$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d235a2e1-8944-36d1-9c24-03c61a7c2284.roa File: d235a2e1-8944-36d1-9c24-03c61a7c2284.roa (raw, json) Hash identifier: YYgOdrPXavaehSh4URTvONOHUr8APzFkBqGD3K9eTr8= Subject key identifier: B9:D5:B0:AB:37:C4:65:0B:6E:70:9E:22:E8:3F:BF:F4:5B:48:F5:5E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DFBC0581686E3E3393FDE5488 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d235a2e1-8944-36d1-9c24-03c61a7c2284.roa Signing time: Thu 28 May 2026 12:17:01 +0000 ROA not before: Thu 28 May 2026 12:17:01 +0000 ROA not after: Wed 26 Aug 2026 12:17:01 +0000 asID: 19905 IP address blocks: 173.19.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:c0:58:16:86:e3:e3:39:3f:de:54:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 28 12:17:01 2026 GMT Not After : Aug 26 12:17:01 2026 GMT Subject: CN=e2b62334-274b-44fa-b431-cb7bb3123e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:54:77:9a:ff:49:85:14:15:6e:70:1f:ed: ab:55:20:f6:2a:fd:4b:8e:73:45:73:16:de:5b:69: 03:8b:3d:b5:d6:8d:f8:64:0b:82:00:97:12:5f:e4: b2:39:9f:87:b1:e5:79:2e:49:04:bf:8b:ca:67:4b: 43:5f:14:a1:70:8c:0a:bc:0c:08:14:11:a9:41:4c: 0d:41:b2:1a:3e:e6:ac:c0:33:c0:ba:a2:b4:7d:48: 86:17:a9:29:1f:98:85:44:f5:7f:bf:de:ef:de:bd: fb:fa:99:75:38:35:f1:04:be:3d:6e:b0:ee:86:3b: 73:37:a3:b5:63:c1:e0:48:0f:69:1b:a9:c6:29:a2: 2e:d2:ae:6e:c1:1a:ee:46:24:0c:58:2a:c2:ff:0e: 26:5f:48:e8:7a:32:fc:44:4e:a2:fa:d5:2e:31:e0: 6f:52:2d:66:de:be:1c:31:73:ee:d0:ae:6c:a0:86: 0a:34:08:70:dc:fc:74:86:6b:84:b9:00:18:cf:f1: 23:57:4c:61:19:f1:e0:ea:66:a7:db:03:8e:b9:0e: 59:8a:96:34:e6:df:ab:42:5d:19:37:71:25:c2:0b: cc:d7:c3:86:39:4e:ef:e1:87:f6:e6:e6:94:b6:df: ae:16:c2:80:46:39:5b:c9:a5:29:bb:81:c0:a3:c8: a8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D5:B0:AB:37:C4:65:0B:6E:70:9E:22:E8:3F:BF:F4:5B:48:F5:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d235a2e1-8944-36d1-9c24-03c61a7c2284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:91:5d:59:65:22:6e:38:1a:2b:4b:cd:8c:60:ad:15:07:31: c2:9d:d0:6e:cb:81:5e:3d:d7:f3:c3:33:2f:52:9d:d6:bf:e4: 51:0b:e7:59:d9:c3:55:1d:6f:c0:23:a3:43:d7:90:a0:ab:41: dc:6f:bc:a4:4e:85:b6:04:17:da:ed:e1:6a:c0:65:51:26:e0: 62:91:cf:c4:38:54:12:27:67:09:02:37:15:7a:72:4f:2b:33: a9:f9:1e:58:28:f0:49:4f:0e:35:76:ca:c0:87:a8:37:f9:8c: 55:d5:5c:c2:9f:49:e8:b7:5c:c6:07:35:0b:53:e0:19:83:38: dc:d7:4f:01:1c:d6:08:d7:ba:42:a8:4d:63:30:38:98:fe:e2: 12:06:db:9f:c7:83:4c:b7:af:de:67:44:53:bf:94:51:af:81: 07:48:21:1f:24:8f:e4:5e:04:1d:45:19:f5:e2:8d:ff:b8:3a: a5:c4:33:94:6b:b6:1b:d2:5d:9f:d0:90:8f:e3:9b:00:33:b7: 13:6f:3f:e3:85:12:de:31:a8:f9:24:ac:c6:40:85:7c:d3:14: 3d:5b:32:12:53:ca:c6:95:48:f9:11:60:00:12:58:d4:73:4b: 0d:db:07:fa:71:5d:93:77:dc:55:6a:7e:7f:b9:b2:30:d4:94: 0f:bc:6d:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE37wFgWhuPjOT/eVIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyODEyMTcwMVoXDTI2MDgyNjEyMTcwMVowLzEtMCsGA1UEAxMk ZTJiNjIzMzQtMjc0Yi00NGZhLWI0MzEtY2I3YmIzMTIzZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBRUd5r/SYUUFW5wH+2rVSD2Kv1LjnNFcxbe W2kDiz211o34ZAuCAJcSX+SyOZ+HseV5LkkEv4vKZ0tDXxShcIwKvAwIFBGpQUwN QbIaPuaswDPAuqK0fUiGF6kpH5iFRPV/v97v3r37+pl1ODXxBL49brDuhjtzN6O1 Y8HgSA9pG6nGKaIu0q5uwRruRiQMWCrC/w4mX0joejL8RE6i+tUuMeBvUi1m3r4c MXPu0K5soIYKNAhw3Px0hmuEuQAYz/EjV0xhGfHg6man2wOOuQ5ZipY05t+rQl0Z N3ElwgvM18OGOU7v4Yf25uaUtt+uFsKARjlbyaUpu4HAo8iorQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnVsKs3xGULbnCeIug/v/RbSPVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDIzNWEyZTEtODk0NC0z NmQxLTljMjQtMDNjNjFhN2MyMjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArROZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGRXVllIm44GitLzYxgrRUHMcKd0G7LgV491/PDMy9Snda/5FEL51nZ w1Udb8Ajo0PXkKCrQdxvvKROhbYEF9rt4WrAZVEm4GKRz8Q4VBInZwkCNxV6ck8r M6n5Hlgo8ElPDjV2ysCHqDf5jFXVXMKfSei3XMYHNQtT4BmDONzXTwEc1gjXukKo TWMwOJj+4hIG25/Hg0y3r95nRFO/lFGvgQdIIR8kj+ReBB1FGfXijf+4OqXEM5Rr thvSXZ/QkI/jmwAztxNvP+OFEt4xqPkkrMZAhXzTFD1bMhJTysaVSPkRYAASWNRz Sw3bB/pxXZN33FVqfn+5sjDUlA+8bas= -----END CERTIFICATE-----Generated at Thu Jun 4 11:19:59 2026 by rpki-client