$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11e062fa-d255-35c8-8513-c900b97b1577.roa File: 11e062fa-d255-35c8-8513-c900b97b1577.roa (raw, json) Hash identifier: Wvv4cndqdIryqXKhtAbEunyWmolbTyrtK+8h2Xyftwo= Subject key identifier: 7E:02:42:0B:9F:F4:71:EF:07:54:19:CB:B1:11:B6:80:05:56:10:40 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DC13D8B83FC8A7FC330F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11e062fa-d255-35c8-8513-c900b97b1577.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.20.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:13:d8:b8:3f:c8:a7:fc:33:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=9516763d-d5f5-42c7-a379-cf3aa61207bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ad:e8:06:c3:28:57:27:ae:39:c9:cd:4d:fe: 3c:9e:8c:dc:4d:ec:e4:46:88:34:f3:bf:59:32:b6: 85:40:c0:56:0b:40:8a:e7:b7:70:d6:fa:6f:ea:11: 2e:d4:2c:83:20:10:be:0b:7b:67:49:a6:a7:ea:91: af:16:de:49:9f:4e:9c:c1:ab:8d:ec:c7:23:be:30: ec:d6:a2:a2:0c:bd:4a:0a:7e:eb:1f:c0:a4:da:25: eb:ad:79:69:a8:ca:90:ec:8d:17:fc:b0:d3:99:6e: f4:f0:89:84:cf:da:da:d9:d4:0d:5e:5e:5a:52:94: 9a:ea:80:b8:38:84:57:39:cb:db:c4:1c:dd:03:f5: c9:22:7b:b9:92:79:7e:df:9c:e9:09:d4:c9:44:3f: e9:40:d4:91:5e:cc:54:d9:3b:a1:03:3d:3f:9b:37: 2e:13:94:02:59:04:a0:d0:63:ff:55:33:44:a0:b7: 44:5e:79:dc:e4:af:c9:17:33:17:b9:2a:8a:b6:37: cb:8b:0f:73:54:e6:e9:ce:09:df:a9:5b:ee:aa:43: fe:90:64:2b:9f:13:d4:be:a1:70:0e:64:39:dc:01: 6c:d2:ba:50:7b:08:57:30:61:ea:91:81:e9:32:5e: 55:37:38:bd:66:01:44:57:67:79:e1:32:6e:21:dd: 44:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:02:42:0B:9F:F4:71:EF:07:54:19:CB:B1:11:B6:80:05:56:10:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11e062fa-d255-35c8-8513-c900b97b1577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a5:e9:79:05:96:20:45:ac:4c:8d:f8:01:49:36:3e:0b:54: 12:c6:48:00:91:5f:a1:2f:68:ad:74:b0:53:3c:c1:0e:bb:9f: e6:30:25:6b:aa:c3:c9:c1:f4:66:2a:ab:a7:1c:7b:a0:5c:73: d8:2c:4c:86:7f:8e:a5:09:97:19:fc:ee:92:99:77:e4:a2:d3: 5d:73:7f:b4:75:3a:7f:82:cd:f1:30:ab:24:3b:10:47:26:2a: ec:33:fa:91:2f:8f:05:30:fe:74:2f:ed:c3:50:60:6c:10:32: a5:ce:27:cb:38:38:50:e6:7d:17:d9:f3:d2:48:c4:29:f8:fd: 96:26:0c:37:15:6b:c2:75:9a:5b:c0:e0:27:b7:d0:bd:2b:8c: 62:31:1c:77:5f:e7:0c:ea:13:7e:88:d2:9f:e2:b0:cd:a1:98: 20:64:60:cc:5a:50:d8:c1:8d:d6:92:d0:0d:4f:ac:aa:9f:46: 38:7e:c8:af:39:ee:e9:87:c5:f5:53:63:c6:32:64:d3:a2:94: a5:de:af:7e:01:f4:10:f4:62:e5:dd:73:0e:5f:70:ad:e1:e6: c6:e4:c2:5a:fa:b0:c4:63:91:b0:41:77:a2:82:8b:2f:35:30: 4c:42:68:e2:bd:66:28:f9:4e:ca:ac:1c:aa:e4:e7:e4:d2:02: b0:d5:8f:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3BPYuD/Ip/wzD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk OTUxNjc2M2QtZDVmNS00MmM3LWEzNzktY2YzYWE2MTIwN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK3oBsMoVyeuOcnNTf48nozcTezkRog0879Z MraFQMBWC0CK57dw1vpv6hEu1CyDIBC+C3tnSaan6pGvFt5Jn06cwauN7McjvjDs 1qKiDL1KCn7rH8Ck2iXrrXlpqMqQ7I0X/LDTmW708ImEz9ra2dQNXl5aUpSa6oC4 OIRXOcvbxBzdA/XJInu5knl+35zpCdTJRD/pQNSRXsxU2TuhAz0/mzcuE5QCWQSg 0GP/VTNEoLdEXnnc5K/JFzMXuSqKtjfLiw9zVObpzgnfqVvuqkP+kGQrnxPUvqFw DmQ53AFs0rpQewhXMGHqkYHpMl5VNzi9ZgFEV2d54TJuId1EyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4CQguf9HHvB1QZy7ERtoAFVhBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTFlMDYyZmEtZDI1NS0z NWM4LTg1MTMtYzkwMGI5N2IxNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyl6XkFliBFrEyN+AFJNj4LVBLGSACRX6EvaK10sFM8wQ67n+YwJWuq w8nB9GYqq6cce6Bcc9gsTIZ/jqUJlxn87pKZd+Si011zf7R1On+CzfEwqyQ7EEcm Kuwz+pEvjwUw/nQv7cNQYGwQMqXOJ8s4OFDmfRfZ89JIxCn4/ZYmDDcVa8J1mlvA 4Ce30L0rjGIxHHdf5wzqE36I0p/isM2hmCBkYMxaUNjBjdaS0A1PrKqfRjh+yK85 7umHxfVTY8YyZNOilKXer34B9BD0YuXdcw5fcK3h5sbkwlr6sMRjkbBBd6KCiy81 MExCaOK9Zij5TsqsHKrk5+TSArDVj9s= -----END CERTIFICATE-----Generated at Mon Mar 2 00:52:35 2026 by rpki-client