$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/956796f9-31e4-3cd3-85ad-be60f52ec842.roa File: 956796f9-31e4-3cd3-85ad-be60f52ec842.roa (raw, json) Hash identifier: aEdR6VzHphrd4FZhYNZSmT9whweRI0cIpy949r3xOOA= Subject key identifier: 25:9C:CE:CA:5D:07:EA:AD:EE:74:4A:E1:33:42:8F:20:8E:FD:18:85 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D9A2014268D5D2C8C087C4880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/956796f9-31e4-3cd3-85ad-be60f52ec842.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 30036 IP address blocks: 173.20.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:14:26:8d:5d:2c:8c:08:7c:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=3f9ed7f9-be1b-4551-9d60-775b58cd9ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:10:a8:ee:16:c5:0f:fa:98:8b:37:40:99:b3: 54:4d:dc:8e:c8:c1:e3:9c:0d:54:55:e8:65:91:6f: ae:17:d5:a5:82:1a:d9:77:e7:18:c2:d6:aa:62:fa: 8a:c7:66:6c:07:61:f5:81:53:ca:3e:11:78:45:08: 64:cd:3d:fb:13:26:5a:6b:89:f3:ec:a2:30:e5:13: af:ec:14:86:76:f5:5c:8b:84:2b:2f:4a:3f:93:86: c3:11:71:bd:7b:e4:f9:9f:e7:76:e0:7d:e2:ee:da: cf:60:05:0f:88:1f:7e:4d:ce:ba:e8:fa:e9:72:9f: 83:1b:64:19:eb:6b:66:d6:36:a8:3c:0d:12:1f:f6: d9:25:22:29:c9:92:11:4c:3a:a0:a8:42:56:d6:fb: bd:9f:62:ce:2d:bd:41:6b:6a:98:98:06:c1:dc:d7: 23:dc:c9:71:f0:08:f4:95:d9:52:b9:3d:ee:c4:c8: 5a:6f:bb:55:45:90:fc:43:0d:50:ab:fc:9f:44:cc: 1d:c9:cc:a1:2a:fc:0f:74:2f:f3:ae:33:30:ed:9e: 65:2e:a8:19:fb:2c:7c:5a:b4:f9:e7:bd:43:1a:21: 6b:5d:f4:6f:c7:80:04:ed:ce:5f:09:ac:13:c5:30: f3:63:56:b8:43:54:d1:18:95:fb:aa:f6:7b:c4:c9: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9C:CE:CA:5D:07:EA:AD:EE:74:4A:E1:33:42:8F:20:8E:FD:18:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/956796f9-31e4-3cd3-85ad-be60f52ec842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:06:0e:cf:e1:a3:6f:18:0b:98:2a:32:65:29:29:da:86:13: ce:4d:f1:a0:0c:00:ea:65:57:8e:6b:69:f9:f0:e5:ad:37:8a: a4:cc:82:fb:12:42:75:a5:24:91:cd:11:e4:56:fe:38:9c:a1: 14:e0:46:86:08:8f:6f:28:76:b2:21:4c:4f:09:4f:b0:80:90: 59:c3:cf:52:bd:db:bc:d3:70:ad:8b:f3:30:4d:49:11:0b:a5: ad:b9:75:b9:66:27:7c:54:80:2d:85:6b:aa:52:11:61:a2:27: 9b:3d:94:64:35:c2:d6:1e:8a:ef:17:1c:ff:15:fb:5b:00:25: 1e:1f:21:55:84:dc:9c:7d:8f:46:72:12:19:75:71:a5:91:af: 80:a0:ff:ac:41:97:0c:89:0f:0d:75:9b:18:7e:48:e2:04:b1: bb:5b:22:90:37:a4:65:c5:26:75:9b:1a:1c:46:a2:c4:cd:05: 33:9f:6d:19:7b:60:40:52:49:32:24:b5:00:f6:2b:d0:79:7a: 1b:6c:92:b2:9f:29:1a:36:fe:4b:a3:2a:b8:ee:c9:23:17:a1: 2f:31:d9:be:ed:49:88:18:e1:7a:b2:c8:7b:36:4a:6b:6a:8b: 38:c9:28:ac:ab:12:85:01:7f:db:56:cd:22:94:0c:bd:b4:46: 0b:b6:a7:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIBQmjV0sjAh8SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk M2Y5ZWQ3ZjktYmUxYi00NTUxLTlkNjAtNzc1YjU4Y2Q5YWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxCo7hbFD/qYizdAmbNUTdyOyMHjnA1UVehl kW+uF9WlghrZd+cYwtaqYvqKx2ZsB2H1gVPKPhF4RQhkzT37EyZaa4nz7KIw5ROv 7BSGdvVci4QrL0o/k4bDEXG9e+T5n+d24H3i7trPYAUPiB9+Tc666Prpcp+DG2QZ 62tm1jaoPA0SH/bZJSIpyZIRTDqgqEJW1vu9n2LOLb1Ba2qYmAbB3Ncj3Mlx8Aj0 ldlSuT3uxMhab7tVRZD8Qw1Qq/yfRMwdycyhKvwPdC/zrjMw7Z5lLqgZ+yx8WrT5 571DGiFrXfRvx4AE7c5fCawTxTDzY1a4Q1TRGJX7qvZ7xMmzXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWczspdB+qt7nRK4TNCjyCO/RiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTU2Nzk2ZjktMzFlNC0z Y2QzLTg1YWQtYmU2MGY1MmVjODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQGDs/ho28YC5gqMmUpKdqGE85N8aAMAOplV45rafnw5a03iqTMgvsS QnWlJJHNEeRW/jicoRTgRoYIj28odrIhTE8JT7CAkFnDz1K927zTcK2L8zBNSREL pa25dblmJ3xUgC2Fa6pSEWGiJ5s9lGQ1wtYeiu8XHP8V+1sAJR4fIVWE3Jx9j0Zy Ehl1caWRr4Cg/6xBlwyJDw11mxh+SOIEsbtbIpA3pGXFJnWbGhxGosTNBTOfbRl7 YEBSSTIktQD2K9B5ehtskrKfKRo2/kujKrjuySMXoS8x2b7tSYgY4XqyyHs2Smtq izjJKKyrEoUBf9tWzSKUDL20Rgu2p/I= -----END CERTIFICATE-----Generated at Fri May 8 18:25:32 2026 by rpki-client