$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3567bc3f-98c6-34f6-9200-80fe14e390e0.roa File: 3567bc3f-98c6-34f6-9200-80fe14e390e0.roa (raw, json) Hash identifier: Hc58NG63QIcgIQ15G5DlZB4lmyMw2iTpkOyhn8ZvwYg= Subject key identifier: B2:76:2A:5C:5F:8B:ED:08:AF:82:03:C9:AB:91:11:23:2D:FE:DE:7A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059B364FDE95CAECAAC28AE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3567bc3f-98c6-34f6-9200-80fe14e390e0.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.29.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:36:4f:de:95:ca:ec:aa:c2:8a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=aa90a6f1-a85e-44f4-a0a8-6d39793a76e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:18:d3:20:ae:3b:71:85:78:db:f8:db:52:11: e0:af:31:88:27:e6:6a:9b:53:11:38:db:67:c9:c7: 96:3c:8a:7f:97:8e:dc:da:7c:50:ce:3e:51:71:4c: ec:b8:59:1c:fe:05:49:23:0a:a9:cd:35:55:fa:43: 77:37:a5:27:15:a8:46:27:31:4b:de:4a:11:ab:51: b8:b7:a6:a4:01:17:0e:22:84:ea:87:ae:e3:32:e2: 48:e4:ec:09:55:37:51:34:e5:1e:33:7c:ce:45:91: 65:22:92:58:c6:aa:7a:fe:57:7a:c5:e1:79:69:76: d6:e1:55:89:2f:db:e1:f6:c7:40:a3:ad:41:57:19: a4:df:ca:93:43:7f:f1:6b:ff:e1:29:8d:4c:cd:a4: a4:4d:ef:5b:41:46:0d:60:dd:ba:b0:4c:ad:b6:a5: 71:43:0d:c6:10:d3:8f:e3:02:75:2c:7d:76:44:c7: 0e:72:16:8b:ce:8a:c0:63:19:2d:ca:fc:97:80:f7: ec:1f:c8:f2:29:59:a3:ba:9c:74:5b:54:fe:06:96: 03:0c:d1:df:45:3d:75:ed:4d:eb:ec:3d:40:72:2f: b4:aa:e0:4c:5c:45:c0:a8:9a:98:a2:60:69:3f:c8: 03:5b:4c:99:5a:f5:33:08:ee:9d:ff:19:94:c6:05: 69:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:76:2A:5C:5F:8B:ED:08:AF:82:03:C9:AB:91:11:23:2D:FE:DE:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3567bc3f-98c6-34f6-9200-80fe14e390e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:82:ad:b5:c0:ec:04:e4:dc:43:71:4e:52:fe:b7:73:73:04: 68:d7:a2:73:97:59:a5:82:d0:d0:93:ea:81:fe:ef:c7:8a:15: 9b:d3:5a:ba:91:d7:84:b0:69:3f:f4:56:72:80:ac:9d:5c:6b: a3:e2:74:f4:72:a5:d5:7f:e2:a2:2e:df:95:0e:c9:62:2f:ba: cf:da:5a:8e:e9:3e:02:d6:6e:db:0a:5a:16:e7:f6:80:86:44: 5e:e7:e5:53:3a:91:f2:87:31:8d:88:2d:ed:63:84:3c:e7:90: db:28:0c:68:98:00:4c:f8:ca:88:7e:f7:ef:80:3c:65:fc:eb: 02:ba:81:ed:5e:f7:76:f7:c0:2d:4f:5d:d3:4a:55:c0:76:39: 3c:dc:38:62:de:04:5b:88:38:78:a5:7c:b5:57:fa:28:21:88: db:e7:de:f1:75:da:1e:d1:2e:98:58:23:1c:2b:fd:86:65:e3: b0:46:62:50:93:66:07:a1:37:a9:6c:cc:ce:77:52:91:4f:28: 73:7a:f0:09:1a:19:84:75:36:b0:e4:3b:cb:61:26:9e:2e:a5: 25:d2:a0:14:53:d5:15:cb:29:df:0d:e3:87:38:d9:a3:6e:5e: 7a:79:76:4e:09:58:37:49:df:e8:a1:1f:2e:ac:ad:6d:66:93: 89:38:cb:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FmzZP3pXK7KrCiuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YWE5MGE2ZjEtYTg1ZS00NGY0LWEwYTgtNmQzOTc5M2E3NmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhjTIK47cYV42/jbUhHgrzGIJ+Zqm1MRONtn yceWPIp/l47c2nxQzj5RcUzsuFkc/gVJIwqpzTVV+kN3N6UnFahGJzFL3koRq1G4 t6akARcOIoTqh67jMuJI5OwJVTdRNOUeM3zORZFlIpJYxqp6/ld6xeF5aXbW4VWJ L9vh9sdAo61BVxmk38qTQ3/xa//hKY1MzaSkTe9bQUYNYN26sEyttqVxQw3GENOP 4wJ1LH12RMcOchaLzorAYxktyvyXgPfsH8jyKVmjupx0W1T+BpYDDNHfRT117U3r 7D1Aci+0quBMXEXAqJqYomBpP8gDW0yZWvUzCO6d/xmUxgVppwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ2Klxfi+0Ir4IDyauRESMt/t56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzU2N2JjM2YtOThjNi0z NGY2LTkyMDAtODBmZTE0ZTM5MGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmCrbXA7ATk3ENxTlL+t3NzBGjXonOXWaWC0NCT6oH+78eKFZvTWrqR 14SwaT/0VnKArJ1ca6PidPRypdV/4qIu35UOyWIvus/aWo7pPgLWbtsKWhbn9oCG RF7n5VM6kfKHMY2ILe1jhDznkNsoDGiYAEz4yoh+9++APGX86wK6ge1e93b3wC1P XdNKVcB2OTzcOGLeBFuIOHilfLVX+ighiNvn3vF12h7RLphYIxwr/YZl47BGYlCT ZgehN6lszM53UpFPKHN68AkaGYR1NrDkO8thJp4upSXSoBRT1RXLKd8N44c42aNu Xnp5dk4JWDdJ3+ihHy6srW1mk4k4y5M= -----END CERTIFICATE-----Generated at Sat Jun 13 18:54:17 2026 by rpki-client