$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdf6bb8b-7e5e-3b8e-9a44-6825319f0651.roa File: cdf6bb8b-7e5e-3b8e-9a44-6825319f0651.roa (raw, json) Hash identifier: sbzIJ4gT9pUbphleQ2o6j2FMh0y7hBKqq8CZmXYYk90= Subject key identifier: 6E:B0:1A:91:D2:34:0C:F3:0E:7F:BB:75:86:AF:A4:6F:90:4E:19:A8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DA8156B7EEAF0FAFE1305DD40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdf6bb8b-7e5e-3b8e-9a44-6825319f0651.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 30036 IP address blocks: 173.18.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:6b:7e:ea:f0:fa:fe:13:05:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=3185ea73-01d7-4391-8fd2-31b3a6bd6bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e6:bf:e2:31:ad:48:e0:eb:1b:c7:c9:64:a2: ed:5d:5a:8b:eb:1f:b5:0d:0d:16:76:ef:f4:e0:79: c2:7c:0a:6e:f2:b2:f7:15:6c:bf:1e:4a:e4:c0:36: e8:48:4e:63:80:36:fb:9d:f9:c5:82:f6:3d:ea:1d: e0:bb:23:21:5e:4b:be:3b:58:a1:b3:09:25:bb:42: 9f:42:4f:0e:09:47:2b:0c:d2:33:b2:15:7e:e2:8a: 5c:f3:19:10:d1:c4:07:89:d3:50:17:d2:3c:a7:ce: e0:7f:3b:38:48:e6:b7:d9:fe:32:30:68:e5:80:d3: 7f:01:58:21:58:fd:00:09:cb:47:a0:63:d8:5e:cd: 58:36:fb:ae:5e:39:5c:1d:46:59:20:92:70:24:71: d1:ec:7b:cd:3f:18:08:bc:c3:a1:38:1c:82:9f:ff: 43:0e:f7:94:51:e6:f1:27:2c:f2:98:12:bf:bf:3a: 3e:cd:d1:d9:ad:6f:bf:34:59:39:d7:05:16:db:4f: de:79:68:8f:50:5e:68:2e:5d:04:71:aa:79:77:8c: 11:39:e6:1a:c1:3c:3b:a8:87:95:db:40:e3:1c:67: ba:d7:4b:1c:64:80:4a:64:d2:90:64:3a:73:e7:6b: 4e:06:08:9e:12:bf:bf:8a:3c:0f:6b:97:b7:94:5a: be:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B0:1A:91:D2:34:0C:F3:0E:7F:BB:75:86:AF:A4:6F:90:4E:19:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdf6bb8b-7e5e-3b8e-9a44-6825319f0651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:95:e6:84:da:9f:c1:a0:79:68:42:81:36:72:23:75:8c:13: ef:15:ed:2a:82:61:21:a9:ef:3a:0f:d5:6d:0d:b3:bb:10:20: bf:1a:d8:a1:4d:ee:0a:b7:d7:ce:94:8d:3d:ec:41:63:64:60: 18:98:8a:4d:35:8a:54:70:d4:28:c9:76:10:21:26:7d:98:a4: f1:66:41:2d:ce:7c:a2:7e:37:bb:db:a8:f7:8f:e6:d5:81:de: ae:e4:58:36:76:a2:f0:e9:2d:1f:03:86:73:76:78:91:11:ff: a7:b6:bf:ee:1c:c9:2e:f1:c7:97:02:cd:a9:20:6b:81:28:8f: f9:42:c9:7f:ad:22:1f:f5:38:e9:bf:34:6c:81:2c:ea:0e:2b: ec:ae:c7:46:6b:cd:0f:2e:05:da:a7:28:83:06:e4:d1:8d:77: d5:0b:c1:ba:9d:dd:54:47:36:da:fe:53:11:2a:ae:a9:2f:1b: 47:58:74:80:06:76:5a:d8:4b:5f:22:db:df:25:98:49:12:62: 1e:bd:61:46:b5:1d:b7:b1:fb:59:98:d9:3c:56:33:b4:15:4a: e7:62:5a:3b:80:6c:32:3e:13:9d:fa:34:64:7f:28:78:37:b3: c1:d9:73:49:70:44:e0:9f:27:86:5b:e4:5b:d7:3c:a6:ba:69: bd:e9:04:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFWt+6vD6/hMF3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk MzE4NWVhNzMtMDFkNy00MzkxLThmZDItMzFiM2E2YmQ2YmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Oa/4jGtSODrG8fJZKLtXVqL6x+1DQ0Wdu/0 4HnCfApu8rL3FWy/HkrkwDboSE5jgDb7nfnFgvY96h3guyMhXku+O1ihswklu0Kf Qk8OCUcrDNIzshV+4opc8xkQ0cQHidNQF9I8p87gfzs4SOa32f4yMGjlgNN/AVgh WP0ACctHoGPYXs1YNvuuXjlcHUZZIJJwJHHR7HvNPxgIvMOhOByCn/9DDveUUebx JyzymBK/vzo+zdHZrW+/NFk51wUW20/eeWiPUF5oLl0Ecap5d4wROeYawTw7qIeV 20DjHGe610scZIBKZNKQZDpz52tOBgieEr+/ijwPa5e3lFq+ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6wGpHSNAzzDn+7dYavpG+QThmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2RmNmJiOGItN2U1ZS0z YjhlLTlhNDQtNjgyNTMxOWYwNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6V5oTan8GgeWhCgTZyI3WME+8V7SqCYSGp7zoP1W0Ns7sQIL8a2KFN 7gq3186UjT3sQWNkYBiYik01ilRw1CjJdhAhJn2YpPFmQS3OfKJ+N7vbqPeP5tWB 3q7kWDZ2ovDpLR8DhnN2eJER/6e2v+4cyS7xx5cCzakga4Eoj/lCyX+tIh/1OOm/ NGyBLOoOK+yux0ZrzQ8uBdqnKIMG5NGNd9ULwbqd3VRHNtr+UxEqrqkvG0dYdIAG dlrYS18i298lmEkSYh69YUa1Hbex+1mY2TxWM7QVSudiWjuAbDI+E536NGR/KHg3 s8HZc0lwROCfJ4Zb5FvXPKa6ab3pBDs= -----END CERTIFICATE-----Generated at Fri May 8 19:29:23 2026 by rpki-client