$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d20832d4-edbc-3388-a06c-fdde956828bd.roa File: d20832d4-edbc-3388-a06c-fdde956828bd.roa (raw, json) Hash identifier: jYBxYCjumRmc+AWK1+TKUjILsT100Cq98X7uVakqjJ8= Subject key identifier: 3B:E8:80:51:D8:27:75:AF:60:68:2F:93:BE:88:BE:EA:2C:D0:3A:DD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A4408C6EC1DCC5F85E180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d20832d4-edbc-3388-a06c-fdde956828bd.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.21.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:44:08:c6:ec:1d:cc:5f:85:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=e4eccda9-6eeb-4117-9243-5b1d7b2e1460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:02:d2:ca:72:f0:bd:d0:96:ad:f1:4a:e2:da: 8d:9a:df:fc:db:4b:e8:f5:75:cf:50:5b:0d:86:4e: 4e:60:02:f9:8c:67:ec:d0:b9:c0:fe:1a:c1:e9:08: f6:9e:22:ea:03:38:0b:41:bb:6e:5c:fc:30:b4:b8: d1:a8:fa:ba:54:1e:24:d0:07:20:be:92:90:cb:85: 80:b2:cd:5b:58:d5:30:59:53:29:2e:39:3b:25:a3: 76:d7:41:84:40:12:7d:b2:27:47:7e:70:d2:17:d9: 7e:22:b9:25:99:28:50:5a:a1:fd:2c:e7:64:a7:dc: a7:7d:99:1f:a3:8a:44:c5:c0:21:d6:a6:7c:c4:4a: c8:05:0b:9c:d8:ac:de:8a:1b:67:b3:02:21:42:4d: e9:71:0f:14:2e:bc:e2:96:92:ce:42:73:da:dd:ad: e0:1e:6d:9f:8f:2b:24:41:5a:1a:6a:36:b8:7e:00: a5:71:36:db:b6:a8:a8:4b:db:17:12:95:41:df:cd: cd:ac:84:13:df:8e:03:f5:28:38:8e:59:15:eb:91: c5:8c:8f:0b:ef:c1:6b:b5:05:69:7a:2d:66:9c:cc: 31:96:cc:e2:9a:55:5f:89:b0:6e:72:c5:aa:52:1b: 87:90:7d:5f:ff:88:97:34:26:c7:0d:82:ae:f7:e1: 7d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E8:80:51:D8:27:75:AF:60:68:2F:93:BE:88:BE:EA:2C:D0:3A:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d20832d4-edbc-3388-a06c-fdde956828bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:1b:33:c9:08:9d:50:29:a9:72:df:e9:1a:23:8c:2e:e5:55: 2d:aa:3b:55:e2:fb:84:c1:eb:50:26:51:d6:2f:13:4b:da:d8: a6:52:1b:13:63:39:fe:6c:dc:8b:9a:20:0c:c1:ef:f4:fa:4e: 1d:7a:9f:13:24:f3:b1:8e:03:8d:72:53:2e:50:d4:72:c6:6e: 66:97:74:c1:82:b5:4d:9f:85:41:38:0c:b1:4b:5d:5d:6d:15: 93:40:63:d2:41:65:0e:3d:ff:5e:0e:97:81:7f:87:38:ce:9c: ed:ee:8d:4a:23:cd:60:fc:10:b2:0e:28:b3:ff:c9:b4:2f:48: dc:2d:53:57:8a:9b:93:f0:d1:02:2a:84:cb:2b:6c:7e:18:54: ae:b2:d5:5f:da:a4:0c:c9:44:65:03:95:cf:bc:a2:3c:fe:02: c0:0f:e6:c4:8d:73:9b:36:04:7e:af:e1:2c:21:19:36:ed:42: 39:85:ff:84:f4:cf:b4:b3:f3:48:13:4b:d8:8e:26:4e:3c:80: ea:5b:ce:25:e6:16:19:e2:8a:e4:fd:da:14:13:e9:a8:53:e4: 74:d5:5a:e8:f1:bc:e1:c0:2f:1b:eb:89:92:83:5a:3b:0c:27: c7:a5:de:37:68:fa:ae:70:6e:67:20:33:31:b9:38:92:59:84: fd:a3:3f:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekQIxuwdzF+F4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTRlY2NkYTktNmVlYi00MTE3LTkyNDMtNWIxZDdiMmUxNDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgLSynLwvdCWrfFK4tqNmt/820vo9XXPUFsN hk5OYAL5jGfs0LnA/hrB6Qj2niLqAzgLQbtuXPwwtLjRqPq6VB4k0AcgvpKQy4WA ss1bWNUwWVMpLjk7JaN210GEQBJ9sidHfnDSF9l+IrklmShQWqH9LOdkp9ynfZkf o4pExcAh1qZ8xErIBQuc2KzeihtnswIhQk3pcQ8ULrzilpLOQnPa3a3gHm2fjysk QVoaaja4fgClcTbbtqioS9sXEpVB383NrIQT344D9Sg4jlkV65HFjI8L78FrtQVp ei1mnMwxlszimlVfibBucsWqUhuHkH1f/4iXNCbHDYKu9+F9/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvogFHYJ3WvYGgvk76Ivuos0DrdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDIwODMyZDQtZWRiYy0z Mzg4LWEwNmMtZmRkZTk1NjgyOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAbM8kInVApqXLf6RojjC7lVS2qO1Xi+4TB61AmUdYvE0va2KZSGxNj Of5s3IuaIAzB7/T6Th16nxMk87GOA41yUy5Q1HLGbmaXdMGCtU2fhUE4DLFLXV1t FZNAY9JBZQ49/14Ol4F/hzjOnO3ujUojzWD8ELIOKLP/ybQvSNwtU1eKm5Pw0QIq hMsrbH4YVK6y1V/apAzJRGUDlc+8ojz+AsAP5sSNc5s2BH6v4SwhGTbtQjmF/4T0 z7Sz80gTS9iOJk48gOpbziXmFhniiuT92hQT6ahT5HTVWujxvOHALxvriZKDWjsM J8el3jdo+q5wbmcgMzG5OJJZhP2jP78= -----END CERTIFICATE-----Generated at Thu Mar 12 03:45:26 2026 by rpki-client