$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1af58f65-539a-35e4-8e11-237912be598c.roa File: 1af58f65-539a-35e4-8e11-237912be598c.roa (raw, json) Hash identifier: Mi3j9/hhgFj7oiyy4rRsUZnmfcCkAJg7ZPbZpbaomew= Subject key identifier: 36:54:17:03:F0:AE:0A:39:84:FB:E1:D4:0E:1B:3E:56:3D:09:03:07 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059B4C2016E4060C1CE86E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1af58f65-539a-35e4-8e11-237912be598c.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.18.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:4c:20:16:e4:06:0c:1c:e8:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=07aafb32-4696-4965-a522-eb831316031d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:68:da:97:60:03:77:a9:17:c7:f0:f9:39:0f: 21:e3:70:35:ca:66:d6:89:95:2d:3f:be:62:87:2e: 6d:4f:5b:ac:2f:42:67:7b:fb:93:10:df:77:57:08: 4b:52:c5:94:ef:46:fc:37:79:19:b5:7c:72:3d:d0: 3f:d4:2d:a9:45:81:00:76:7e:8d:29:55:45:78:e2: 36:43:d8:1a:93:b5:c1:ec:e6:af:a8:ed:91:03:d5: 2f:88:60:44:a8:45:6c:c6:c8:e0:72:8c:66:9b:00: 7e:d8:22:be:dc:7d:3d:1c:26:2d:2f:bd:df:af:b2: c5:e1:be:0c:36:c6:76:73:10:85:83:4b:4e:da:d9: 8f:9b:0b:96:ef:41:b2:44:0e:ce:47:bd:f5:65:ab: 69:04:77:e6:c1:0d:76:08:2b:81:cf:c4:f3:c9:3b: 3a:92:7b:57:c0:a8:af:7a:3b:d3:98:a2:67:a4:93: e3:22:29:e3:a2:f7:03:de:4f:c4:8b:82:a2:cd:ae: 86:aa:15:3c:16:27:07:5d:a1:4a:96:d0:10:b8:31: e3:1e:f6:b1:73:68:23:01:f1:4a:9e:80:aa:5f:14: 78:4e:45:76:39:8e:f9:67:85:f2:b0:12:3e:98:ca: bf:14:dc:ac:8f:92:58:a0:d2:24:19:c9:2a:b5:a4: 8c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:54:17:03:F0:AE:0A:39:84:FB:E1:D4:0E:1B:3E:56:3D:09:03:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1af58f65-539a-35e4-8e11-237912be598c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:97:f9:c8:79:c4:d1:e4:bc:08:21:c0:e9:64:01:e2:d9:c4: 1a:08:06:39:d5:f6:69:95:b0:0a:24:7a:a9:67:92:ed:67:e0: bb:97:91:12:de:ec:0a:01:a5:c2:25:0e:db:44:f8:54:ec:df: 2b:54:db:1e:01:c2:eb:27:f9:48:d2:7c:d5:ce:01:73:25:66: fd:8f:9a:12:08:b3:e2:97:08:56:68:0a:b2:a9:03:b8:d1:c2: 2e:49:fe:b9:f2:bd:3f:84:bb:70:7c:12:3b:d8:20:ae:7d:eb: e9:4c:53:95:b7:dc:f1:40:f3:95:6e:b4:d0:4d:cc:6f:f7:fe: 9e:90:81:ce:07:3a:9b:31:68:15:be:ef:62:c7:6b:c6:fb:a5: 33:c7:f7:ee:bb:b6:45:bb:eb:5d:2a:1f:8a:05:1a:eb:62:77: ad:ce:be:01:7e:b1:c4:f6:19:2f:f0:04:65:23:24:7e:c3:85: e0:be:17:2c:0b:71:69:d7:02:eb:bf:29:78:2d:14:12:74:e7: 0a:88:35:5a:2e:a6:d3:b3:85:53:c9:ab:5f:46:92:87:11:5b: 55:97:e8:56:45:1a:c1:a3:f2:e4:d0:2b:27:f9:a9:c2:7a:99: 18:80:b5:75:44:63:95:90:1a:68:da:25:c4:ef:4c:a6:8a:be: 55:54:d3:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm0wgFuQGDBzoboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MDdhYWZiMzItNDY5Ni00OTY1LWE1MjItZWI4MzEzMTYwMzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGjal2ADd6kXx/D5OQ8h43A1ymbWiZUtP75i hy5tT1usL0Jne/uTEN93VwhLUsWU70b8N3kZtXxyPdA/1C2pRYEAdn6NKVVFeOI2 Q9gak7XB7OavqO2RA9UviGBEqEVsxsjgcoxmmwB+2CK+3H09HCYtL73fr7LF4b4M NsZ2cxCFg0tO2tmPmwuW70GyRA7OR731ZatpBHfmwQ12CCuBz8TzyTs6kntXwKiv ejvTmKJnpJPjIinjovcD3k/Ei4Kiza6GqhU8FicHXaFKltAQuDHjHvaxc2gjAfFK noCqXxR4TkV2OY75Z4XysBI+mMq/FNysj5JYoNIkGckqtaSMnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZUFwPwrgo5hPvh1A4bPlY9CQMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWFmNThmNjUtNTM5YS0z NWU0LThlMTEtMjM3OTEyYmU1OThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSX+ch5xNHkvAghwOlkAeLZxBoIBjnV9mmVsAokeqlnku1n4LuXkRLe 7AoBpcIlDttE+FTs3ytU2x4Bwusn+UjSfNXOAXMlZv2PmhIIs+KXCFZoCrKpA7jR wi5J/rnyvT+Eu3B8EjvYIK596+lMU5W33PFA85VutNBNzG/3/p6Qgc4HOpsxaBW+ 72LHa8b7pTPH9+67tkW7610qH4oFGutid63OvgF+scT2GS/wBGUjJH7DheC+FywL cWnXAuu/KXgtFBJ05wqINVouptOzhVPJq19GkocRW1WX6FZFGsGj8uTQKyf5qcJ6 mRiAtXVEY5WQGmjaJcTvTKaKvlVU0z8= -----END CERTIFICATE-----Generated at Sat Jun 13 21:16:45 2026 by rpki-client