$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/520689e2-69b2-3b1b-829a-564de76aaf83.roa File: 520689e2-69b2-3b1b-829a-564de76aaf83.roa (raw, json) Hash identifier: Fh7DU8tIiQ/c70Lz4h5kVE/95HTl6a6WOVC5w+XaS+Q= Subject key identifier: 2E:50:4B:54:FB:71:67:0F:2A:18:14:F9:BB:14:A4:D1:F1:BB:EA:70 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DA3E557383EFED9B26BCADA80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/520689e2-69b2-3b1b-829a-564de76aaf83.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 19905 IP address blocks: 173.18.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:57:38:3e:fe:d9:b2:6b:ca:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=b8779250-7b55-4ecb-8b80-e787a5b76e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:c1:c8:93:a7:f0:47:86:29:8f:70:c6:c6: 58:0d:d3:5c:53:d6:a3:ee:8a:60:58:d4:38:87:62: 94:20:44:b1:ef:9a:e4:ae:4d:24:58:57:ab:56:14: 3d:49:d0:87:a9:93:1e:63:99:d4:f3:3a:93:b8:9f: 7a:46:c0:06:9e:60:61:5f:1f:7f:b7:04:48:17:c6: df:02:06:02:89:30:e5:a8:1a:ff:0b:52:e2:f1:60: b0:14:3f:f4:6f:01:95:2a:f8:b2:1e:00:2f:c7:6d: fa:8a:2e:11:8c:72:9c:9c:c4:db:ab:95:3c:bf:e3: e2:55:4f:70:52:42:9f:c5:1a:a4:9c:10:94:96:c3: 24:a5:eb:bd:22:44:55:31:86:72:69:54:d9:78:55: 4b:a5:82:df:ef:54:fd:1e:5c:e0:74:8c:dd:11:a0: ff:ce:86:25:ef:44:61:a1:a9:f1:7d:1b:39:f7:f1: b6:f0:31:d6:37:34:e7:94:1e:67:77:21:92:6a:50: 83:63:93:1e:f2:f2:89:42:ab:c3:20:4a:93:55:35: b7:76:45:3b:fa:ab:a6:48:c3:13:bf:3a:d3:68:d8: 13:ea:a5:0d:af:73:c0:17:d8:d7:21:d9:c9:d6:f4: b6:fe:2e:4a:f0:ea:a6:a4:07:a6:f8:ef:a8:be:54: 24:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:50:4B:54:FB:71:67:0F:2A:18:14:F9:BB:14:A4:D1:F1:BB:EA:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/520689e2-69b2-3b1b-829a-564de76aaf83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a8:70:d2:be:e4:f8:8a:6b:5c:95:4a:d1:b5:2d:e4:b0:dc: a2:23:8f:45:7d:57:2b:d7:a3:c6:8e:c9:72:0c:f3:80:15:b4: 31:dc:f1:a2:fe:29:46:b7:20:09:93:73:be:cb:bf:6d:a6:20: 97:14:44:a9:6c:5e:fb:a6:f1:08:c4:ab:34:e4:9e:6c:05:6e: b4:88:d6:2e:7e:7e:0c:26:b5:72:64:44:23:3d:9f:61:b1:57: b6:40:36:26:42:d2:c9:8b:0a:d4:a4:27:7f:8f:b1:f0:28:0f: 5a:14:3d:d8:fb:e2:a1:77:14:e1:28:f9:02:3f:49:3c:8d:df: 01:de:ba:ae:17:72:f2:57:d6:4f:31:7d:91:de:93:ea:7f:6a: f9:07:93:27:0c:a9:d3:54:cd:5e:a4:e7:22:8b:42:61:5a:d6: 0d:f5:76:9b:ac:7a:c8:7d:94:cd:4c:24:7d:f3:c5:83:b4:51: 71:88:49:dd:e7:ac:4f:c5:e6:98:08:25:69:23:a5:5a:e1:39: 33:ad:48:66:61:f1:2e:88:94:97:16:22:f5:79:71:ee:26:ee: 29:16:f4:e1:26:7b:48:9d:a1:4d:35:60:18:9b:c4:9e:1b:47: 32:01:91:ff:58:7e:71:83:60:ed:fd:b4:d5:04:1b:c6:09:74: e4:b4:7b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5Vc4Pv7ZsmvK2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk Yjg3NzkyNTAtN2I1NS00ZWNiLThiODAtZTc4N2E1Yjc2ZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO3ByJOn8EeGKY9wxsZYDdNcU9aj7opgWNQ4 h2KUIESx75rkrk0kWFerVhQ9SdCHqZMeY5nU8zqTuJ96RsAGnmBhXx9/twRIF8bf AgYCiTDlqBr/C1Li8WCwFD/0bwGVKviyHgAvx236ii4RjHKcnMTbq5U8v+PiVU9w UkKfxRqknBCUlsMkpeu9IkRVMYZyaVTZeFVLpYLf71T9HlzgdIzdEaD/zoYl70Rh oanxfRs59/G28DHWNzTnlB5ndyGSalCDY5Me8vKJQqvDIEqTVTW3dkU7+qumSMMT vzrTaNgT6qUNr3PAF9jXIdnJ1vS2/i5K8OqmpAem+O+ovlQk5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5QS1T7cWcPKhgU+bsUpNHxu+pwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTIwNjg5ZTItNjliMi0z YjFiLTgyOWEtNTY0ZGU3NmFhZjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRKdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuocNK+5PiKa1yVStG1LeSw3KIjj0V9VyvXo8aOyXIM84AVtDHc8aL+ KUa3IAmTc77Lv22mIJcURKlsXvum8QjEqzTknmwFbrSI1i5+fgwmtXJkRCM9n2Gx V7ZANiZC0smLCtSkJ3+PsfAoD1oUPdj74qF3FOEo+QI/STyN3wHeuq4XcvJX1k8x fZHek+p/avkHkycMqdNUzV6k5yKLQmFa1g31dpusesh9lM1MJH3zxYO0UXGISd3n rE/F5pgIJWkjpVrhOTOtSGZh8S6IlJcWIvV5ce4m7ikW9OEme0idoU01YBibxJ4b RzIBkf9YfnGDYO39tNUEG8YJdOS0e1o= -----END CERTIFICATE-----Generated at Fri May 8 20:27:54 2026 by rpki-client