$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/134a6651-0b3a-3925-90cd-2ed753e1df89.roa File: 134a6651-0b3a-3925-90cd-2ed753e1df89.roa (raw, json) Hash identifier: cTFq+lcGFjXIK11eQlbnGngKIBDz5cyMGQ8bip8bXuk= Subject key identifier: EC:A3:2F:3A:80:5A:49:96:56:BD:B2:92:A1:D4:4A:FB:E1:BF:CE:69 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D826524335D07BDA9767FF080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/134a6651-0b3a-3925-90cd-2ed753e1df89.roa Signing time: Wed 15 Apr 2026 01:00:24 +0000 ROA not before: Wed 15 Apr 2026 01:00:24 +0000 ROA not after: Tue 14 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 173.24.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:82:65:24:33:5d:07:bd:a9:76:7f:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 15 01:00:24 2026 GMT Not After : Jul 14 01:00:24 2026 GMT Subject: CN=e20b2b0d-bf3c-4cb1-8d3a-cc3b84288ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:94:69:af:0c:e2:63:cf:77:28:8b:46:52:83: e3:06:c6:cc:00:4c:b9:76:9a:83:4c:fb:24:16:48: 0b:25:93:8b:ab:fc:62:d8:a0:66:4b:b8:33:0e:66: 89:44:c4:dc:b5:74:4a:d3:15:68:c9:d3:d6:98:9e: 88:21:3c:e9:68:d8:fc:5f:78:a3:47:2c:48:21:3f: be:84:aa:ce:c9:eb:3e:7f:e9:51:d3:61:2a:2a:16: 0c:84:31:ae:cb:6f:ed:e4:61:f5:31:08:78:7c:78: 7f:7d:27:d4:28:05:3c:23:39:3b:65:97:0d:6d:0d: a8:46:3b:fb:b9:95:1b:44:3c:d3:6a:dd:06:43:5a: 7d:fa:8b:ca:14:fe:d4:bf:f5:b9:90:e9:fa:86:9d: 6f:9b:58:23:7e:12:5f:dd:e6:77:24:ad:dc:3c:91: 85:61:25:63:47:be:59:db:2f:f1:5d:56:61:11:6c: bf:43:35:8c:76:42:90:53:0c:af:b7:74:4a:e1:42: 54:fa:11:b7:14:23:7f:a0:a4:f8:bb:37:9a:cb:9e: 84:45:28:a8:51:2a:c0:e1:6f:c2:bb:3e:1a:65:46: a1:a9:9a:c3:f0:51:f7:2f:21:91:49:0d:e7:e8:9a: a9:4d:5a:ff:95:54:c7:2c:e6:aa:0c:57:7b:51:af: f2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A3:2F:3A:80:5A:49:96:56:BD:B2:92:A1:D4:4A:FB:E1:BF:CE:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/134a6651-0b3a-3925-90cd-2ed753e1df89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:32:19:cc:95:cf:a9:96:25:cd:cd:64:35:b9:54:69:e9:6d: 48:8d:47:af:a2:20:ad:80:06:cc:27:48:a6:25:ed:58:bb:25: d1:24:63:77:73:36:90:61:5b:9e:79:c2:ad:5d:18:15:a1:aa: dc:cc:5f:5c:04:a8:ed:b0:7a:7b:39:39:b1:c9:e4:f9:84:67: 45:8b:b0:e0:1d:85:a8:8f:0c:5d:2d:5d:1d:38:c5:91:1c:67: 00:3e:27:55:6b:71:d0:c9:59:2b:0d:dd:4b:af:ae:14:69:67: 37:74:7e:0b:7b:fb:db:33:f1:d4:81:3b:3a:a5:f0:70:b2:c4: a2:69:3d:f7:30:3d:e4:e7:1a:f9:80:7c:70:6f:3e:a2:55:7c: 15:6b:ab:77:20:76:0b:ab:8d:87:24:bd:c7:e7:24:d6:90:37: 6a:26:aa:a6:71:29:20:b8:1f:f6:3f:97:36:3b:a7:29:b1:e0: b9:43:13:09:db:37:a7:5d:23:f8:c6:d8:d5:99:6b:2c:32:63: 24:d7:9d:b9:0f:b6:28:78:d2:29:dd:80:f0:dc:98:32:7c:b7: 0d:20:a6:03:36:57:32:54:ae:fb:73:27:86:34:12:c3:4f:3a: d9:24:a1:24:51:ee:37:8e:05:8b:68:4c:2f:8a:7d:c8:7c:d2: 1b:ca:b3:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2CZSQzXQe9qXZ/8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQxNTAxMDAyNFoXDTI2MDcxNDAxMDAyNFowLzEtMCsGA1UEAxMk ZTIwYjJiMGQtYmYzYy00Y2IxLThkM2EtY2MzYjg0Mjg4YWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpRprwziY893KItGUoPjBsbMAEy5dpqDTPsk FkgLJZOLq/xi2KBmS7gzDmaJRMTctXRK0xVoydPWmJ6IITzpaNj8X3ijRyxIIT++ hKrOyes+f+lR02EqKhYMhDGuy2/t5GH1MQh4fHh/fSfUKAU8Izk7ZZcNbQ2oRjv7 uZUbRDzTat0GQ1p9+ovKFP7Uv/W5kOn6hp1vm1gjfhJf3eZ3JK3cPJGFYSVjR75Z 2y/xXVZhEWy/QzWMdkKQUwyvt3RK4UJU+hG3FCN/oKT4uzeay56ERSioUSrA4W/C uz4aZUahqZrD8FH3LyGRSQ3n6JqpTVr/lVTHLOaqDFd7Ua/ywQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyjLzqAWkmWVr2ykqHUSvvhv85pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTM0YTY2NTEtMGIzYS0z OTI1LTkwY2QtMmVkNzUzZTFkZjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0yGcyVz6mWJc3NZDW5VGnpbUiNR6+iIK2ABswnSKYl7Vi7JdEkY3dz NpBhW555wq1dGBWhqtzMX1wEqO2wens5ObHJ5PmEZ0WLsOAdhaiPDF0tXR04xZEc ZwA+J1VrcdDJWSsN3UuvrhRpZzd0fgt7+9sz8dSBOzql8HCyxKJpPfcwPeTnGvmA fHBvPqJVfBVrq3cgdgurjYckvcfnJNaQN2omqqZxKSC4H/Y/lzY7pymx4LlDEwnb N6ddI/jG2NWZaywyYyTXnbkPtih40indgPDcmDJ8tw0gpgM2VzJUrvtzJ4Y0EsNP OtkkoSRR7jeOBYtoTC+Kfch80hvKs1A= -----END CERTIFICATE-----Generated at Fri Apr 17 19:11:11 2026 by rpki-client