$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0ffd58b-7b60-361e-b355-4e02a51b117f.roa File: b0ffd58b-7b60-361e-b355-4e02a51b117f.roa (raw, json) Hash identifier: ROCosK9272gS9EADiO0Rv3lD0GIeNyUGRBINc6fdfC8= Subject key identifier: 06:9A:EA:06:83:E6:F5:BA:10:66:B4:52:3E:5F:12:DC:62:11:D6:FB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D9FB58D51BD04D0802DF836C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0ffd58b-7b60-361e-b355-4e02a51b117f.roa Signing time: Sat 25 Apr 2026 13:00:30 +0000 ROA not before: Sat 25 Apr 2026 13:00:30 +0000 ROA not after: Fri 24 Jul 2026 13:00:30 +0000 asID: 19905 IP address blocks: 173.29.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9f:b5:8d:51:bd:04:d0:80:2d:f8:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 13:00:30 2026 GMT Not After : Jul 24 13:00:30 2026 GMT Subject: CN=888778c5-4cb5-44f6-80f9-67200dd67a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:81:e7:40:8c:22:e4:2f:43:99:e5:1e:cf: 57:79:d2:d1:f6:92:26:a3:cc:b9:75:30:08:5c:45: e0:d7:3f:e9:dd:a4:c2:44:f5:ce:0d:aa:97:40:b4: ea:df:e9:3a:3b:8d:35:ed:70:dc:d6:b8:9b:d6:ac: a6:e8:61:c2:12:42:19:83:44:54:fc:05:39:0f:ba: c5:27:c3:6b:50:8c:87:2a:89:41:b5:b8:7e:8d:7b: 08:53:fd:38:c4:cb:55:35:31:44:62:1f:9d:81:43: 48:16:1f:a1:ac:0d:7d:bf:7f:e7:49:da:ea:71:2d: 93:5f:d4:a8:72:03:49:f8:53:4c:2f:ef:9d:7f:28: 9e:53:c9:03:98:e0:49:17:f0:5e:51:d1:4b:22:62: 7d:3d:38:28:a8:61:77:e3:b4:d9:14:b6:51:b8:87: d8:cf:7b:35:7d:19:d5:39:63:13:6a:c6:2b:88:b6: db:d1:59:ca:d9:2b:c0:08:82:44:bd:ff:f9:8c:5a: 66:ec:b0:b1:e4:87:fe:82:d1:8c:18:d5:de:87:04: b9:45:f9:98:05:04:07:43:d9:6e:1a:bb:45:b9:b9: dc:16:8d:48:1e:91:6c:f9:2a:36:aa:9f:5f:ee:92: 8e:cf:48:7e:4f:bc:0c:17:23:98:23:89:f0:2a:e1: 80:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9A:EA:06:83:E6:F5:BA:10:66:B4:52:3E:5F:12:DC:62:11:D6:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0ffd58b-7b60-361e-b355-4e02a51b117f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d8:84:7b:d1:5e:d8:c2:f9:70:f4:1b:c2:e7:9c:2d:29:23: 9c:30:40:d4:4d:28:6a:e9:4d:36:5c:b0:7e:97:82:86:b3:b1: 58:da:ac:60:33:89:04:6b:18:ba:2d:07:64:ff:d5:00:2e:2c: 43:92:11:ae:17:20:d4:71:86:97:d3:9a:ee:9a:c2:4c:40:cd: 6e:3c:8b:0a:fc:70:39:fe:09:d3:49:c5:1f:02:ac:f2:ae:19: 9a:d6:1e:01:c0:49:0f:de:06:09:bb:c4:25:bd:37:6e:a6:3e: 93:13:59:b0:bd:38:f4:6a:44:c2:76:27:0d:09:66:e0:ae:15: c6:02:c5:33:32:2b:8a:78:c9:52:fb:21:f5:a7:2e:de:16:98: 4d:68:69:4f:d6:cf:9c:8c:93:1b:35:de:e6:93:67:a0:e8:d3: 1d:5b:7d:e1:9a:e3:06:4a:80:9c:e5:4c:5d:83:2b:9a:4c:c3: 24:28:c7:83:81:ae:e6:5c:ea:1f:a3:07:34:36:e0:c3:87:33: 48:67:c1:ce:79:4b:5d:85:45:f2:77:ad:0d:4f:09:18:86:b8: 54:f0:26:24:75:14:21:3f:9c:d7:c6:e4:52:87:2a:1f:14:65: 82:9b:8e:01:2e:ea:25:92:a5:36:00:e6:e9:32:a7:79:1d:fa: 4a:dd:46:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftY1RvQTQgC34NsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk ODg4Nzc4YzUtNGNiNS00NGY2LTgwZjktNjcyMDBkZDY3YTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgWB50CMIuQvQ5nlHs9XedLR9pImo8y5dTAI XEXg1z/p3aTCRPXODaqXQLTq3+k6O4017XDc1rib1qym6GHCEkIZg0RU/AU5D7rF J8NrUIyHKolBtbh+jXsIU/04xMtVNTFEYh+dgUNIFh+hrA19v3/nSdrqcS2TX9So cgNJ+FNML++dfyieU8kDmOBJF/BeUdFLImJ9PTgoqGF347TZFLZRuIfYz3s1fRnV OWMTasYriLbb0VnK2SvACIJEvf/5jFpm7LCx5If+gtGMGNXehwS5RfmYBQQHQ9lu GrtFubncFo1IHpFs+So2qp9f7pKOz0h+T7wMFyOYI4nwKuGAIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaa6gaD5vW6EGa0Uj5fEtxiEdb7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjBmZmQ1OGItN2I2MC0z NjFlLWIzNTUtNGUwMmE1MWIxMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzYhHvRXtjC+XD0G8LnnC0pI5wwQNRNKGrpTTZcsH6XgoazsVjarGAz iQRrGLotB2T/1QAuLEOSEa4XINRxhpfTmu6awkxAzW48iwr8cDn+CdNJxR8CrPKu GZrWHgHASQ/eBgm7xCW9N26mPpMTWbC9OPRqRMJ2Jw0JZuCuFcYCxTMyK4p4yVL7 IfWnLt4WmE1oaU/Wz5yMkxs13uaTZ6Do0x1bfeGa4wZKgJzlTF2DK5pMwyQox4OB ruZc6h+jBzQ24MOHM0hnwc55S12FRfJ3rQ1PCRiGuFTwJiR1FCE/nNfG5FKHKh8U ZYKbjgEu6iWSpTYA5ukyp3kd+krdRj8= -----END CERTIFICATE-----Generated at Fri May 8 20:26:17 2026 by rpki-client