$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/812a91f4-b851-3f15-b48c-ef0835a3c74f.roa File: 812a91f4-b851-3f15-b48c-ef0835a3c74f.roa (raw, json) Hash identifier: IO7Kg5bFKI59ECntgSpf7HJMV56lqoyxpu4RRLKFKd8= Subject key identifier: BD:58:2A:58:0B:D7:AB:70:D5:D4:3B:64:5B:D0:56:3D:D0:20:6C:7D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D97F97BCAED6AB7E99088D960 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/812a91f4-b851-3f15-b48c-ef0835a3c74f.roa Signing time: Wed 22 Apr 2026 18:31:19 +0000 ROA not before: Wed 22 Apr 2026 18:31:19 +0000 ROA not after: Tue 21 Jul 2026 18:31:19 +0000 asID: 19905 IP address blocks: 173.21.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:f9:7b:ca:ed:6a:b7:e9:90:88:d9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 22 18:31:19 2026 GMT Not After : Jul 21 18:31:19 2026 GMT Subject: CN=70dcef74-5dfe-465b-aec7-9653e175a4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f9:42:71:bb:b2:e0:f3:67:15:22:40:af:8f: ee:7a:36:fd:be:84:30:e8:46:e8:4a:a8:b1:de:6c: bf:f9:67:dd:bf:c4:9d:89:f6:b7:00:81:b4:19:5f: 2a:ef:c1:8d:02:54:a0:fb:39:28:f9:22:62:21:1c: f3:07:8f:e8:dd:09:18:b8:23:e1:82:7c:c2:58:91: 86:12:78:dd:5c:8a:e2:38:52:eb:b1:d9:62:10:31: ad:01:eb:fb:b8:1a:a0:4f:f3:e2:18:c6:83:45:50: 7b:08:e1:05:09:5d:d9:3a:38:95:e4:37:3a:ec:6b: 0b:20:1c:72:2d:5a:46:84:4c:45:50:5b:56:6b:31: 5a:c0:91:75:8f:58:eb:b1:72:6d:65:09:52:8a:ae: 31:36:e1:d0:ff:93:d3:81:48:9d:d6:f7:e3:8c:c0: ed:45:e7:3c:39:4a:8b:57:96:7b:30:cb:84:3d:74: ed:f2:35:c3:35:e4:d9:a0:65:f0:84:62:54:6a:73: be:bb:4d:4f:c5:bb:42:d3:03:a8:44:e2:22:25:20: 2a:9e:39:4b:c6:e5:83:d0:14:e3:ac:69:67:ac:5e: 45:6e:92:15:2c:c8:e3:11:03:02:90:b7:f6:e9:de: 86:1f:dd:e1:06:71:71:49:1c:de:20:40:80:7c:bd: 64:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:58:2A:58:0B:D7:AB:70:D5:D4:3B:64:5B:D0:56:3D:D0:20:6C:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/812a91f4-b851-3f15-b48c-ef0835a3c74f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:27:2f:eb:1f:68:cf:43:0b:97:73:0b:5b:48:d3:4a:ca:ab: 32:b9:2d:88:f5:07:73:03:5d:41:b0:54:c3:d3:ce:f9:f5:5e: 3d:a0:f6:3e:cf:de:c9:0b:c0:fb:c3:39:e3:18:1b:aa:de:02: e1:33:a4:90:f1:1d:2d:0b:e8:ec:30:1d:7b:49:4a:08:d5:f3: 04:d5:6e:5a:d6:c5:2d:db:04:ef:61:c7:c2:1e:81:8b:c3:8f: 14:82:05:f0:09:4b:a8:ec:0a:c3:7e:13:65:77:ae:01:83:b2: 9b:27:38:16:7d:9d:e9:e4:63:a9:fa:e6:46:60:fb:f1:66:e3: e0:14:2a:b5:0a:67:54:30:67:f0:6c:2e:7a:4a:3e:2b:6b:13: b8:4d:3b:3d:9e:61:dc:61:85:2a:fc:15:1d:18:ab:db:2c:c5: 34:7e:1b:1b:79:09:bf:4c:3c:3c:55:52:fd:77:da:29:19:d0: 25:a1:00:8b:09:01:05:1f:68:98:39:8d:e1:f8:b5:b1:9e:10: 8a:1d:45:60:74:18:3d:b9:07:b5:a8:92:3e:a1:a7:b8:bf:70: 19:57:e3:1e:29:46:37:a7:17:98:8a:f7:e4:ce:1b:77:3e:02: 0f:33:37:9d:42:4f:32:c4:30:1c:f2:43:1c:fa:ec:b0:26:83: c1:1c:83:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2X+XvK7Wq36ZCI2WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQyMjE4MzExOVoXDTI2MDcyMTE4MzExOVowLzEtMCsGA1UEAxMk NzBkY2VmNzQtNWRmZS00NjViLWFlYzctOTY1M2UxNzVhNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlflCcbuy4PNnFSJAr4/uejb9voQw6EboSqix 3my/+Wfdv8Sdifa3AIG0GV8q78GNAlSg+zko+SJiIRzzB4/o3QkYuCPhgnzCWJGG EnjdXIriOFLrsdliEDGtAev7uBqgT/PiGMaDRVB7COEFCV3ZOjiV5Dc67GsLIBxy LVpGhExFUFtWazFawJF1j1jrsXJtZQlSiq4xNuHQ/5PTgUid1vfjjMDtRec8OUqL V5Z7MMuEPXTt8jXDNeTZoGXwhGJUanO+u01PxbtC0wOoROIiJSAqnjlLxuWD0BTj rGlnrF5FbpIVLMjjEQMCkLf26d6GH93hBnFxSRzeIECAfL1kjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1YKlgL16tw1dQ7ZFvQVj3QIGx9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODEyYTkxZjQtYjg1MS0z ZjE1LWI0OGMtZWYwODM1YTNjNzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRUMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADknL+sfaM9DC5dzC1tI00rKqzK5LYj1B3MDXUGwVMPTzvn1Xj2g9j7P 3skLwPvDOeMYG6reAuEzpJDxHS0L6OwwHXtJSgjV8wTVblrWxS3bBO9hx8IegYvD jxSCBfAJS6jsCsN+E2V3rgGDspsnOBZ9nenkY6n65kZg+/Fm4+AUKrUKZ1QwZ/Bs LnpKPitrE7hNOz2eYdxhhSr8FR0Yq9ssxTR+Gxt5Cb9MPDxVUv132ikZ0CWhAIsJ AQUfaJg5jeH4tbGeEIodRWB0GD25B7Wokj6hp7i/cBlX4x4pRjenF5iK9+TOG3c+ Ag8zN51CTzLEMBzyQxz67LAmg8EcgyM= -----END CERTIFICATE-----Generated at Fri May 8 20:25:59 2026 by rpki-client