$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cbad45f-7ee9-3a41-a562-9d61b5ce64e4.roa File: 9cbad45f-7ee9-3a41-a562-9d61b5ce64e4.roa (raw, json) Hash identifier: McmkMtktSEIcrwdUclwPRs19E2B4Ofc/0nLZwNATGlI= Subject key identifier: C1:F7:E6:FD:E2:9D:05:2E:BE:DA:14:C9:04:AA:FE:15:57:5A:D9:56 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DF3580CCF954994DD19288D20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cbad45f-7ee9-3a41-a562-9d61b5ce64e4.roa Signing time: Mon 25 May 2026 12:00:25 +0000 ROA not before: Mon 25 May 2026 12:00:25 +0000 ROA not after: Sun 23 Aug 2026 12:00:25 +0000 asID: 19905 IP address blocks: 173.20.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f3:58:0c:cf:95:49:94:dd:19:28:8d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 25 12:00:25 2026 GMT Not After : Aug 23 12:00:25 2026 GMT Subject: CN=d3bbcdef-4bad-478b-9af2-106d3b18d8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:98:92:65:83:8a:b6:34:8c:ea:a9:63:07:66: 08:a3:31:b1:77:b1:3f:7b:74:6d:f0:04:5b:d8:d3: b7:71:61:a6:66:c6:1b:62:ee:c3:80:13:b4:27:db: 1f:be:6d:1c:13:0b:49:80:6f:f4:63:16:01:90:3e: 42:aa:ab:8f:9c:af:0f:d6:73:59:ec:d2:42:dc:be: 58:20:0f:0a:5c:c8:a1:85:4b:73:89:56:90:77:66: c1:08:f6:78:c3:7f:84:17:2a:f8:30:8b:c2:d6:e1: 75:10:40:ef:6e:02:5b:e7:38:fe:c0:16:c7:c5:0b: 79:54:d4:57:00:55:e6:f5:8d:54:0c:32:a6:7e:b6: 08:af:6c:7a:15:67:6d:c9:28:c2:c7:cf:24:1c:b0: ce:f4:b0:01:8f:e0:01:7f:a5:d7:b3:2e:c8:d2:1e: e2:72:ea:06:58:7b:8e:1a:cf:05:8a:43:7a:ba:eb: 9e:e6:05:96:f4:9b:18:c8:e8:0c:fe:89:08:b5:cd: d4:15:4c:af:08:d5:21:5e:21:3d:8d:5c:1f:9a:b6: 37:c8:8b:1b:eb:bc:ef:de:d4:0e:54:84:5d:4f:03: bb:b2:e0:b2:ed:96:cb:2b:15:69:bc:c2:6d:be:6c: ec:c2:dd:4c:48:1c:39:93:c6:06:e6:84:32:86:df: d1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F7:E6:FD:E2:9D:05:2E:BE:DA:14:C9:04:AA:FE:15:57:5A:D9:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9cbad45f-7ee9-3a41-a562-9d61b5ce64e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:af:15:46:cf:7d:7a:68:7d:5b:4a:ad:e6:9e:f3:f2:70:cf: 6e:63:bc:b8:80:b8:e0:96:df:e9:76:7b:fd:76:81:a8:73:1a: d2:38:e7:ba:b8:bb:18:bc:1b:48:03:a1:63:6a:93:c9:31:4b: 11:bb:30:44:e6:08:f6:b0:7a:98:94:14:2d:50:9b:bc:21:9c: 28:67:70:a1:ac:3b:cb:aa:e5:2d:75:4c:62:96:17:ae:64:ab: 9e:07:19:5a:b4:7c:4a:65:4c:bb:11:14:58:4b:34:13:7f:99: dd:08:2d:24:65:16:78:1d:32:21:e1:3c:e2:4d:30:62:e9:a0: 17:a3:e2:2f:b5:75:7a:d4:08:eb:ee:14:78:a4:53:4f:dd:8e: 20:46:5c:30:e9:4a:5d:7c:a2:3e:41:3b:68:82:f3:f2:c4:49: 9c:56:70:3a:44:20:7e:b2:63:9f:30:da:67:eb:a2:82:cf:55: ea:2a:e8:b4:35:8c:5b:ff:83:cb:79:cf:dd:da:7c:e6:de:02: 76:2c:18:8b:5c:8e:55:80:ba:81:63:f7:3a:a4:c6:9a:e7:74: 20:4a:92:22:4a:4f:55:ba:b5:fe:29:1b:7e:d4:57:e0:2e:10: d9:a2:9c:1c:55:0f:01:1c:b8:a8:b8:01:90:e5:a4:c4:61:71: 3b:76:e8:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3zWAzPlUmU3RkojSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyNTEyMDAyNVoXDTI2MDgyMzEyMDAyNVowLzEtMCsGA1UEAxMk ZDNiYmNkZWYtNGJhZC00NzhiLTlhZjItMTA2ZDNiMThkOGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5iSZYOKtjSM6qljB2YIozGxd7E/e3Rt8ARb 2NO3cWGmZsYbYu7DgBO0J9sfvm0cEwtJgG/0YxYBkD5CqquPnK8P1nNZ7NJC3L5Y IA8KXMihhUtziVaQd2bBCPZ4w3+EFyr4MIvC1uF1EEDvbgJb5zj+wBbHxQt5VNRX AFXm9Y1UDDKmfrYIr2x6FWdtySjCx88kHLDO9LABj+ABf6XXsy7I0h7icuoGWHuO Gs8FikN6uuue5gWW9JsYyOgM/okItc3UFUyvCNUhXiE9jVwfmrY3yIsb67zv3tQO VIRdTwO7suCy7ZbLKxVpvMJtvmzswt1MSBw5k8YG5oQyht/R1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH35v3inQUuvtoUyQSq/hVXWtlWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWNiYWQ0NWYtN2VlOS0z YTQxLWE1NjItOWQ2MWI1Y2U2NGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyvFUbPfXpofVtKreae8/Jwz25jvLiAuOCW3+l2e/12gahzGtI457q4 uxi8G0gDoWNqk8kxSxG7METmCPawepiUFC1Qm7whnChncKGsO8uq5S11TGKWF65k q54HGVq0fEplTLsRFFhLNBN/md0ILSRlFngdMiHhPOJNMGLpoBej4i+1dXrUCOvu FHikU0/djiBGXDDpSl18oj5BO2iC8/LESZxWcDpEIH6yY58w2mfrooLPVeoq6LQ1 jFv/g8t5z93afObeAnYsGItcjlWAuoFj9zqkxprndCBKkiJKT1W6tf4pG37UV+Au ENminBxVDwEcuKi4AZDlpMRhcTt26Cc= -----END CERTIFICATE-----Generated at Thu Jun 4 11:18:58 2026 by rpki-client