$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f00cacd-1911-391d-9237-784128c92e0a.roa File: 3f00cacd-1911-391d-9237-784128c92e0a.roa (raw, json) Hash identifier: QKtUtLAQ0wfK7vbwBRcULJpaAsPzL41DtYVwtvzR6xE= Subject key identifier: 33:D7:64:8C:86:11:99:94:1F:89:E5:34:24:66:6F:36:B8:6C:21:2D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DD625B482DAA72518E786A400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f00cacd-1911-391d-9237-784128c92e0a.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 30036 IP address blocks: 24.129.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:b4:82:da:a7:25:18:e7:86:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=512772e7-8ed3-4b09-adc8-d26400e493b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:33:71:64:ad:19:4d:86:54:3d:dd:90:8e:f2: 4a:ae:5a:f2:79:f0:10:90:ec:35:89:12:86:3a:ba: 27:c0:9d:54:36:47:bc:6b:a9:49:dc:01:b2:eb:c6: 57:3d:fd:c4:aa:94:f8:02:a3:67:0b:8d:1d:86:71: 88:b8:c3:d2:81:33:0a:71:5e:80:7c:5b:ab:df:2c: 20:a7:78:45:ce:64:a4:b3:d0:b1:63:44:4f:ac:d5: 21:1c:70:ea:2a:16:7c:dd:3e:dc:26:fc:e3:d2:4c: 64:80:d1:b0:63:c3:f4:c9:42:9b:de:be:72:7d:37: ff:fe:08:a2:e5:69:be:b6:29:80:0e:63:fb:f9:59: 18:df:b8:65:e4:53:02:3c:7f:42:11:b2:84:3d:84: 21:59:5b:db:95:84:b5:ee:72:01:79:19:be:f9:59: 78:cd:84:04:bb:3f:a7:54:12:27:26:3a:8f:b9:f6: c3:aa:cb:38:c6:a2:9f:95:30:72:f8:24:0f:bf:a1: 4b:14:16:27:f3:e2:2b:d8:b9:18:8f:bd:91:2e:7e: 1b:07:34:58:8d:54:57:ae:f4:01:cb:e0:68:7e:57: bb:8b:7a:74:93:be:a1:c0:cf:5a:84:d7:cd:ed:e8: 46:79:af:cf:e7:a3:39:a8:46:28:3d:65:0e:e8:72: 60:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D7:64:8C:86:11:99:94:1F:89:E5:34:24:66:6F:36:B8:6C:21:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f00cacd-1911-391d-9237-784128c92e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 24.129.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:76:e9:c5:b8:88:e5:24:a7:3b:e0:6c:ac:39:94:ef:12:32: a1:a8:f2:d8:73:85:5d:0a:08:22:3c:7c:8d:58:3c:0e:13:15: 22:ef:4e:08:50:75:b0:be:f4:72:57:92:95:4f:92:8f:e9:8e: d0:e3:b8:f2:d0:2b:df:c4:b2:ec:ee:7b:a2:16:ae:a0:5f:80: 6c:77:52:b5:cd:d6:8f:9b:c1:b2:98:1f:c9:0e:d0:7b:2c:1b: 3a:87:6b:a4:d8:23:a4:79:a9:b6:64:38:1c:9a:3c:d9:0b:ed: 6d:30:61:07:14:e2:6c:ec:a5:c0:5e:67:6d:2e:07:5f:01:9d: bf:31:58:4a:36:8f:8f:0f:0b:54:87:b5:7f:b5:aa:ad:e2:b1: 84:65:98:40:46:eb:07:b5:68:a9:14:94:53:cf:33:5c:75:28: 55:64:55:39:06:5c:5e:86:28:75:06:d1:52:53:eb:1d:1a:a0: d2:cc:d4:2c:ca:fc:ce:56:2d:e0:a2:83:1b:56:46:66:27:9f: 6c:49:1c:66:4a:7c:f3:44:fb:ca:3c:8c:e5:c4:31:0a:4e:9a: d0:c1:d9:ec:87:12:3d:83:f2:ed:f0:8c:e9:c3:90:ad:88:69: a6:83:78:61:be:c6:96:a3:c1:95:32:95:f7:99:0a:d6:59:91: cc:f7:a1:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJbSC2qclGOeGpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk NTEyNzcyZTctOGVkMy00YjA5LWFkYzgtZDI2NDAwZTQ5M2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDNxZK0ZTYZUPd2QjvJKrlryefAQkOw1iRKG OronwJ1UNke8a6lJ3AGy68ZXPf3EqpT4AqNnC40dhnGIuMPSgTMKcV6AfFur3ywg p3hFzmSks9CxY0RPrNUhHHDqKhZ83T7cJvzj0kxkgNGwY8P0yUKb3r5yfTf//gii 5Wm+timADmP7+VkY37hl5FMCPH9CEbKEPYQhWVvblYS17nIBeRm++Vl4zYQEuz+n VBInJjqPufbDqss4xqKflTBy+CQPv6FLFBYn8+Ir2LkYj72RLn4bBzRYjVRXrvQB y+Bofle7i3p0k76hwM9ahNfN7ehGea/P56M5qEYoPWUO6HJgDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPXZIyGEZmUH4nlNCRmbza4bCEtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2YwMGNhY2QtMTkxMS0z OTFkLTkyMzctNzg0MTI4YzkyZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGIHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF126cW4iOUkpzvgbKw5lO8SMqGo8thzhV0KCCI8fI1YPA4TFSLvTghQ dbC+9HJXkpVPko/pjtDjuPLQK9/Esuzue6IWrqBfgGx3UrXN1o+bwbKYH8kO0Hss GzqHa6TYI6R5qbZkOByaPNkL7W0wYQcU4mzspcBeZ20uB18Bnb8xWEo2j48PC1SH tX+1qq3isYRlmEBG6we1aKkUlFPPM1x1KFVkVTkGXF6GKHUG0VJT6x0aoNLM1CzK /M5WLeCigxtWRmYnn2xJHGZKfPNE+8o8jOXEMQpOmtDB2eyHEj2D8u3wjOnDkK2I aaaDeGG+xpajwZUylfeZCtZZkcz3oYw= -----END CERTIFICATE-----Generated at Sat Jun 13 17:12:56 2026 by rpki-client