$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/624ffb49-4773-39d5-8ae7-9d13a1f0323e.roa File: 624ffb49-4773-39d5-8ae7-9d13a1f0323e.roa (raw, json) Hash identifier: 4EXOio3qvMmbPldaHNVwATlSZLUjZfUGP3m+URvP3+Q= Subject key identifier: 60:5F:83:EF:1F:BF:53:06:49:31:B1:DC:28:6B:88:CF:55:30:F3:77 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D1707EA3C808323C2973AD860 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/624ffb49-4773-39d5-8ae7-9d13a1f0323e.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 30036 IP address blocks: 173.20.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:ea:3c:80:83:23:c2:97:3a:d8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=32f52430-b923-4ff1-b5e8-78db530cb553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6b:b8:7d:be:90:64:95:1e:55:cf:3f:f0:1c: 9f:9d:48:d9:dd:2b:2d:09:a4:bd:d4:d0:33:80:5f: 57:bd:01:34:56:c7:95:ee:8e:a7:87:63:f1:21:41: d4:57:80:1a:91:54:27:2f:77:57:97:86:ca:80:1d: 06:64:8f:81:c5:40:e3:f2:76:11:26:01:bb:c5:7b: c3:6f:36:76:86:43:49:a6:64:8c:99:42:a5:1b:2a: 17:a6:b2:2e:76:a9:b3:f0:d5:eb:71:9f:ca:e1:4f: a7:42:61:ef:28:91:c8:6e:6a:4e:a6:d0:90:37:12: 8c:62:1f:f3:0d:cc:9b:5d:80:a2:b2:62:77:a9:98: a3:65:18:d1:1e:18:39:67:03:49:a9:11:3e:51:3b: 92:2d:d3:c2:46:b4:f6:1a:62:09:a1:54:39:6a:a6: af:e4:7d:5d:eb:0c:d4:d6:19:cc:66:f2:dc:1b:97: aa:9c:83:97:fa:df:95:d0:d9:02:a2:eb:1e:f0:3e: 1a:37:de:80:22:fa:d8:cd:3a:37:40:6a:8a:e9:55: 7d:7b:6a:ac:a3:72:aa:19:f2:07:1c:61:0a:b0:67: ef:a0:87:92:f3:88:3f:4f:a2:c1:e9:f5:59:1a:b5: 56:5e:38:f0:c0:be:35:f3:cd:cc:79:4a:30:03:cf: bf:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5F:83:EF:1F:BF:53:06:49:31:B1:DC:28:6B:88:CF:55:30:F3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/624ffb49-4773-39d5-8ae7-9d13a1f0323e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a1:39:f8:53:71:b2:56:a0:73:80:3e:c4:65:b5:d6:2a:c9: 3a:57:b0:1e:e5:2a:02:f0:e4:6e:a7:2d:00:16:a0:81:80:8a: 9e:22:28:ed:90:bf:e2:b0:e4:f2:e8:82:df:f6:5f:f6:2f:f5: d0:f4:0c:5a:97:60:13:c0:2a:43:a2:e8:b9:22:dd:55:d1:6c: ac:44:7f:cc:c5:1d:8e:b7:57:25:c8:53:4c:a2:50:b6:a9:d9: 1f:c1:c9:6a:f1:cd:6f:33:71:3d:61:70:b4:1a:16:13:03:a5: bd:d8:18:2c:0a:44:90:96:81:34:40:24:08:15:d0:17:76:55: b8:58:91:c2:56:91:6a:58:61:2a:ed:eb:18:83:a6:c8:2e:00: 58:37:94:a2:4b:c7:b0:06:40:e5:37:fc:27:39:c4:3b:b7:02: 0b:ee:3e:8d:8d:05:15:00:fc:75:27:1a:f9:c2:5e:43:cd:5d: 99:77:8b:1a:2d:12:56:07:b6:34:18:c4:9e:15:e9:da:0d:92: 63:a5:2e:a2:25:5a:a6:4b:f2:af:f1:c9:ed:18:25:24:b2:13: 14:d2:79:0e:79:89:89:26:da:c5:67:d5:39:aa:7e:73:9c:67: cb:84:a9:e1:18:cd:f1:93:56:32:e7:95:b4:34:98:bb:1e:ef: 49:44:c2:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB+o8gIMjwpc62GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk MzJmNTI0MzAtYjkyMy00ZmYxLWI1ZTgtNzhkYjUzMGNiNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWu4fb6QZJUeVc8/8ByfnUjZ3SstCaS91NAz gF9XvQE0VseV7o6nh2PxIUHUV4AakVQnL3dXl4bKgB0GZI+BxUDj8nYRJgG7xXvD bzZ2hkNJpmSMmUKlGyoXprIudqmz8NXrcZ/K4U+nQmHvKJHIbmpOptCQNxKMYh/z DcybXYCismJ3qZijZRjRHhg5ZwNJqRE+UTuSLdPCRrT2GmIJoVQ5aqav5H1d6wzU 1hnMZvLcG5eqnIOX+t+V0NkCouse8D4aN96AIvrYzTo3QGqK6VV9e2qso3KqGfIH HGEKsGfvoIeS84g/T6LB6fVZGrVWXjjwwL41883MeUowA8+/vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBfg+8fv1MGSTGx3ChriM9VMPN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjI0ZmZiNDktNDc3My0z OWQ1LThhZTctOWQxM2ExZjAzMjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRQwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6hOfhTcbJWoHOAPsRltdYqyTpXsB7lKgLw5G6nLQAWoIGAip4iKO2Q v+Kw5PLogt/2X/Yv9dD0DFqXYBPAKkOi6Lki3VXRbKxEf8zFHY63VyXIU0yiULap 2R/ByWrxzW8zcT1hcLQaFhMDpb3YGCwKRJCWgTRAJAgV0Bd2VbhYkcJWkWpYYSrt 6xiDpsguAFg3lKJLx7AGQOU3/Cc5xDu3AgvuPo2NBRUA/HUnGvnCXkPNXZl3ixot ElYHtjQYxJ4V6doNkmOlLqIlWqZL8q/xye0YJSSyExTSeQ55iYkm2sVn1TmqfnOc Z8uEqeEYzfGTVjLnlbQ0mLse70lEwtw= -----END CERTIFICATE-----Generated at Thu Mar 12 03:43:06 2026 by rpki-client