$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa File: 3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa (raw, json) Hash identifier: IfbbJ4s4Dp97sLjGo6NxfOCGIkTrtoS+HqPIBn5Jjc4= Subject key identifier: CD:B2:BF:2D:DA:88:14:CC:84:CC:E9:B5:64:E0:A3:42:E8:E3:EB:45 Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F4328584E4C548A408F79D86A83C85E80 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 40562 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:8a:40:8f:79:d8:6a:83:c8:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=3aee5d84-1ac5-411d-a62d-c89356ea8dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d2:f0:87:3c:8f:3f:1c:75:b1:2d:03:25:c3: d5:84:bb:f9:e0:f6:fa:54:0d:80:02:01:4f:ed:dc: 6f:11:7f:b0:d9:4c:e9:e9:4c:45:b6:75:2e:3a:82: a2:bd:71:b7:7c:05:f7:ce:59:b5:a7:fc:c2:2e:e7: d7:71:04:7c:83:f7:10:65:c2:2f:ef:a7:18:71:59: 82:fa:e9:94:75:e6:ae:2e:37:11:86:b1:dc:ae:b9: 76:34:b5:74:ca:f3:45:0c:32:d8:19:27:93:54:eb: 50:49:d7:41:d1:4f:0c:9c:02:39:a5:99:79:86:ff: fc:1a:40:cf:10:3c:0b:13:f8:38:a7:1b:d5:1e:50: 2b:68:b8:cd:38:57:18:0b:f2:91:06:87:d0:b1:d6: 82:82:c0:41:41:e6:14:1d:9a:51:c1:24:b5:ea:f7: b7:9d:f1:26:3a:01:f5:2b:2b:74:0b:45:d6:38:65: f8:04:8f:d2:54:85:56:b5:44:3c:7d:b0:a5:d3:d4: 8f:14:31:9a:21:9a:10:a3:8d:88:fc:68:4c:8b:27: 35:65:6a:3d:dc:7d:4a:39:e6:32:7e:5d:d2:8f:2b: be:93:88:ee:95:f2:b2:96:5a:cb:a2:d6:d7:d3:91: ef:f4:5e:04:63:35:a0:11:af:ea:94:13:96:14:5e: d8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B2:BF:2D:DA:88:14:CC:84:CC:E9:B5:64:E0:A3:42:E8:E3:EB:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:18:2a:42:21:b6:67:47:63:ce:63:09:20:87:09:fd:d5:6f: 2c:28:3e:7c:38:2a:d1:22:75:5e:34:3b:26:26:48:1f:c9:7f: 3a:0c:b7:5e:f2:66:34:36:0d:5b:43:f2:9c:43:81:cc:53:af: 59:f0:dd:17:77:c1:4d:49:1a:ff:5c:d4:48:2b:1e:ba:ca:a5: 28:13:9b:0d:5d:cb:0d:7a:df:4a:99:1c:8d:20:40:35:8d:ea: b2:46:0f:44:cc:fa:78:ae:33:b3:d0:24:47:29:ae:79:29:b9: 20:73:d5:66:d7:01:3b:e4:87:07:fe:d6:c5:be:b5:85:1c:91: e4:ec:39:e8:fc:07:d0:49:45:54:16:02:79:b2:71:d4:9c:53: 43:f3:e6:7d:df:01:a6:70:57:4f:9e:80:d5:f8:d5:47:f6:c5: f7:fb:0e:be:65:60:bd:03:d7:c8:1c:3a:db:5d:0d:62:2a:50: c8:8f:4e:75:1d:5d:f3:5a:62:98:a9:f3:0a:75:7a:76:93:74: b6:01:3b:ab:b7:82:68:4f:fb:bf:96:46:b3:3f:c8:70:cd:9f: 5d:aa:d7:40:a9:39:54:c0:48:2e:b6:56:ea:a0:1d:e1:43:de: 40:59:f0:a4:47:26:7d:88:8e:c8:c8:73:1a:22:5c:71:fe:b5: e2:f7:ee:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVIpAj3nYaoPIXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk M2FlZTVkODQtMWFjNS00MTFkLWE2MmQtYzg5MzU2ZWE4ZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtLwhzyPPxx1sS0DJcPVhLv54Pb6VA2AAgFP 7dxvEX+w2Uzp6UxFtnUuOoKivXG3fAX3zlm1p/zCLufXcQR8g/cQZcIv76cYcVmC +umUdeauLjcRhrHcrrl2NLV0yvNFDDLYGSeTVOtQSddB0U8MnAI5pZl5hv/8GkDP EDwLE/g4pxvVHlAraLjNOFcYC/KRBofQsdaCgsBBQeYUHZpRwSS16ve3nfEmOgH1 Kyt0C0XWOGX4BI/SVIVWtUQ8fbCl09SPFDGaIZoQo42I/GhMiyc1ZWo93H1KOeYy fl3Sjyu+k4julfKyllrLotbX05Hv9F4EYzWgEa/qlBOWFF7Y4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2yvy3aiBTMhMzptWTgo0Lo4+tFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvMzAwNmI3Y2YtZWM3OC0z ZmU2LTkyZTEtMDRiMDg0M2Y1OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYYKkIhtmdHY85jCSCHCf3VbywoPnw4KtEidV40OyYmSB/JfzoMt17y ZjQ2DVtD8pxDgcxTr1nw3Rd3wU1JGv9c1EgrHrrKpSgTmw1dyw1630qZHI0gQDWN 6rJGD0TM+niuM7PQJEcprnkpuSBz1WbXATvkhwf+1sW+tYUckeTsOej8B9BJRVQW AnmycdScU0Pz5n3fAaZwV0+egNX41Uf2xff7Dr5lYL0D18gcOttdDWIqUMiPTnUd XfNaYpip8wp1enaTdLYBO6u3gmhP+7+WRrM/yHDNn12q10CpOVTASC62VuqgHeFD 3kBZ8KRHJn2IjsjIcxoiXHH+teL37sg= -----END CERTIFICATE-----Generated at Thu Jul 16 12:38:40 2026 by rpki-client