$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/18a916b7-a56e-3ea5-a788-1f0d0500d61a.roa File: 18a916b7-a56e-3ea5-a788-1f0d0500d61a.roa (raw, json) Hash identifier: GQh6914z8NcZTr06tpQyjrgUA+Tyaww8e1vLSqDh99Q= Subject key identifier: D6:FF:D3:D3:8B:B1:93:7B:35:67:F5:0B:73:3D:48:B7:40:42:46:1C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E086659B3EF5521CE3FB16178 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/18a916b7-a56e-3ea5-a788-1f0d0500d61a.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.20.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:59:b3:ef:55:21:ce:3f:b1:61:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=c0d58978-af56-4620-a9c1-8dd337683a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b1:6a:c8:25:e1:3a:b6:07:eb:35:6b:2a:e5: b1:86:16:63:14:38:a0:68:9d:2c:7c:2d:68:d0:44: bb:b0:30:1f:54:da:48:05:ae:77:d9:1f:79:8b:ab: 7e:02:d8:d4:56:32:23:fa:1f:ab:7d:4c:44:9c:b8: 2b:3d:76:bc:c1:68:74:5c:8c:27:d0:1c:12:c1:a8: af:83:d3:f2:57:1b:85:24:b6:b2:71:10:bb:ff:7d: 3d:84:b0:fa:69:6b:64:e2:bf:b7:4f:f7:81:c0:61: 17:b2:fb:46:c1:19:46:c9:a1:5b:dd:83:74:ed:c7: 12:07:66:22:ec:d8:86:1f:59:16:9b:83:9e:7a:b5: 69:07:df:1b:86:21:eb:ca:39:68:c0:54:67:b1:35: fb:87:66:17:d3:19:3e:9a:85:c5:6c:2a:6d:02:47: a8:53:1c:d8:2c:8d:13:aa:4b:af:44:9c:94:df:0e: 19:02:9f:52:2e:ad:d7:dd:16:07:97:a0:2d:3b:43: 61:41:3e:27:9c:e2:79:0f:a6:c7:59:65:93:a1:66: d0:9a:2f:ae:98:82:15:e4:2d:3b:7f:30:16:3f:0f: 9e:90:ae:c5:e4:2a:b8:eb:99:8c:f2:e5:43:e2:ac: 1a:5b:f5:f6:28:18:8a:9a:87:9e:f1:48:66:ff:20: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FF:D3:D3:8B:B1:93:7B:35:67:F5:0B:73:3D:48:B7:40:42:46:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/18a916b7-a56e-3ea5-a788-1f0d0500d61a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d8:f7:b1:17:96:e3:1a:77:db:95:5b:d9:1a:c4:10:24:93: 86:a8:10:f3:b0:e3:11:7c:fb:69:62:82:a3:15:c0:35:27:94: 22:7f:cf:28:5e:c4:2d:c3:c9:28:63:36:e8:42:5e:c6:e0:e3: 4e:b6:7f:ac:18:c1:44:50:98:dc:e7:f9:0b:57:b0:1f:b3:3b: 9d:89:d3:eb:53:f0:8f:48:dd:87:2a:84:28:5a:ea:62:55:ec: cb:85:17:da:d8:ec:95:79:95:ef:95:99:d3:e0:38:f4:c6:8e: 68:80:8b:09:9c:11:87:1e:7a:3e:f6:6d:0f:83:d8:d3:2e:8a: 4c:17:ea:d4:f2:88:0b:f8:99:f7:21:9f:20:28:68:07:9a:ba: be:e4:91:a8:42:43:92:d2:3f:3a:3a:51:eb:b6:1e:51:81:ca: 71:73:87:d0:d9:2a:3a:2a:a3:bf:8d:37:05:03:8a:82:a1:b7: a0:9c:34:81:b1:f3:24:3a:40:95:d4:aa:b0:5e:11:98:93:ed: ee:23:85:44:08:f4:64:70:b7:50:bd:c2:d9:c6:f0:01:89:47: 75:d7:7e:61:b1:05:9b:62:d6:e7:ed:51:cd:86:a3:54:ea:35: be:de:6b:b5:4b:1c:5d:49:e8:40:a8:a4:aa:30:fd:85:e9:6e: f5:e0:6a:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZlmz71Uhzj+xYXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk YzBkNTg5NzgtYWY1Ni00NjIwLWE5YzEtOGRkMzM3NjgzYTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bFqyCXhOrYH6zVrKuWxhhZjFDigaJ0sfC1o 0ES7sDAfVNpIBa532R95i6t+AtjUVjIj+h+rfUxEnLgrPXa8wWh0XIwn0BwSwaiv g9PyVxuFJLaycRC7/309hLD6aWtk4r+3T/eBwGEXsvtGwRlGyaFb3YN07ccSB2Yi 7NiGH1kWm4OeerVpB98bhiHryjlowFRnsTX7h2YX0xk+moXFbCptAkeoUxzYLI0T qkuvRJyU3w4ZAp9SLq3X3RYHl6AtO0NhQT4nnOJ5D6bHWWWToWbQmi+umIIV5C07 fzAWPw+ekK7F5Cq465mM8uVD4qwaW/X2KBiKmoee8Uhm/yADZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNb/09OLsZN7NWf1C3M9SLdAQkYcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMThhOTE2YjctYTU2ZS0z ZWE1LWE3ODgtMWYwZDA1MDBkNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzY97EXluMad9uVW9kaxBAkk4aoEPOw4xF8+2ligqMVwDUnlCJ/zyhe xC3DyShjNuhCXsbg4062f6wYwURQmNzn+QtXsB+zO52J0+tT8I9I3YcqhCha6mJV 7MuFF9rY7JV5le+VmdPgOPTGjmiAiwmcEYceej72bQ+D2NMuikwX6tTyiAv4mfch nyAoaAeaur7kkahCQ5LSPzo6Ueu2HlGBynFzh9DZKjoqo7+NNwUDioKht6CcNIGx 8yQ6QJXUqrBeEZiT7e4jhUQI9GRwt1C9wtnG8AGJR3XXfmGxBZti1uftUc2Go1Tq Nb7ea7VLHF1J6ECopKow/YXpbvXgajo= -----END CERTIFICATE-----Generated at Sat Jun 13 17:33:46 2026 by rpki-client