$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fa1a1f9-5ccb-3da2-9088-4ac98208643e.roa File: 1fa1a1f9-5ccb-3da2-9088-4ac98208643e.roa (raw, json) Hash identifier: aHTrD80ZLH/nplFpEe4zaQdwdNptst0BMdXcbwhuiPk= Subject key identifier: F6:9F:20:F2:5C:32:FC:45:8A:A5:E7:8F:F2:48:5C:E7:EE:89:B2:AE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E0435F651F91437D49D244688 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fa1a1f9-5ccb-3da2-9088-4ac98208643e.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 19905 IP address blocks: 173.25.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:f6:51:f9:14:37:d4:9d:24:46:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=405daa59-3158-4ea7-964b-97489670e20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ac:09:d0:9a:38:f1:96:3f:a3:a8:a2:ea:0b: 6f:fb:fc:6e:91:21:75:36:57:8d:21:5e:58:73:94: 9b:6e:c6:4d:91:d6:06:cf:57:e5:97:5c:3e:cb:01: ae:4e:db:b7:8c:2b:30:83:87:4f:d2:95:a6:57:8a: 38:99:ae:24:84:c4:ad:f0:4e:d4:c6:7e:28:38:7f: 8a:28:73:90:40:7b:31:7e:40:42:32:66:86:3a:a4: e0:16:38:14:fa:82:e8:a4:f1:ea:1e:90:c4:6d:2e: 40:0e:b7:fe:90:51:37:6f:af:a3:d7:e6:15:b3:33: 0d:42:1b:82:fd:a3:63:cd:29:e2:40:6f:51:f0:95: af:4b:a9:d2:c2:e8:fd:52:8f:25:94:dd:83:90:3e: 4e:1d:7b:5a:03:e1:16:0b:09:c7:4e:4c:1a:d4:05: ff:be:4c:f0:d0:38:20:64:18:04:9c:54:11:3a:33: bf:11:3f:24:01:4f:60:1d:1d:92:22:7e:65:8d:c9: c6:0a:91:7d:22:e7:e6:8e:22:71:29:77:79:ca:cf: 92:31:6f:64:d0:33:94:32:00:ba:6a:28:83:e9:bc: 42:5d:6b:29:10:d6:e5:1c:29:51:c8:65:1e:78:a8: 45:29:53:fc:71:a3:99:53:90:e3:90:33:38:07:6e: 65:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9F:20:F2:5C:32:FC:45:8A:A5:E7:8F:F2:48:5C:E7:EE:89:B2:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fa1a1f9-5ccb-3da2-9088-4ac98208643e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:70:a1:fe:ad:48:89:31:f4:8e:e1:bf:18:ea:f9:43:1d:de: da:f2:fb:8c:a6:57:70:28:f5:c6:e4:2b:fb:57:b8:38:fb:f7: 35:61:a4:0e:a6:a3:ee:37:ee:01:25:30:fb:22:ee:86:ca:34: ae:2a:23:b1:34:6e:4d:56:84:79:cc:05:1e:01:ed:3c:df:68: 8c:35:96:db:38:90:8b:13:9f:9f:ea:65:ff:c0:2b:1f:0b:f0: b1:e6:f8:7f:38:23:8e:46:b6:5e:3e:7a:ef:20:58:2c:9f:2c: 5c:92:33:ca:96:28:99:21:8e:98:17:dc:da:07:4a:40:7c:22: 6b:2c:4f:d1:e2:ea:fd:3a:a8:a9:d5:ef:62:b2:d8:6e:17:da: 73:dd:ca:b4:5e:77:05:8a:6e:b6:af:46:d6:c0:04:c2:f8:fa: 15:85:e8:6b:97:36:2a:76:c8:03:a9:fb:de:e9:1d:65:df:e6: 4f:ba:17:34:37:e8:03:f5:06:53:75:36:b5:fb:46:e8:db:be: f6:d6:a7:2f:de:b0:da:f4:83:ef:c0:56:4c:98:68:12:d7:73: 2d:0f:4e:e3:82:2a:93:3a:26:7b:f6:25:46:97:98:1a:32:ac: 41:dd:9c:4a:e9:75:dd:33:4a:cc:68:2a:a8:e9:cc:8b:08:ad: 58:80:cc:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENfZR+RQ31J0kRogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk NDA1ZGFhNTktMzE1OC00ZWE3LTk2NGItOTc0ODk2NzBlMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqwJ0Jo48ZY/o6ii6gtv+/xukSF1NleNIV5Y c5SbbsZNkdYGz1fll1w+ywGuTtu3jCswg4dP0pWmV4o4ma4khMSt8E7Uxn4oOH+K KHOQQHsxfkBCMmaGOqTgFjgU+oLopPHqHpDEbS5ADrf+kFE3b6+j1+YVszMNQhuC /aNjzSniQG9R8JWvS6nSwuj9Uo8llN2DkD5OHXtaA+EWCwnHTkwa1AX/vkzw0Dgg ZBgEnFQROjO/ET8kAU9gHR2SIn5ljcnGCpF9IufmjiJxKXd5ys+SMW9k0DOUMgC6 aiiD6bxCXWspENblHClRyGUeeKhFKVP8caOZU5DjkDM4B25lRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPafIPJcMvxFiqXnj/JIXOfuibKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWZhMWExZjktNWNjYi0z ZGEyLTkwODgtNGFjOTgyMDg2NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRnuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZwof6tSIkx9I7hvxjq+UMd3try+4ymV3Ao9cbkK/tXuDj79zVhpA6m o+437gElMPsi7obKNK4qI7E0bk1WhHnMBR4B7TzfaIw1lts4kIsTn5/qZf/AKx8L 8LHm+H84I45Gtl4+eu8gWCyfLFySM8qWKJkhjpgX3NoHSkB8ImssT9Hi6v06qKnV 72Ky2G4X2nPdyrRedwWKbravRtbABML4+hWF6GuXNip2yAOp+97pHWXf5k+6FzQ3 6AP1BlN1NrX7RujbvvbWpy/esNr0g+/AVkyYaBLXcy0PTuOCKpM6Jnv2JUaXmBoy rEHdnErpdd0zSsxoKqjpzIsIrViAzL0= -----END CERTIFICATE-----Generated at Sat Jun 13 16:06:39 2026 by rpki-client