$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f9224ae-5e9e-3e1b-9241-6e115e8f90e5.roa File: 3f9224ae-5e9e-3e1b-9241-6e115e8f90e5.roa (raw, json) Hash identifier: sY4LxiHHei1EgKGn8h5GFyA/Brn4qAL2sTxJ09HCBCA= Subject key identifier: E9:1A:D2:01:97:D0:B8:52:D6:6A:4D:03:02:5E:D1:5D:03:A1:3A:40 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D037D4AAC1A7E617300F55740 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f9224ae-5e9e-3e1b-9241-6e115e8f90e5.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 19905 IP address blocks: 173.20.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:4a:ac:1a:7e:61:73:00:f5:57:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=d7490ad5-a81a-45a5-b2d9-4c4da2cf6ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:b9:80:2f:49:03:0e:ab:b3:59:f8:4f:f1: 4e:2e:b0:cd:b0:27:db:8c:01:80:ed:88:23:33:10: 67:fe:e7:1d:3d:f0:4c:71:05:d8:2d:a6:16:55:25: 09:30:51:3b:8b:a9:0c:f6:c1:fb:19:4b:84:85:e2: 21:e3:03:ff:18:e8:47:b8:d3:a6:6e:fc:f0:ad:b1: 84:b2:dc:b3:66:93:d8:f8:e0:93:40:6b:61:19:fa: e8:ee:36:9c:2d:fc:ba:25:10:92:d6:74:4b:d9:06: 43:31:b3:da:9a:03:6c:7a:08:1c:dd:61:b2:cc:2e: 88:3a:7c:00:1c:be:05:7c:1d:9d:d5:e0:5a:e6:1d: 43:3f:83:c4:b0:fe:b3:05:61:6a:b6:20:83:3f:3b: be:4c:32:26:7c:bc:7e:1d:bf:07:ed:8c:69:fb:15: f9:2d:cd:91:8d:ad:b2:e3:72:1c:29:9d:57:64:14: 84:26:14:51:1e:53:f6:ba:6f:97:78:00:9a:f8:2c: e6:81:15:be:be:b4:bd:e2:54:f8:19:df:01:da:6e: c2:ad:0d:35:16:48:58:32:e3:b6:92:6f:85:3c:c3: 82:50:d5:fb:d9:12:e1:6c:5e:ef:e0:bd:74:c8:62: 55:29:d5:88:ca:f5:3e:e9:ff:61:58:d6:6c:7b:f9: 2b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1A:D2:01:97:D0:B8:52:D6:6A:4D:03:02:5E:D1:5D:03:A1:3A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f9224ae-5e9e-3e1b-9241-6e115e8f90e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:6a:a8:a7:26:75:c9:30:73:97:63:b0:c2:3c:80:71:46:45: d6:9d:6f:d6:0f:2a:82:ee:f0:a0:f8:59:30:43:fc:19:a9:e0: d9:ba:09:0c:4c:cf:c7:3f:13:9a:04:a2:fc:1b:00:1c:05:88: 29:32:35:53:43:2a:ae:ba:46:a0:7d:08:82:ff:d7:33:87:46: 4e:e2:c9:ad:a2:03:44:0f:24:6e:10:53:10:ed:0d:c4:07:3a: d4:3d:5e:95:79:a8:31:6f:fa:8b:06:c0:7e:72:3d:07:1d:23: f5:a5:6d:5b:8e:45:e6:33:b7:e1:a4:d0:17:3e:ea:ef:6d:5a: 84:b8:34:11:f8:e0:77:dd:2f:97:fe:da:0e:99:f8:c6:91:27: b7:bc:ba:76:7c:e1:f4:ba:62:0c:57:a9:24:eb:29:1a:d4:39: 53:9d:65:aa:59:b4:ca:a2:6e:c3:d0:e5:ca:af:1b:02:f3:ea: 97:5e:28:ae:4f:09:5b:34:29:2c:ea:6e:96:24:93:80:30:af: f5:9b:50:cb:8c:e0:22:52:d9:e6:39:ed:c5:2e:1c:b7:0b:71: 07:6d:ab:33:0b:11:af:77:32:23:81:a2:ed:c0:d5:dc:4c:28: 27:56:56:59:ed:cc:02:bc:cb:a3:f8:f0:e1:4a:47:fb:07:89: 78:97:88:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfUqsGn5hcwD1V0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZDc0OTBhZDUtYTgxYS00NWE1LWIyZDktNGM0ZGEyY2Y2YmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP+5gC9JAw6rs1n4T/FOLrDNsCfbjAGA7Ygj MxBn/ucdPfBMcQXYLaYWVSUJMFE7i6kM9sH7GUuEheIh4wP/GOhHuNOmbvzwrbGE styzZpPY+OCTQGthGfro7jacLfy6JRCS1nRL2QZDMbPamgNseggc3WGyzC6IOnwA HL4FfB2d1eBa5h1DP4PEsP6zBWFqtiCDPzu+TDImfLx+Hb8H7Yxp+xX5Lc2Rja2y 43IcKZ1XZBSEJhRRHlP2um+XeACa+CzmgRW+vrS94lT4Gd8B2m7CrQ01FkhYMuO2 km+FPMOCUNX72RLhbF7v4L10yGJVKdWIyvU+6f9hWNZse/krpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOka0gGX0LhS1mpNAwJe0V0DoTpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Y5MjI0YWUtNWU5ZS0z ZTFiLTkyNDEtNmUxMTVlOGY5MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRTUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFqqKcmdckwc5djsMI8gHFGRdadb9YPKoLu8KD4WTBD/Bmp4Nm6CQxM z8c/E5oEovwbABwFiCkyNVNDKq66RqB9CIL/1zOHRk7iya2iA0QPJG4QUxDtDcQH OtQ9XpV5qDFv+osGwH5yPQcdI/WlbVuOReYzt+Gk0Bc+6u9tWoS4NBH44HfdL5f+ 2g6Z+MaRJ7e8unZ84fS6YgxXqSTrKRrUOVOdZapZtMqibsPQ5cqvGwLz6pdeKK5P CVs0KSzqbpYkk4Awr/WbUMuM4CJS2eY57cUuHLcLcQdtqzMLEa93MiOBou3A1dxM KCdWVlntzAK8y6P48OFKR/sHiXiXiGY= -----END CERTIFICATE-----Generated at Mon Mar 2 00:55:59 2026 by rpki-client