$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e810e7f-a9f6-3f39-b4ef-1f0c1c844558.roa File: 5e810e7f-a9f6-3f39-b4ef-1f0c1c844558.roa (raw, json) Hash identifier: B+vbHEA+v1zGx4LEG61Z4I/UbTgDWVbhOkRkpdxZ5dg= Subject key identifier: 9E:7A:68:EB:3D:BA:80:D6:FC:BC:B2:50:EE:CF:23:AA:1C:0E:A5:D1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D9FB58AECA78C9D4F71249B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e810e7f-a9f6-3f39-b4ef-1f0c1c844558.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 19905 IP address blocks: 173.29.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:8a:ec:a7:8c:9d:4f:71:24:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=b72031d3-0b07-4b3c-a94c-08827605b60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:13:51:29:82:6d:41:d6:b6:d4:86:70:06:1d: d4:a7:a9:fa:5b:18:a7:13:b1:3c:0d:ee:54:0a:d8: 4c:68:a7:fc:14:ba:60:51:cf:05:40:6e:c6:55:ae: 07:61:18:35:0e:52:9a:c8:a2:9f:1a:63:8a:93:82: 21:a3:8f:b8:54:5a:97:c6:c2:9a:2e:16:54:a2:50: c6:c6:41:18:08:1d:a7:cb:12:c5:01:a1:4e:c4:3b: 76:28:45:d2:45:59:76:5a:1f:33:c4:94:1f:e6:83: d4:af:31:f0:20:f6:c4:ae:fa:c2:4d:f1:bb:eb:5b: 1d:4b:1d:b3:6b:4d:1e:44:81:0b:cd:2c:eb:26:f9: 13:af:b1:10:54:58:05:62:fc:2c:ef:fd:9f:ca:55: 27:69:4d:d4:69:2f:eb:40:a3:66:76:29:fa:90:d2: 75:e4:d4:46:ab:1c:a4:38:db:c4:92:08:c7:cc:2e: bb:4b:09:9a:91:d1:de:96:a1:5c:e5:a2:6e:fd:81: 41:a2:a1:6d:2a:ee:92:1b:15:e6:ea:6a:60:24:09: e7:ee:00:03:67:33:f2:b5:72:0f:91:57:91:f6:ab: d2:58:6b:9f:5a:d8:95:fb:72:2e:90:3c:36:a7:cb: 44:c7:fc:47:29:6b:c0:2d:27:77:5e:f6:be:fa:94: 0a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7A:68:EB:3D:BA:80:D6:FC:BC:B2:50:EE:CF:23:AA:1C:0E:A5:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e810e7f-a9f6-3f39-b4ef-1f0c1c844558.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:0d:56:07:b8:32:53:16:fc:20:1b:5a:43:b1:db:60:72:c3: 66:03:df:d2:ce:13:6f:a3:2f:0d:36:77:aa:da:d8:16:a0:88: a0:72:e5:d9:8e:ea:fb:ce:b2:34:20:2c:db:1e:f5:8c:c0:14: 4c:7a:36:33:a8:9c:d7:79:66:31:04:b3:0a:8b:19:14:4e:06: 6f:dd:bb:be:83:9d:8b:bf:15:f3:8f:fd:c4:5d:04:d2:a1:69: 6d:15:ce:37:44:42:e1:71:f4:f3:cf:0a:22:74:5a:28:a6:86: 2a:83:fb:51:f6:3d:f9:9d:21:d2:0b:95:43:9b:61:1c:4d:75: 54:ba:e9:9a:65:96:8f:83:80:cc:12:42:ac:69:29:03:7a:76: 7f:ac:32:a1:4e:27:75:8c:cb:fa:b5:da:39:b1:69:21:e9:63: ff:97:28:7f:84:1e:6b:69:a4:03:59:51:ff:21:eb:3a:c2:14: e9:e4:f0:1a:b3:6d:9d:da:88:93:eb:2a:75:fd:c6:4f:c0:fe: cc:41:0f:de:b5:0f:e5:1a:b6:ed:5a:96:7f:87:4b:6d:0a:e5: b3:af:9b:2a:23:92:58:3d:88:72:28:89:12:c9:fd:e9:d6:32: 7c:1a:d9:a7:9a:30:00:7f:b3:04:4e:90:f2:e5:23:ad:63:7e: 96:52:51:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftYrsp4ydT3EkmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk YjcyMDMxZDMtMGIwNy00YjNjLWE5NGMtMDg4Mjc2MDViNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxNRKYJtQda21IZwBh3Up6n6WxinE7E8De5U CthMaKf8FLpgUc8FQG7GVa4HYRg1DlKayKKfGmOKk4Iho4+4VFqXxsKaLhZUolDG xkEYCB2nyxLFAaFOxDt2KEXSRVl2Wh8zxJQf5oPUrzHwIPbErvrCTfG761sdSx2z a00eRIELzSzrJvkTr7EQVFgFYvws7/2fylUnaU3UaS/rQKNmdin6kNJ15NRGqxyk ONvEkgjHzC67SwmakdHelqFc5aJu/YFBoqFtKu6SGxXm6mpgJAnn7gADZzPytXIP kVeR9qvSWGufWtiV+3IukDw2p8tEx/xHKWvALSd3Xva++pQKLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ56aOs9uoDW/LyyUO7PI6ocDqXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWU4MTBlN2YtYTlmNi0z ZjM5LWI0ZWYtMWYwYzFjODQ0NTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQNVge4MlMW/CAbWkOx22Byw2YD39LOE2+jLw02d6ra2BagiKBy5dmO 6vvOsjQgLNse9YzAFEx6NjOonNd5ZjEEswqLGRROBm/du76DnYu/FfOP/cRdBNKh aW0VzjdEQuFx9PPPCiJ0WiimhiqD+1H2PfmdIdILlUObYRxNdVS66Zpllo+DgMwS QqxpKQN6dn+sMqFOJ3WMy/q12jmxaSHpY/+XKH+EHmtppANZUf8h6zrCFOnk8Bqz bZ3aiJPrKnX9xk/A/sxBD961D+Uatu1aln+HS20K5bOvmyojklg9iHIoiRLJ/enW Mnwa2aeaMAB/swROkPLlI61jfpZSUVo= -----END CERTIFICATE-----Generated at Fri May 8 20:28:04 2026 by rpki-client