$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c55ffb8-276d-36ee-accf-218651efb74a.roa File: 3c55ffb8-276d-36ee-accf-218651efb74a.roa (raw, json) Hash identifier: KW45VLBqdh+PUal9UuXypwcIffC2ug2n4iKjk/9N8rk= Subject key identifier: CA:7F:86:09:B8:86:7E:23:42:4E:73:D5:07:D5:52:F2:42:C8:A9:60 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059C64FB746F0DDBA6A6CB20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c55ffb8-276d-36ee-accf-218651efb74a.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.25.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:64:fb:74:6f:0d:db:a6:a6:cb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=487dcb49-0e48-4a50-a65f-c328fc824939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:54:3f:bc:06:8b:8d:9d:96:4a:ff:39:89:c3: 22:12:3f:bd:e8:58:49:83:58:15:9d:84:0f:b2:46: 44:4d:39:5d:08:cd:07:d6:2f:04:2d:46:a7:32:58: ad:a9:04:c9:8e:32:d5:2b:06:22:39:53:01:9e:b6: 9d:7f:0b:22:eb:e3:c1:b5:d8:00:93:fa:3c:a3:ff: a2:8f:e9:1e:95:d3:89:0f:37:e1:95:b3:8d:5f:a2: 0f:32:f1:47:7b:77:ae:13:fb:d8:ae:6a:b2:47:2d: 7b:ec:53:12:89:21:a8:61:4c:b7:18:c1:e6:55:74: fa:86:70:cc:58:c6:cc:58:02:fa:a7:40:ac:fd:9a: a2:75:71:87:ae:2b:6b:6f:89:67:a6:c0:02:cf:ec: f4:66:10:0b:a2:cf:65:1f:25:61:35:fe:8d:af:cc: bf:93:b8:76:b2:61:2b:bb:fd:7e:c7:79:94:4b:52: a2:c7:56:cb:86:1b:85:e8:b8:67:10:dd:89:74:49: 28:aa:95:8c:01:85:aa:cc:27:97:97:2c:5e:7a:78: 75:90:ec:1b:f0:c0:05:a4:a3:c0:fd:1a:d5:2f:bd: 56:57:93:d8:9e:4c:77:d7:15:25:20:4a:86:6f:a6: 88:77:a4:b8:30:bf:c1:fb:03:7d:35:d7:8f:be:51: 12:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7F:86:09:B8:86:7E:23:42:4E:73:D5:07:D5:52:F2:42:C8:A9:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c55ffb8-276d-36ee-accf-218651efb74a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d1:48:92:51:6b:54:39:60:66:1d:08:a8:b1:c1:61:97:ea: 14:ca:9c:63:38:b1:6b:2f:fc:bf:0c:90:f5:be:a8:f3:35:98: 2f:27:47:ab:23:4f:a8:9d:b4:7d:3b:18:b9:ab:94:62:47:15: ad:15:5e:16:9e:2e:50:a6:43:f1:b7:83:51:36:c3:35:f1:79: 70:1b:00:6f:f3:ac:a6:a4:0f:47:d9:59:ed:da:c9:53:62:f0: e0:d5:41:11:c5:76:5b:0c:f2:e6:eb:61:80:8a:08:89:7c:2a: eb:fb:4f:63:40:94:60:82:c5:b2:66:b3:f6:96:19:db:68:0c: fb:31:ab:75:dd:16:24:d1:b3:55:b4:11:8e:41:38:cc:c9:b7: e1:93:e7:1e:0b:7a:6a:88:dc:d4:42:f3:28:a3:a5:0a:6a:3d: 8e:a1:dc:14:76:03:c7:f5:30:34:c0:bb:20:e6:f2:76:11:8a: 27:4e:e7:52:e5:c0:4b:8a:55:e9:72:7e:db:46:2a:0a:95:7e: db:de:37:2b:cb:9a:c6:de:aa:39:6f:13:20:06:de:3d:62:63: 29:de:16:89:bb:be:d9:73:6b:06:7f:d9:21:6d:cf:ab:43:87: a4:82:29:b7:fc:57:5c:ce:24:3f:3f:fd:cf:2e:a9:1a:79:fd: a3:d0:19:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnGT7dG8N26amyyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NDg3ZGNiNDktMGU0OC00YTUwLWE2NWYtYzMyOGZjODI0OTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFQ/vAaLjZ2WSv85icMiEj+96FhJg1gVnYQP skZETTldCM0H1i8ELUanMlitqQTJjjLVKwYiOVMBnradfwsi6+PBtdgAk/o8o/+i j+keldOJDzfhlbONX6IPMvFHe3euE/vYrmqyRy177FMSiSGoYUy3GMHmVXT6hnDM WMbMWAL6p0Cs/ZqidXGHritrb4lnpsACz+z0ZhALos9lHyVhNf6Nr8y/k7h2smEr u/1+x3mUS1Kix1bLhhuF6LhnEN2JdEkoqpWMAYWqzCeXlyxeenh1kOwb8MAFpKPA /RrVL71WV5PYnkx31xUlIEqGb6aId6S4ML/B+wN9NdePvlESvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMp/hgm4hn4jQk5z1QfVUvJCyKlgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2M1NWZmYjgtMjc2ZC0z NmVlLWFjY2YtMjE4NjUxZWZiNzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRltMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPRSJJRa1Q5YGYdCKixwWGX6hTKnGM4sWsv/L8MkPW+qPM1mC8nR6sj T6idtH07GLmrlGJHFa0VXhaeLlCmQ/G3g1E2wzXxeXAbAG/zrKakD0fZWe3ayVNi 8ODVQRHFdlsM8ubrYYCKCIl8Kuv7T2NAlGCCxbJms/aWGdtoDPsxq3XdFiTRs1W0 EY5BOMzJt+GT5x4LemqI3NRC8yijpQpqPY6h3BR2A8f1MDTAuyDm8nYRiidO51Ll wEuKVelyfttGKgqVftveNyvLmsbeqjlvEyAG3j1iYyneFom7vtlzawZ/2SFtz6tD h6SCKbf8V1zOJD8//c8uqRp5/aPQGXg= -----END CERTIFICATE-----Generated at Sat Jun 13 16:34:17 2026 by rpki-client