$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c0fffb7-b37f-3ad7-b6b2-a6d6354cc5c4.roa File: 3c0fffb7-b37f-3ad7-b6b2-a6d6354cc5c4.roa (raw, json) Hash identifier: p7cv+eTvAjYHxxwuyPHAY9sCOxJacbkIuJY7+ZLZVSs= Subject key identifier: 5A:3E:BD:CD:63:2E:8A:60:71:C9:57:F8:C5:B6:5D:19:10:90:1E:24 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DF7A5CDAEDB132C4DA4FD6040 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c0fffb7-b37f-3ad7-b6b2-a6d6354cc5c4.roa Signing time: Wed 27 May 2026 01:00:14 +0000 ROA not before: Wed 27 May 2026 01:00:14 +0000 ROA not after: Tue 25 Aug 2026 01:00:14 +0000 asID: 30036 IP address blocks: 173.20.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f7:a5:cd:ae:db:13:2c:4d:a4:fd:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 27 01:00:14 2026 GMT Not After : Aug 25 01:00:14 2026 GMT Subject: CN=86a0c40c-4743-4b82-a261-52dea9f8d903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:d8:e3:40:ad:c8:5b:9a:42:42:4a:f8:20: a9:5a:dd:75:66:03:cf:50:8d:30:1b:5e:6f:12:65: d0:bc:8b:63:23:02:96:31:a4:df:19:8c:fe:02:bc: 98:9d:f3:03:31:1b:07:eb:85:fd:b1:55:10:09:ec: 86:14:ec:b9:f0:6e:5f:fd:e9:64:ee:27:32:38:06: b8:bb:aa:91:09:1c:f7:e2:41:87:c7:39:25:69:28: b0:51:16:b0:ed:94:05:03:15:a9:b8:6f:90:65:6f: b9:51:52:62:ff:88:a4:dc:88:e0:0f:b5:b1:a5:8d: d9:9b:c2:d2:ae:76:0d:5a:8a:df:5a:5b:a4:7b:f3: bf:72:05:f7:10:fc:7b:b9:b1:b9:23:80:ad:bf:cd: f2:2a:51:27:b5:c6:91:b0:7d:57:0c:0d:b9:d7:89: e2:49:94:48:17:c0:29:25:ad:a0:e9:9a:b7:0d:05: 3e:32:b4:da:b3:a3:bb:68:93:f0:dd:fe:ac:dd:65: d8:ad:96:2f:45:24:0d:4e:d3:c1:bf:31:54:84:00: f1:50:1d:ec:1f:5e:3b:2e:67:2c:83:9b:bc:b2:33: cd:cb:37:4d:2a:c5:89:89:9e:b3:e9:f4:7c:b2:7f: 43:d8:6a:e5:e6:fd:32:cc:a3:30:34:9d:fd:f0:a9: 77:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3E:BD:CD:63:2E:8A:60:71:C9:57:F8:C5:B6:5D:19:10:90:1E:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c0fffb7-b37f-3ad7-b6b2-a6d6354cc5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:7c:f5:0c:f9:f6:bb:ce:64:24:cb:e7:ca:f7:d0:84:c7:01: c0:c7:dd:66:97:69:88:41:cd:f7:be:a6:b6:29:64:11:59:69: 66:50:fc:8e:0f:e6:7b:3e:45:b0:01:88:6f:68:d9:ea:6e:39: bb:de:b9:c9:78:30:54:03:99:c3:98:a5:38:1d:32:d4:da:ab: de:e2:1c:d1:1f:3d:fd:ce:7f:ac:fe:ee:d3:9f:74:72:14:cd: bd:5b:d7:05:91:90:ce:f9:00:80:c8:ff:76:10:c5:cc:cb:f9: 82:c0:12:0e:c4:d0:7f:69:6f:c7:fc:78:27:3f:94:27:b2:f1: ca:97:b9:6e:18:a3:b8:f2:bc:df:8a:38:52:76:62:4f:44:25: 00:6f:87:16:33:a4:ca:70:47:d7:d8:5d:60:17:bd:31:fd:78: 39:90:45:54:10:15:1b:96:ac:1a:1c:0e:7e:d4:33:73:ed:63: ef:9f:b5:e0:84:56:1b:64:20:d8:77:07:e6:71:d7:15:b2:ee: cf:d4:f9:4d:4a:5a:36:02:46:89:ca:43:ae:ea:a9:8b:59:fc: e9:45:95:4b:ba:86:b0:e9:a2:72:fc:9f:b8:7f:86:40:dc:cb: a6:36:59:a3:38:0f:25:18:ad:ac:0e:51:39:9c:8d:c1:bf:c0: ec:7d:46:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE33pc2u2xMsTaT9YEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyNzAxMDAxNFoXDTI2MDgyNTAxMDAxNFowLzEtMCsGA1UEAxMk ODZhMGM0MGMtNDc0My00YjgyLWEyNjEtNTJkZWE5ZjhkOTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDLY40CtyFuaQkJK+CCpWt11ZgPPUI0wG15v EmXQvItjIwKWMaTfGYz+AryYnfMDMRsH64X9sVUQCeyGFOy58G5f/elk7icyOAa4 u6qRCRz34kGHxzklaSiwURaw7ZQFAxWpuG+QZW+5UVJi/4ik3IjgD7WxpY3Zm8LS rnYNWorfWluke/O/cgX3EPx7ubG5I4Ctv83yKlEntcaRsH1XDA2514niSZRIF8Ap Ja2g6Zq3DQU+MrTas6O7aJPw3f6s3WXYrZYvRSQNTtPBvzFUhADxUB3sH147Lmcs g5u8sjPNyzdNKsWJiZ6z6fR8sn9D2Grl5v0yzKMwNJ398Kl3cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFo+vc1jLopgcclX+MW2XRkQkB4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2MwZmZmYjctYjM3Zi0z YWQ3LWI2YjItYTZkNjM1NGNjNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC989Qz59rvOZCTL58r30ITHAcDH3WaXaYhBzfe+prYpZBFZaWZQ/I4P 5ns+RbABiG9o2epuObveucl4MFQDmcOYpTgdMtTaq97iHNEfPf3Of6z+7tOfdHIU zb1b1wWRkM75AIDI/3YQxczL+YLAEg7E0H9pb8f8eCc/lCey8cqXuW4Yo7jyvN+K OFJ2Yk9EJQBvhxYzpMpwR9fYXWAXvTH9eDmQRVQQFRuWrBocDn7UM3PtY++fteCE VhtkINh3B+Zx1xWy7s/U+U1KWjYCRonKQ67qqYtZ/OlFlUu6hrDponL8n7h/hkDc y6Y2WaM4DyUYrawOUTmcjcG/wOx9Rgk= -----END CERTIFICATE-----Generated at Sat Jun 13 16:07:59 2026 by rpki-client