$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cd172de-b031-3b7a-8374-eced4e55a452.roa File: 2cd172de-b031-3b7a-8374-eced4e55a452.roa (raw, json) Hash identifier: 9vNbXMPe+kAEX0OSaIcWeRQu4WUaZzfTa4CkZhhScfE= Subject key identifier: CF:88:DD:5F:ED:AB:80:70:AC:AF:2F:70:C6:18:4B:AE:6E:AF:E9:F9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059B470852E5190ABDA98280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cd172de-b031-3b7a-8374-eced4e55a452.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.20.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:47:08:52:e5:19:0a:bd:a9:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=07bd8104-6c44-45cd-93ec-b12cf09a5a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:95:96:cf:ce:8a:b4:74:6a:c2:79:da:28:3f: 07:46:58:95:44:ed:f4:78:2f:0e:bb:18:6e:3b:6b: 19:99:3a:40:51:5a:3d:bf:94:4c:3f:fd:f1:d0:7b: 12:29:49:5e:cc:b7:4c:8e:36:35:73:3e:5a:b9:ea: 27:f3:a3:d2:6f:98:12:89:e1:bf:28:5f:d5:69:de: 48:a8:5f:7b:1d:35:70:ac:a3:82:31:8f:2b:18:96: b6:4e:68:2c:03:60:45:83:06:19:23:bf:7c:a3:c7: 44:b2:0e:75:bf:ce:59:d5:ad:45:51:08:55:cb:96: f8:94:ed:e1:7c:8c:ca:67:53:96:c1:68:86:f2:c2: 0f:7c:c0:56:2e:23:ee:0c:60:b2:9d:87:bb:42:ce: 27:6d:4b:36:94:a9:bc:01:ae:43:c0:93:7a:1b:5e: 80:54:a2:bb:2b:b3:71:26:7d:08:c5:8b:86:6e:c0: c3:37:ef:f1:99:57:44:6f:c5:2d:bf:c0:57:95:5f: 7f:d9:25:fb:7d:06:17:31:21:4a:2b:31:9e:7b:46: 9e:57:bf:b4:dd:c9:9d:1f:ad:1d:89:1a:ea:63:db: c0:f5:80:87:7a:d9:56:eb:b7:26:59:f7:1d:5d:bf: 1f:8f:7f:34:dd:64:15:80:56:e0:f6:22:25:e3:68: e1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:88:DD:5F:ED:AB:80:70:AC:AF:2F:70:C6:18:4B:AE:6E:AF:E9:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cd172de-b031-3b7a-8374-eced4e55a452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:71:26:f4:93:64:19:d1:85:3f:bd:89:dd:16:95:9c:e4:eb: e3:a5:ad:ed:e3:52:8b:91:ea:fb:85:02:f5:49:31:5a:0c:22: bc:c5:fe:09:36:1d:57:d9:54:e3:f9:a8:0b:50:d3:69:8d:27: af:ca:a8:1e:21:7d:f3:26:91:2d:59:c9:70:91:80:3a:bc:32: ff:92:2e:51:ce:41:1f:ac:c8:55:0b:f7:cb:01:1f:b1:43:46: 36:75:93:a1:de:23:4b:79:39:cc:44:2c:55:22:66:4a:d6:f9: 88:56:d6:51:8d:a8:bf:2c:9d:7f:79:fe:75:f5:85:5c:9b:89: 5f:ac:af:dc:43:f5:7b:43:14:60:1d:34:a7:e4:61:6e:80:41: bc:63:a9:f3:fc:46:31:3f:4c:45:e7:6d:42:42:ad:79:6f:63: 11:0c:69:cc:fb:08:6c:fe:e6:a7:fe:97:3d:f4:04:eb:9f:f0: 32:b7:33:52:79:31:ec:4b:c7:78:bb:79:48:d2:ef:a4:65:7f: 1e:ca:1d:e5:4b:75:a0:29:df:5f:ee:3a:22:39:7c:f3:83:e5: 01:29:52:06:62:fa:ec:fd:0f:81:f9:35:e4:df:8d:fa:0e:14: d1:1d:c7:f8:3b:b7:fc:61:c4:02:29:b1:a9:68:af:e9:c9:4b: e3:3f:77:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm0cIUuUZCr2pgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MDdiZDgxMDQtNmM0NC00NWNkLTkzZWMtYjEyY2YwOWE1YTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JWWz86KtHRqwnnaKD8HRliVRO30eC8Ouxhu O2sZmTpAUVo9v5RMP/3x0HsSKUlezLdMjjY1cz5aueon86PSb5gSieG/KF/Vad5I qF97HTVwrKOCMY8rGJa2TmgsA2BFgwYZI798o8dEsg51v85Z1a1FUQhVy5b4lO3h fIzKZ1OWwWiG8sIPfMBWLiPuDGCynYe7Qs4nbUs2lKm8Aa5DwJN6G16AVKK7K7Nx Jn0IxYuGbsDDN+/xmVdEb8Utv8BXlV9/2SX7fQYXMSFKKzGee0aeV7+03cmdH60d iRrqY9vA9YCHetlW67cmWfcdXb8fj3803WQVgFbg9iIl42jhOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+I3V/tq4BwrK8vcMYYS65ur+n5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmNkMTcyZGUtYjAzMS0z YjdhLTgzNzQtZWNlZDRlNTVhNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRROMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9xJvSTZBnRhT+9id0WlZzk6+Olre3jUouR6vuFAvVJMVoMIrzF/gk2 HVfZVOP5qAtQ02mNJ6/KqB4hffMmkS1ZyXCRgDq8Mv+SLlHOQR+syFUL98sBH7FD RjZ1k6HeI0t5OcxELFUiZkrW+YhW1lGNqL8snX95/nX1hVybiV+sr9xD9XtDFGAd NKfkYW6AQbxjqfP8RjE/TEXnbUJCrXlvYxEMacz7CGz+5qf+lz30BOuf8DK3M1J5 MexLx3i7eUjS76Rlfx7KHeVLdaAp31/uOiI5fPOD5QEpUgZi+uz9D4H5NeTfjfoO FNEdx/g7t/xhxAIpsalor+nJS+M/d70= -----END CERTIFICATE-----Generated at Sat Jun 13 17:09:50 2026 by rpki-client