$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/526dec6b-5967-3f7d-8a83-48af09059781.roa File: 526dec6b-5967-3f7d-8a83-48af09059781.roa (raw, json) Hash identifier: P23kBVloGy6AXD76LXIy+1tj04MVUszmLPl4jKHHULQ= Subject key identifier: B7:CB:7A:1B:5D:C1:CA:70:85:D1:29:FA:8A:59:99:5E:0D:D7:D2:0C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DFBC06825DB6FE51A2DA87300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/526dec6b-5967-3f7d-8a83-48af09059781.roa Signing time: Thu 28 May 2026 12:17:09 +0000 ROA not before: Thu 28 May 2026 12:17:09 +0000 ROA not after: Wed 26 Aug 2026 12:17:09 +0000 asID: 19905 IP address blocks: 173.21.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:c0:68:25:db:6f:e5:1a:2d:a8:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 28 12:17:09 2026 GMT Not After : Aug 26 12:17:09 2026 GMT Subject: CN=ab37c80b-2767-4642-9ba6-5786efa756e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2a:98:71:8b:77:6c:b6:e2:95:8f:4c:7d:ff: 41:15:5d:bb:a8:83:a1:15:91:fb:96:2c:90:6f:28: bb:f7:b1:b7:7c:0b:42:e7:53:f6:94:38:21:7d:45: 60:6b:8f:f7:71:2a:8d:46:1b:b8:1b:2f:32:92:bb: 56:de:82:f6:8e:77:2a:ee:74:65:bb:09:3c:66:34: 71:0f:88:5c:f4:c5:ad:de:ae:f7:41:22:7f:df:2a: d6:a6:28:93:3f:ec:83:31:17:de:e9:27:ec:2c:31: 86:3a:09:2e:f0:df:3d:55:ab:f6:0c:25:71:4a:08: 76:51:bb:8b:61:b9:9b:54:b0:4a:f4:46:ea:8b:58: fc:94:07:a0:2e:c6:77:58:72:a8:98:35:d1:f5:ab: 0d:a1:80:6f:23:6c:75:ae:89:20:80:b1:b2:e3:cc: 01:eb:5f:e2:75:2a:f9:07:ae:31:bc:f3:a3:24:16: a7:6a:7e:40:60:d0:7a:11:14:bf:c6:16:43:8d:aa: 63:c8:0a:ed:66:af:36:33:31:7f:74:ab:c9:ae:61: 9b:3d:b2:f6:95:f4:c8:51:72:64:94:41:30:a7:cd: e6:a2:aa:cf:9b:8f:f0:46:e7:46:f8:72:2a:50:c7: ff:93:09:d8:8f:02:bc:db:06:18:d3:44:3e:ec:e4: c1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CB:7A:1B:5D:C1:CA:70:85:D1:29:FA:8A:59:99:5E:0D:D7:D2:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/526dec6b-5967-3f7d-8a83-48af09059781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:41:d4:dd:0b:49:89:b0:83:eb:cb:8b:63:65:36:50:f7:c7: e5:9e:31:a0:0f:76:a8:42:65:c9:bc:1b:15:78:95:44:76:5e: c7:97:64:fc:eb:16:63:94:fb:44:15:46:86:62:31:5b:eb:02: ff:77:e1:f8:14:d6:c4:33:b3:f0:78:28:2c:74:ba:7b:fd:41: 02:25:6f:e8:53:72:92:f3:e1:4a:a1:7b:55:33:38:d6:1e:91: 68:8c:f8:3f:76:2e:22:b9:17:74:5a:83:06:4f:2e:0d:ea:25: 3b:4d:f9:f9:dc:67:39:ba:bd:5d:14:c7:87:da:0a:d5:b4:8a: 7b:d6:0f:09:7d:a1:97:f5:6c:5f:74:e3:d9:cf:ab:8c:71:79: 00:fe:89:57:8e:b5:3e:e4:d1:53:a4:ca:00:e9:2f:25:53:9a: 80:20:63:98:96:7c:cf:b2:52:ad:5f:51:78:a7:60:d7:12:a9: 1e:5e:cd:63:cc:1b:03:09:ad:c4:a6:47:4d:d3:7b:51:0a:21: 73:b3:81:6d:1f:2f:b1:83:62:bc:39:db:83:66:e1:d2:24:0c: 0f:13:3c:79:f3:aa:bd:c5:4a:15:5e:5b:fe:f2:a5:31:bd:2a: 18:e7:2e:cc:e5:4c:d2:90:2d:c9:a6:37:0c:b5:3c:3e:53:5f: 48:5d:09:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE37wGgl22/lGi2ocwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyODEyMTcwOVoXDTI2MDgyNjEyMTcwOVowLzEtMCsGA1UEAxMk YWIzN2M4MGItMjc2Ny00NjQyLTliYTYtNTc4NmVmYTc1NmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCqYcYt3bLbilY9Mff9BFV27qIOhFZH7liyQ byi797G3fAtC51P2lDghfUVga4/3cSqNRhu4Gy8ykrtW3oL2jncq7nRluwk8ZjRx D4hc9MWt3q73QSJ/3yrWpiiTP+yDMRfe6SfsLDGGOgku8N89Vav2DCVxSgh2UbuL YbmbVLBK9Ebqi1j8lAegLsZ3WHKomDXR9asNoYBvI2x1rokggLGy48wB61/idSr5 B64xvPOjJBanan5AYNB6ERS/xhZDjapjyArtZq82MzF/dKvJrmGbPbL2lfTIUXJk lEEwp83moqrPm4/wRudG+HIqUMf/kwnYjwK82wYY00Q+7OTBcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfLehtdwcpwhdEp+opZmV4N19IMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTI2ZGVjNmItNTk2Ny0z ZjdkLThhODMtNDhhZjA5MDU5NzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5B1N0LSYmwg+vLi2NlNlD3x+WeMaAPdqhCZcm8GxV4lUR2XseXZPzr FmOU+0QVRoZiMVvrAv934fgU1sQzs/B4KCx0unv9QQIlb+hTcpLz4Uqhe1UzONYe kWiM+D92LiK5F3RagwZPLg3qJTtN+fncZzm6vV0Ux4faCtW0invWDwl9oZf1bF90 49nPq4xxeQD+iVeOtT7k0VOkygDpLyVTmoAgY5iWfM+yUq1fUXinYNcSqR5ezWPM GwMJrcSmR03Te1EKIXOzgW0fL7GDYrw524Nm4dIkDA8TPHnzqr3FShVeW/7ypTG9 KhjnLszlTNKQLcmmNwy1PD5TX0hdCaY= -----END CERTIFICATE-----Generated at Thu Jun 4 11:19:34 2026 by rpki-client