7:d6:bf:18:7b:94:2b:9b:fd:8e:b0:fc:a1:af:52:7a:0f:37: 1f:bf:57:47:23:37:be:7d:d9:27:7b:7d:e6:68:f3:9a:5a:07: 0b:23:5f:43:dd:33:32:d1:f5:b9:e5:4c:95:70:10:e4:85:67: 73:27:fb:f7:42:a6:01:0c:5e:47:51:a3:f6:5f:c5:df:67:38: 8c:cd:2e:a3:f9:3f:c3:b3:09:5e:91:1c:bd:5e:31:c4:d3:cc: 23:2b:02:2e:20:b0:5a:c5:2b:08:46:47:f3:cb:49:4e:de:97: 59:19:b5:34:03:d1:ae:62:74:a5:74:87:60:e5:95:76:2e:7f: 12:ba:62:83:59:a5:5d:e1:35:8b:d1:33:74:c8:82:77:b8:a4: 40:d3:c3:39:11:be:27:61:14:e9:23:a7:9c:c7:07:16:7c:bd: 01:02:ed:df:c3:9a:b4:a8:57:77:e6:c6:39:1f:26:0d:db:23: 89:a8:20:76:d7:a2:1d:9e:72:66:ce:5e:2b:cd:64:be:67:7d: e2:79:17:fa:92:4a:fb:0d:70:5f:f0:04:e8:fb:f9:1a:0a:d1: a6:cb:06:93:bb:7c:4a:f7:c7:ec:93:2e:19:14:94:79:17:f7: 2d:fc:35:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegNuW2iQKBVoR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MjZjZDkyMGEtZDc1ZC00ZTc5LTgyZGQtOTg1YTEyNGMyMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvypTQNGM9Pv8SfVIcSdJXVZkskiIp4Ett20i kpFOHrS7HXivnDvVpTSSKKNSpE6EH+ISVkfINWwSxZEUOxVEB0J5A5Eu7elU54V6 qpQgx58dyqSBACNHRg9aye/A4bcHRmuGPywLItpm9WoP2+Nuzp/5MkPxFag0TBXM uENIMAUM60S/daXvwuxwiuYVIywltAgmOHi6K4cS854zrD64lxnnZmVz75K9fgcQ FPA5YniktY413/Mxo3l8ItNz+ipLvsL1Kxtdg7P/wPMIkrk+Mvf7VvPM9KBNQ/t1 p9FI7oejzXWqh1/TW0zUhNwf8NSkic5Yp6eH/v/gcNdqng322QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAa9koTpCuy5cjSUseAJUtpBfi0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGIwYjBkZTktMDliOC0z NDMwLWJmODYtZTMwMWNmODgzOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYTrtZfHNGWMCPeria+smsbQqfWvxh7lCub/Y6w/KGvUnoPNx+/V0cj N7592Sd7feZo85paBwsjX0PdMzLR9bnlTJVwEOSFZ3Mn+/dCpgEMXkdRo/Zfxd9n OIzNLqP5P8OzCV6RHL1eMcTTzCMrAi4gsFrFKwhGR/PLSU7el1kZtTQD0a5idKV0 h2DllXYufxK6YoNZpV3hNYvRM3TIgne4pEDTwzkRvidhFOkjp5zHBxZ8vQEC7d/D mrSoV3fmxjkfJg3bI4moIHbXoh2ecmbOXivNZL5nfeJ5F/qSSvsNcF/wBOj7+RoK 0abLBpO7fEr3x+yTLhkUlHkX9y38Ncw= -----END CERTIFICATE-----Generated at Thu Mar 12 03:42:48 2026 by rpki-client