$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85af895f-0757-3ea8-a007-a06abab08648.roa File: 85af895f-0757-3ea8-a007-a06abab08648.roa (raw, json) Hash identifier: urQLCfsKyH2rsMf2sMHabGrrKuCoDr/3Bg7bt1U3V70= Subject key identifier: B7:97:42:14:14:38:4C:22:28:66:B2:2E:2D:F2:FE:2C:B6:FE:24:6C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D8EF56A1C822EC8EE6DBEA280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85af895f-0757-3ea8-a007-a06abab08648.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 19905 IP address blocks: 173.28.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:6a:1c:82:2e:c8:ee:6d:be:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=ee838dfb-b75e-418c-875f-d483de822401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:31:f4:c6:c6:81:85:f6:d1:af:45:6b:b8: 42:ad:1b:bb:f8:ea:40:86:10:c0:10:a0:37:40:27: ae:69:af:c5:17:8a:6d:8f:d6:a8:2d:66:fa:59:c8: 1e:f8:44:6a:7f:6d:c7:26:e6:8f:48:f8:3a:27:93: 34:d9:e8:c8:fe:5d:80:18:2b:e1:69:f5:0d:d8:23: b8:44:f0:07:61:74:a3:55:29:30:d9:4d:5b:f6:c6: 16:48:20:a3:80:09:2e:12:f4:1b:98:47:04:93:d2: e6:b8:fc:9a:91:c6:fc:da:d5:24:8e:ec:2a:33:b3: 97:ee:aa:75:c9:f4:c5:aa:d9:3f:88:7c:61:7e:5c: b9:0a:00:79:6e:87:98:49:51:3b:21:93:8e:20:0c: 85:a1:86:e5:ed:f9:42:5e:9d:74:90:e1:98:5e:c8: 24:42:a5:d6:cb:d6:a1:a8:c8:7d:64:a2:4f:f7:57: 3b:ec:e4:72:5d:33:2c:b0:31:ab:cb:6d:60:c0:87: 10:00:f8:9c:38:89:f2:74:ed:c9:03:dd:05:24:6e: 59:b1:65:c7:92:0e:c1:fa:d4:a3:f5:a0:ce:76:cc: c3:f5:9c:4c:0a:a7:a7:0e:f5:2f:0f:9f:ed:35:1c: 5b:f7:95:d9:da:c3:c7:cf:22:97:6b:af:60:80:c4: 84:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:97:42:14:14:38:4C:22:28:66:B2:2E:2D:F2:FE:2C:B6:FE:24:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85af895f-0757-3ea8-a007-a06abab08648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:18:92:bb:80:7f:b2:a4:4c:40:97:b5:54:55:73:1b:1a:b3: 17:b8:b1:34:91:24:8f:4d:1e:db:93:cf:d6:f6:90:97:a2:07: 7b:1b:d4:ae:31:d7:b6:fc:8f:b4:cb:12:76:19:f9:26:ce:f2: 51:e3:1d:6f:8e:2b:f5:1f:f9:5c:11:20:ef:0c:33:6d:3a:cd: ec:91:21:b5:f9:5f:9f:62:ec:82:3f:40:22:0c:16:bf:fd:41: 57:c9:da:6c:ab:4c:07:54:93:a2:0d:91:23:35:89:86:b6:69: f3:22:8c:9f:bd:b8:2e:4f:4b:9a:dc:35:73:a6:b3:c1:10:21: 21:08:2b:80:44:7d:fe:d9:07:25:c1:6e:60:9e:69:39:46:87: e8:51:a8:c1:54:0a:4e:25:09:48:aa:4c:61:45:17:37:85:3b: 48:d9:d5:1c:79:7e:c3:ed:bb:07:10:4b:ca:b8:d2:0e:b6:ec: 5f:84:d1:62:b2:fa:07:6e:59:9c:aa:61:a8:86:92:c2:d3:f7: 70:1a:88:0d:3e:1c:80:a2:56:48:09:a7:08:1c:4a:9c:4f:ea: 67:6e:75:b7:7d:98:32:a2:57:94:44:1a:6c:2e:11:48:51:5b: dd:09:e1:48:14:c1:5a:07:20:8b:c6:37:fd:a1:c0:56:53:9b: 0d:1d:0c:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9Wocgi7I7m2+ooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZWU4MzhkZmItYjc1ZS00MThjLTg3NWYtZDQ4M2RlODIyNDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV4x9MbGgYX20a9Fa7hCrRu7+OpAhhDAEKA3 QCeuaa/FF4ptj9aoLWb6Wcge+ERqf23HJuaPSPg6J5M02ejI/l2AGCvhafUN2CO4 RPAHYXSjVSkw2U1b9sYWSCCjgAkuEvQbmEcEk9LmuPyakcb82tUkjuwqM7OX7qp1 yfTFqtk/iHxhfly5CgB5boeYSVE7IZOOIAyFoYbl7flCXp10kOGYXsgkQqXWy9ah qMh9ZKJP91c77ORyXTMssDGry21gwIcQAPicOInydO3JA90FJG5ZsWXHkg7B+tSj 9aDOdszD9ZxMCqenDvUvD5/tNRxb95XZ2sPHzyKXa69ggMSEGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeXQhQUOEwiKGayLi3y/iy2/iRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVhZjg5NWYtMDc1Ny0z ZWE4LWEwMDctYTA2YWJhYjA4NjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRx0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUYkruAf7KkTECXtVRVcxsasxe4sTSRJI9NHtuTz9b2kJeiB3sb1K4x 17b8j7TLEnYZ+SbO8lHjHW+OK/Uf+VwRIO8MM206zeyRIbX5X59i7II/QCIMFr/9 QVfJ2myrTAdUk6INkSM1iYa2afMijJ+9uC5PS5rcNXOms8EQISEIK4BEff7ZByXB bmCeaTlGh+hRqMFUCk4lCUiqTGFFFzeFO0jZ1Rx5fsPtuwcQS8q40g627F+E0WKy +gduWZyqYaiGksLT93AaiA0+HICiVkgJpwgcSpxP6mdudbd9mDKiV5REGmwuEUhR W90J4UgUwVoHIIvGN/2hwFZTmw0dDHU= -----END CERTIFICATE-----Generated at Fri May 8 21:31:48 2026 by rpki-client