$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89df7e89-e17e-3cc7-8308-423e4f78f192.roa File: 89df7e89-e17e-3cc7-8308-423e4f78f192.roa (raw, json) Hash identifier: X3DhuMJzlRvmuyGLxTDod/R8fZxinlN7DxarP++eqnk= Subject key identifier: 82:DB:F0:38:A9:FA:4C:C8:5A:8C:DC:7C:8A:86:CB:8B:30:C2:52:8A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D8D9003E8E7A80CDF6DD4B454 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89df7e89-e17e-3cc7-8308-423e4f78f192.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 19905 IP address blocks: 173.17.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:90:03:e8:e7:a8:0c:df:6d:d4:b4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=bcfbf523-1ea2-425b-8632-8236e2a56044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b0:58:ef:68:66:60:38:1c:06:b9:f1:d7:c9: fb:1b:c7:84:a8:e5:05:c9:38:2f:98:2a:d5:e7:1a: fa:ab:85:97:14:9d:f4:b1:a1:f0:bb:ee:4d:01:86: 12:4b:17:b8:f9:be:fc:cf:bf:08:36:6a:ae:7b:0c: 9c:81:c3:39:ba:21:66:a9:47:10:95:f8:64:ed:5e: bc:d6:76:21:72:ab:7c:99:9e:8b:6a:eb:6e:d8:14: 89:51:66:52:3f:e8:a0:d0:b7:2e:27:04:83:9d:45: 3f:4d:fc:86:3a:77:3e:48:34:d1:64:23:a8:1c:5d: 06:62:54:e3:87:89:c0:a5:d7:92:29:20:61:f2:37: 7c:3e:68:64:c0:b0:55:3c:30:2d:b9:98:4c:40:f2: c7:1f:08:2c:a3:18:9f:64:df:4a:9a:12:ed:fe:15: 2f:31:0c:d7:97:c3:0f:b0:5f:cb:78:cb:3f:49:5b: 91:c1:bc:20:ae:4c:da:5c:ba:67:75:e9:04:eb:15: a4:fc:19:a0:52:a4:6f:36:21:84:91:c8:e6:35:66: d2:8f:48:8b:3f:c5:fd:5b:30:d1:c6:d5:ed:65:95: 3f:5a:90:dc:20:74:2a:ed:cf:e2:04:dc:d5:45:e1: 08:4b:f1:7e:2a:a6:50:f9:1f:98:2d:c4:fa:66:75: b9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DB:F0:38:A9:FA:4C:C8:5A:8C:DC:7C:8A:86:CB:8B:30:C2:52:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89df7e89-e17e-3cc7-8308-423e4f78f192.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e4:76:3f:be:dd:1b:c0:00:91:f4:18:8d:ff:2d:5f:cd:79: 5a:13:90:55:b5:c3:77:e3:d4:79:7e:42:ea:70:e5:ee:3e:79: 6a:9a:d6:1f:fd:2d:d1:7b:5c:5d:e4:a4:24:1f:25:35:88:d5: df:a6:7e:28:db:25:66:87:21:2e:74:22:7d:e1:70:69:ad:55: 5f:23:1c:df:75:1c:29:ad:02:ee:dc:8f:fd:7a:3d:46:d0:ca: 60:4c:e2:2f:e9:d3:a8:0c:6f:27:55:35:2c:a0:e5:06:b3:94: 5b:01:b1:d6:a5:a9:5f:d9:d2:79:4d:10:3c:0d:37:55:f7:aa: fa:bd:32:9e:bc:28:26:21:89:aa:e8:fe:e8:4b:d8:a7:d6:d4: c1:31:ef:51:9a:10:4f:2c:72:fa:1e:1e:8a:11:a9:b9:ae:d0: 73:b9:28:b3:ec:cc:e5:a8:a6:3c:0b:84:8f:ad:be:c8:d9:73: 49:52:e0:22:96:da:2a:ff:eb:91:c7:41:f2:e9:b1:61:b2:41: 69:66:30:a1:41:b1:b2:5c:93:91:8d:be:4f:5b:41:29:f5:47: ab:76:c2:38:ab:0a:d1:eb:f7:7c:60:25:f1:69:71:c1:5e:47: 0e:5b:cc:1f:4c:be:f4:53:9f:c2:7d:51:da:b7:de:57:d4:38: cc:04:0d:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2NkAPo56gM323UtFQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk YmNmYmY1MjMtMWVhMi00MjViLTg2MzItODIzNmUyYTU2MDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbBY72hmYDgcBrnx18n7G8eEqOUFyTgvmCrV 5xr6q4WXFJ30saHwu+5NAYYSSxe4+b78z78INmquewycgcM5uiFmqUcQlfhk7V68 1nYhcqt8mZ6Lautu2BSJUWZSP+ig0LcuJwSDnUU/TfyGOnc+SDTRZCOoHF0GYlTj h4nApdeSKSBh8jd8PmhkwLBVPDAtuZhMQPLHHwgsoxifZN9KmhLt/hUvMQzXl8MP sF/LeMs/SVuRwbwgrkzaXLpndekE6xWk/BmgUqRvNiGEkcjmNWbSj0iLP8X9WzDR xtXtZZU/WpDcIHQq7c/iBNzVReEIS/F+KqZQ+R+YLcT6ZnW5dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILb8Dip+kzIWozcfIqGy4swwlKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODlkZjdlODktZTE3ZS0z Y2M3LTgzMDgtNDIzZTRmNzhmMTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrREAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXkdj++3RvAAJH0GI3/LV/NeVoTkFW1w3fj1Hl+Qupw5e4+eWqa1h/9 LdF7XF3kpCQfJTWI1d+mfijbJWaHIS50In3hcGmtVV8jHN91HCmtAu7cj/16PUbQ ymBM4i/p06gMbydVNSyg5QazlFsBsdalqV/Z0nlNEDwNN1X3qvq9Mp68KCYhiaro /uhL2KfW1MEx71GaEE8scvoeHooRqbmu0HO5KLPszOWopjwLhI+tvsjZc0lS4CKW 2ir/65HHQfLpsWGyQWlmMKFBsbJck5GNvk9bQSn1R6t2wjirCtHr93xgJfFpccFe Rw5bzB9MvvRTn8J9Udq33lfUOMwEDcU= -----END CERTIFICATE-----Generated at Fri May 8 20:26:14 2026 by rpki-client