$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b165cc4-d69c-3498-92c2-f24a945a981b.roa File: 1b165cc4-d69c-3498-92c2-f24a945a981b.roa (raw, json) Hash identifier: YsYLhWw5Sg+W/DTdWoHC2Fd+Uc1ojsUV1H8vHHlSzsU= Subject key identifier: 06:90:75:FF:B1:48:DE:73:56:49:36:99:52:04:D9:A5:E9:A2:CB:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D7F9A81B71E4D7289F535A480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b165cc4-d69c-3498-92c2-f24a945a981b.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 173.21.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:81:b7:1e:4d:72:89:f5:35:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=589dcfcc-f6b0-4380-83c3-b285dc0086d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:29:f4:07:01:17:16:0a:82:f7:b0:84:92: 63:1d:50:4a:e7:1d:cc:8c:e7:1a:6f:50:c1:a8:82: 87:b8:e4:ef:69:e9:1a:8d:e4:17:8a:28:52:3e:96: 58:81:91:de:ef:4c:95:88:e3:3c:04:ff:1b:3b:f3: e5:a0:f4:07:23:16:1f:50:29:b2:88:d8:c4:e7:92: 02:3d:6d:0c:a7:97:bf:b3:75:b8:f8:ef:d4:74:f7: 7d:0b:4f:9b:4c:83:0c:45:6e:1c:34:ea:87:bf:94: e5:48:c3:d2:6c:a7:81:9e:7e:22:92:07:5c:5f:4a: 6b:3c:03:12:b9:3f:6e:69:93:2b:22:a5:d4:51:ba: 8a:6f:17:d7:63:e1:cb:b7:67:fa:12:61:f4:e7:fa: ab:16:9e:60:9e:66:8e:6b:6c:cd:49:c4:fe:4a:c8: b2:a4:f9:bf:8f:41:d0:91:82:4c:a0:86:00:60:f4: 30:ee:10:56:4c:2e:3d:ca:b9:35:61:e8:99:99:ec: 6f:0a:37:38:9c:ff:87:b8:69:d7:40:63:27:1a:c7: aa:04:44:fa:4e:59:52:7a:0c:b7:d9:23:31:6c:de: d2:cc:a9:15:f3:11:cd:58:1a:90:95:45:b9:19:c1: aa:14:49:28:4d:45:16:3c:59:87:42:58:ca:1d:ba: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:90:75:FF:B1:48:DE:73:56:49:36:99:52:04:D9:A5:E9:A2:CB:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b165cc4-d69c-3498-92c2-f24a945a981b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:49:65:9a:4c:f0:79:87:e4:01:41:13:0e:05:6c:a3:b6:46: 43:d3:17:ee:8c:34:18:08:3c:18:32:91:2b:cb:62:c7:c0:2a: 16:a3:18:e6:e5:93:be:9e:94:52:35:2b:cf:b3:85:18:61:f1: 26:74:88:5c:9f:a8:de:17:1b:a5:5f:45:62:e6:e9:91:85:46: 43:b1:14:96:4a:1d:f1:98:ca:3c:9f:91:db:64:85:93:1d:7c: e1:b4:f6:51:be:26:f7:66:55:47:e6:06:e7:90:5e:80:c5:2a: a9:e0:f0:c9:ef:77:c9:20:c1:e1:ff:3d:2d:92:17:ec:f2:c6: 54:ba:b8:fa:6f:8d:b2:3c:cb:5b:af:0b:68:22:79:bd:6d:81: 51:10:99:e0:d1:a2:4d:c1:c8:f6:51:24:1f:57:ca:c3:9f:69: 77:87:24:cd:24:36:0b:3d:60:b2:b1:61:67:ac:e6:59:38:e7: ab:06:05:ac:3c:cb:fb:18:f4:6b:48:e9:d6:7d:e2:65:a8:f8: c1:4b:9e:2c:48:e0:79:7e:ed:4c:f4:d5:d6:4a:c7:0a:a7:01: f0:08:b8:cb:de:57:83:25:d2:c2:f1:14:a3:43:ca:fb:81:93: f0:fb:87:a4:06:83:75:7d:9f:f1:ea:01:ef:bd:56:2e:bc:e1: 60:d1:18:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moG3Hk1yifU1pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk NTg5ZGNmY2MtZjZiMC00MzgwLTgzYzMtYjI4NWRjMDA4NmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLEp9AcBFxYKgvewhJJjHVBK5x3MjOcab1DB qIKHuOTvaekajeQXiihSPpZYgZHe70yViOM8BP8bO/PloPQHIxYfUCmyiNjE55IC PW0Mp5e/s3W4+O/UdPd9C0+bTIMMRW4cNOqHv5TlSMPSbKeBnn4ikgdcX0prPAMS uT9uaZMrIqXUUbqKbxfXY+HLt2f6EmH05/qrFp5gnmaOa2zNScT+SsiypPm/j0HQ kYJMoIYAYPQw7hBWTC49yrk1YeiZmexvCjc4nP+HuGnXQGMnGseqBET6TllSegy3 2SMxbN7SzKkV8xHNWBqQlUW5GcGqFEkoTUUWPFmHQljKHbrr/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaQdf+xSN5zVkk2mVIE2aXpostyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWIxNjVjYzQtZDY5Yy0z NDk4LTkyYzItZjI0YTk0NWE5ODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERJZZpM8HmH5AFBEw4FbKO2RkPTF+6MNBgIPBgykSvLYsfAKhajGObl k76elFI1K8+zhRhh8SZ0iFyfqN4XG6VfRWLm6ZGFRkOxFJZKHfGYyjyfkdtkhZMd fOG09lG+JvdmVUfmBueQXoDFKqng8Mnvd8kgweH/PS2SF+zyxlS6uPpvjbI8y1uv C2gieb1tgVEQmeDRok3ByPZRJB9XysOfaXeHJM0kNgs9YLKxYWes5lk456sGBaw8 y/sY9GtI6dZ94mWo+MFLnixI4Hl+7Uz01dZKxwqnAfAIuMveV4Ml0sLxFKNDyvuB k/D7h6QGg3V9n/HqAe+9Vi684WDRGFo= -----END CERTIFICATE-----Generated at Fri Apr 17 17:57:57 2026 by rpki-client