$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa File: 3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa (raw, json) Hash identifier: Xv8Na9of2p1MMX9nvjvUe+ukaMFb9TUHPGT8HDqhkUM= Subject key identifier: 88:2F:98:69:4E:98:A7:F3:E3:70:42:6D:D4:71:7A:E9:24:12:E7:66 Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86 Certificate serial: 010D0C9F4328584D6C0FB135255AC74CDAC73980 Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 40562 IP address blocks: 172.111.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b1:35:25:5a:c7:4c:da:c7:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94543699-4d50-4a37-8000-038c38671a86 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=2c049be3-1836-4e04-b4ba-159978ebe9a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e6:61:b7:f6:ba:b6:73:9e:6c:ce:fe:13:bd: b4:d9:c2:27:0a:e2:01:fb:e9:3c:56:ab:fe:5a:f4: d6:87:0e:83:d4:05:3e:99:30:4d:44:59:64:e7:77: 05:84:df:65:48:43:94:c4:b9:1a:ef:c0:d8:ce:a2: e2:74:58:d8:c2:18:54:de:c8:88:9f:f0:b3:19:c2: 3a:5b:71:0d:c7:90:df:e4:df:1f:94:64:fc:f2:ac: a7:c9:cf:eb:e9:28:eb:7e:45:0a:90:70:c2:7b:ec: 52:64:29:b5:34:1a:2f:a6:a7:82:87:a2:7f:67:90: ad:ca:bc:59:36:ea:4b:1b:96:af:15:d9:12:2c:15: c0:45:d8:5f:84:fe:4b:6b:5d:36:79:58:ea:23:44: bf:d8:5c:e6:cb:76:51:08:44:36:af:c5:1b:66:df: c3:37:97:ba:0f:95:d9:ae:b9:25:e9:6a:66:f9:75: 96:f9:a0:d3:e9:f8:7f:be:01:b8:a0:38:77:6a:84: 46:81:9a:95:68:d0:45:76:80:3e:85:2b:9e:4f:9d: 99:d6:43:26:c6:5b:eb:33:e7:18:2e:3b:eb:48:10: 8a:2d:f7:87:cd:74:cd:9c:cd:88:9f:d2:5a:e3:eb: d8:cf:91:9d:41:f5:9f:ef:45:fa:e5:b9:02:2f:46: fc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2F:98:69:4E:98:A7:F3:E3:70:42:6D:D4:71:7A:E9:24:12:E7:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/3006b7cf-ec78-3fe6-92e1-04b0843f594e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl X509v3 Authority Key Identifier: keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer sbgp-ipAddrBlock: critical IPv4: 172.111.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:06:58:22:ac:6b:11:36:5c:cc:ee:ba:04:55:2f:21:ea:06: 9c:4e:d8:f8:f9:6b:c3:01:04:40:b0:be:f7:10:31:2c:6e:2d: 95:14:6b:a6:f4:17:78:b6:d2:e9:f4:d7:99:13:aa:8c:45:7f: 5a:31:9a:b0:6d:d2:fa:69:b3:cc:c9:4b:58:89:98:8a:33:b7: de:3a:17:04:b9:39:78:f7:52:22:66:60:c4:84:7b:69:7b:54: 31:44:43:b7:3e:4e:cf:8e:fe:58:bf:94:34:cf:78:6c:22:e7: 9c:4e:66:a5:86:d1:01:55:d1:a9:be:4d:c4:76:dc:a4:fb:80: 39:cd:fe:8f:c6:2a:f3:c5:76:c2:1b:03:b7:62:f1:50:01:f3: 40:e3:28:f1:ea:ab:ec:ac:84:87:1f:b8:87:4c:8b:3a:a8:66: a9:f5:6c:c4:63:fd:ed:f5:76:96:94:ac:fe:d1:9b:c4:12:bb: 7e:4c:b6:6c:af:8c:0e:a4:a6:8a:c6:cf:f7:54:6d:20:c4:63: 2b:98:32:40:00:75:d4:32:84:dd:3c:f5:8a:f1:41:1b:ec:e4: 09:ce:ec:0a:2f:97:44:18:3b:b6:13:18:69:4c:e8:98:e8:26: 01:40:5c:1b:23:e1:04:3a:20:03:ad:d5:d4:be:bb:f0:b7:ef: cb:da:88:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD7E1JVrHTNrHOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1NDM2OTktNGQ1MC00YTM3LTgwMDAtMDM4YzM4Njcx YTg2MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk MmMwNDliZTMtMTgzNi00ZTA0LWI0YmEtMTU5OTc4ZWJlOWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneZht/a6tnOebM7+E7202cInCuIB++k8Vqv+ WvTWhw6D1AU+mTBNRFlk53cFhN9lSEOUxLka78DYzqLidFjYwhhU3siIn/CzGcI6 W3ENx5Df5N8flGT88qynyc/r6SjrfkUKkHDCe+xSZCm1NBovpqeCh6J/Z5CtyrxZ NupLG5avFdkSLBXARdhfhP5La102eVjqI0S/2Fzmy3ZRCEQ2r8UbZt/DN5e6D5XZ rrkl6Wpm+XWW+aDT6fh/vgG4oDh3aoRGgZqVaNBFdoA+hSueT52Z1kMmxlvrM+cY LjvrSBCKLfeHzXTNnM2In9Ja4+vYz5GdQfWf70X65bkCL0b84wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgvmGlOmKfz43BCbdRxeukkEudmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0 MzY5OS00ZDUwLTRhMzctODAwMC0wMzhjMzg2NzFhODYvMzAwNmI3Y2YtZWM3OC0z ZmU2LTkyZTEtMDRiMDg0M2Y1OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTQ1NDM2OTktNGQ1MC00YTM3LTgw MDAtMDM4YzM4NjcxYTg2Lzk0NTQzNjk5LTRkNTAtNGEzNy04MDAwLTAzOGMzODY3 MWE4Ni5jcmwwHwYDVR0jBBgwFoAUA/mT0DrEyfWVfSGEZ/9sW9FWgeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NDU0MzY5OS00ZDUwLTRhMzctODAwMC0wMzhj Mzg2NzFhODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAGWCKsaxE2XMzuugRVLyHqBpxO2Pj5a8MBBECwvvcQMSxuLZUUa6b0 F3i20un015kTqoxFf1oxmrBt0vpps8zJS1iJmIozt946FwS5OXj3UiJmYMSEe2l7 VDFEQ7c+Ts+O/li/lDTPeGwi55xOZqWG0QFV0am+TcR23KT7gDnN/o/GKvPFdsIb A7di8VAB80DjKPHqq+yshIcfuIdMizqoZqn1bMRj/e31dpaUrP7Rm8QSu35Mtmyv jA6kporGz/dUbSDEYyuYMkAAddQyhN089YrxQRvs5AnO7Aovl0QYO7YTGGlM6Jjo JgFAXBsj4QQ6IAOt1dS+u/C378vaiJI= -----END CERTIFICATE-----Generated at Thu Apr 9 02:30:40 2026 by rpki-client