$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8295b53-f638-3af4-99e0-f0a0932ba255.roa File: a8295b53-f638-3af4-99e0-f0a0932ba255.roa (raw, json) Hash identifier: bdYsg6IBhKVB0lv+GSDLShTr26difmB6QSxOuycPQAo= Subject key identifier: 28:CF:B1:4A:C5:67:33:49:0A:7C:FA:35:B5:81:82:EB:6E:60:ED:87 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DB4A5B71EAB28C994CA456380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8295b53-f638-3af4-99e0-f0a0932ba255.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 30036 IP address blocks: 173.17.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:b7:1e:ab:28:c9:94:ca:45:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=b224e721-c14e-44bf-917a-869f67dc1ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:ce:dd:fe:9a:af:a2:99:35:c4:e7:d5:5f: d8:83:98:7c:25:b7:d6:74:5b:d8:af:7b:80:25:55: e8:0c:e0:75:3e:52:1b:42:33:05:f4:f8:56:79:96: d4:11:94:ee:84:db:d7:b1:e7:6b:d6:c0:fa:ab:2e: d8:36:6f:35:c0:c7:2d:e3:87:66:89:61:a7:5d:ce: c3:cf:02:1f:7f:c4:cc:82:cb:37:9a:3e:4f:47:ee: 66:eb:77:19:07:a5:21:2b:66:34:4e:52:92:19:98: ae:0d:ec:df:da:bb:c6:35:5f:cd:67:0c:31:07:99: f8:37:4b:81:fa:1a:47:5c:65:df:f7:02:3f:01:67: 51:0d:5e:4a:ed:81:2e:61:d4:46:e9:04:e3:b3:1d: 4e:85:bc:54:e7:71:0e:04:53:7f:1c:dc:cb:a4:19: a0:87:b4:87:2a:92:69:84:99:de:0d:fd:8f:d6:5c: 94:65:95:00:c4:09:19:2a:a8:f7:ee:ff:57:69:12: 7a:71:04:97:cb:6d:ee:31:14:f4:b4:7b:70:c3:34: 54:4a:8c:38:28:a3:3c:c2:21:44:9c:33:fb:2b:4f: b9:c6:b4:bc:68:15:63:d3:57:bc:05:aa:7a:74:0b: 70:88:32:a8:a1:97:25:c2:64:99:3b:fc:f4:36:75: c5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CF:B1:4A:C5:67:33:49:0A:7C:FA:35:B5:81:82:EB:6E:60:ED:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8295b53-f638-3af4-99e0-f0a0932ba255.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:87:9c:57:dd:1a:6c:0a:bd:5e:3e:57:7c:f6:50:6c:aa:8f: fd:88:61:1f:c4:fd:c0:9b:05:3e:ab:98:0b:da:6c:9c:f4:4f: 95:79:c1:82:16:59:f8:fb:fc:22:23:6c:8b:4b:8c:46:86:25: de:c7:99:47:3d:f4:18:68:b4:22:07:5d:8d:8e:9f:c3:ce:2f: fa:70:0d:2a:f7:65:ae:f4:e8:29:5f:a6:1a:31:5d:53:64:fd: 5b:bd:03:92:80:e3:91:d1:67:79:20:48:66:78:6a:c5:8c:55: b5:30:cc:ee:64:a8:8f:4d:99:d4:eb:66:fd:b1:e4:63:f4:84: 94:39:6a:a4:da:30:06:d3:99:8d:66:71:3b:e5:1b:ac:ef:a3: 40:8b:38:0e:89:94:18:d2:77:db:06:d0:27:e8:69:12:31:b1: 69:eb:17:4a:73:75:55:ae:db:bb:78:b1:7f:55:a6:11:5b:de: dc:e0:62:b8:f6:62:98:0b:1a:18:6e:57:9f:a3:cf:dd:d0:1f: 7c:ca:17:de:8b:24:d8:31:8d:93:6c:64:c0:ea:8e:10:16:b4: 84:29:f5:eb:d3:e5:e0:3b:0e:ca:72:61:c2:28:e5:14:b9:e9: 49:f4:a8:62:02:3e:f8:65:cc:b9:f4:21:01:4e:77:29:59:e1: 47:40:03:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pbceqyjJlMpFY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk YjIyNGU3MjEtYzE0ZS00NGJmLTkxN2EtODY5ZjY3ZGMxYWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgDO3f6ar6KZNcTn1V/Yg5h8JbfWdFvYr3uA JVXoDOB1PlIbQjMF9PhWeZbUEZTuhNvXsedr1sD6qy7YNm81wMct44dmiWGnXc7D zwIff8TMgss3mj5PR+5m63cZB6UhK2Y0TlKSGZiuDezf2rvGNV/NZwwxB5n4N0uB +hpHXGXf9wI/AWdRDV5K7YEuYdRG6QTjsx1OhbxU53EOBFN/HNzLpBmgh7SHKpJp hJneDf2P1lyUZZUAxAkZKqj37v9XaRJ6cQSXy23uMRT0tHtwwzRUSow4KKM8wiFE nDP7K0+5xrS8aBVj01e8Bap6dAtwiDKooZclwmSZO/z0NnXFHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjPsUrFZzNJCnz6NbWBgutuYO2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTgyOTViNTMtZjYzOC0z YWY0LTk5ZTAtZjBhMDkzMmJhMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+HnFfdGmwKvV4+V3z2UGyqj/2IYR/E/cCbBT6rmAvabJz0T5V5wYIW Wfj7/CIjbItLjEaGJd7HmUc99BhotCIHXY2On8POL/pwDSr3Za706ClfphoxXVNk /Vu9A5KA45HRZ3kgSGZ4asWMVbUwzO5kqI9NmdTrZv2x5GP0hJQ5aqTaMAbTmY1m cTvlG6zvo0CLOA6JlBjSd9sG0CfoaRIxsWnrF0pzdVWu27t4sX9VphFb3tzgYrj2 YpgLGhhuV5+jz93QH3zKF96LJNgxjZNsZMDqjhAWtIQp9evT5eA7DspyYcIo5RS5 6Un0qGICPvhlzLn0IQFOdylZ4UdAA1s= -----END CERTIFICATE-----Generated at Fri May 8 18:27:02 2026 by rpki-client