$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4897a724-9ff1-33f2-8132-9c0dcb17d486.roa File: 4897a724-9ff1-33f2-8132-9c0dcb17d486.roa (raw, json) Hash identifier: a0ZrcYRj+DuCgWnOsqNmjHoUbyDaw0Jt5yyAMmI530U= Subject key identifier: 1F:4C:8E:BF:E7:88:5C:29:73:4C:CA:1F:91:03:47:05:7A:31:50:43 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CF9B79598C4022FF11DBA8000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4897a724-9ff1-33f2-8132-9c0dcb17d486.roa Signing time: Wed 25 Feb 2026 02:00:32 +0000 ROA not before: Wed 25 Feb 2026 02:00:32 +0000 ROA not after: Tue 26 May 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.20.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f9:b7:95:98:c4:02:2f:f1:1d:ba:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 25 02:00:32 2026 GMT Not After : May 26 01:00:32 2026 GMT Subject: CN=8bc97dfc-0682-48ab-b689-04f31737ff3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:04:88:d2:0e:dc:86:c2:be:a9:80:0c:eb:81: ed:be:2d:1a:55:c5:29:04:6e:12:d2:f6:86:8f:f4: 53:a9:f8:2b:65:ab:6b:94:08:ed:91:07:e9:41:2a: 45:ea:17:71:52:50:71:0c:90:00:14:a7:2e:ad:e4: e5:34:d7:19:a7:83:a5:3e:ce:77:83:00:3d:03:0d: d9:a4:d6:e2:64:df:e1:9a:20:79:f2:31:d9:c4:05: fe:e0:91:d6:c9:3e:a2:e8:08:e3:cd:27:1e:73:0b: ac:a1:0a:d0:3e:6e:c1:2a:ca:66:a9:68:c9:61:d5: 00:57:02:be:8b:ab:b1:de:65:68:ea:38:6e:ff:b4: 2e:fd:71:d5:9a:03:92:ef:66:b0:40:fc:f3:33:92: d2:f2:53:0d:4a:9f:1b:e9:4c:74:bd:7b:13:c8:8f: 06:23:9f:da:fb:6e:c0:6d:73:eb:c5:31:d4:63:49: 95:eb:cf:a9:b8:ee:28:59:fa:eb:de:55:59:c3:1a: 71:53:f2:d0:bd:a8:fc:76:a4:51:7f:da:f3:bf:87: 71:a4:34:04:6c:0c:34:da:95:fe:0d:06:ec:6a:41: 58:29:c3:36:c9:ef:64:8f:9a:cd:e8:c3:73:d7:93: 12:9a:ee:52:75:0a:d1:14:e3:17:18:1b:ba:60:64: 63:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4C:8E:BF:E7:88:5C:29:73:4C:CA:1F:91:03:47:05:7A:31:50:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4897a724-9ff1-33f2-8132-9c0dcb17d486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:03:f4:6b:e2:c5:8c:a4:a5:0d:5b:3c:56:f2:a0:2e:e0:2f: 1b:49:eb:af:a2:e9:8d:07:4c:28:cb:b6:e3:14:6e:d2:01:92: 9c:ea:50:05:f9:d2:b9:02:71:5d:1b:a8:4b:7c:b3:80:83:00: c1:22:29:85:8d:00:7c:9b:a4:7a:34:aa:9b:83:29:33:04:e5: d0:df:a2:73:59:40:e1:9f:ce:7a:c9:6a:d5:d6:42:30:d7:63: fb:c2:5c:6e:d5:b5:72:0e:db:35:eb:94:d1:85:e8:e7:f8:c0: e2:d2:06:9e:7f:1c:1f:12:ae:a1:11:19:bd:2e:f8:8e:45:9c: 49:39:a3:51:9c:40:0d:42:74:d3:19:d2:7b:3c:84:00:06:2b: 3c:4e:66:19:da:32:a4:c8:0b:02:1f:cd:af:e8:5b:6e:da:8b: 5f:2d:80:6d:5e:63:92:10:81:f6:81:6a:7d:88:e0:e1:8b:1a: 90:3c:94:44:59:f9:37:5a:89:41:be:e0:fc:4d:96:2a:7e:59: e0:db:ea:e4:ed:37:c2:ce:aa:ed:c3:d1:99:8e:da:6d:31:23: 75:50:ea:c7:c8:78:6c:64:ae:f5:b0:41:5b:8a:f4:7e:d8:ca: 80:e6:ef:d1:9d:df:16:0a:4e:1b:38:f4:ab:cc:ca:a8:e7:8c: 69:9d:34:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz5t5WYxAIv8R26gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIyNTAyMDAzMloXDTI2MDUyNjAxMDAzMlowLzEtMCsGA1UEAxMk OGJjOTdkZmMtMDY4Mi00OGFiLWI2ODktMDRmMzE3MzdmZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQSI0g7chsK+qYAM64Htvi0aVcUpBG4S0vaG j/RTqfgrZatrlAjtkQfpQSpF6hdxUlBxDJAAFKcureTlNNcZp4OlPs53gwA9Aw3Z pNbiZN/hmiB58jHZxAX+4JHWyT6i6AjjzScecwusoQrQPm7BKspmqWjJYdUAVwK+ i6ux3mVo6jhu/7Qu/XHVmgOS72awQPzzM5LS8lMNSp8b6Ux0vXsTyI8GI5/a+27A bXPrxTHUY0mV68+puO4oWfrr3lVZwxpxU/LQvaj8dqRRf9rzv4dxpDQEbAw02pX+ DQbsakFYKcM2ye9kj5rN6MNz15MSmu5SdQrRFOMXGBu6YGRjHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9Mjr/niFwpc0zKH5EDRwV6MVBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDg5N2E3MjQtOWZmMS0z M2YyLTgxMzItOWMwZGNiMTdkNDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAED9GvixYykpQ1bPFbyoC7gLxtJ66+i6Y0HTCjLtuMUbtIBkpzqUAX5 0rkCcV0bqEt8s4CDAMEiKYWNAHybpHo0qpuDKTME5dDfonNZQOGfznrJatXWQjDX Y/vCXG7VtXIO2zXrlNGF6Of4wOLSBp5/HB8SrqERGb0u+I5FnEk5o1GcQA1CdNMZ 0ns8hAAGKzxOZhnaMqTICwIfza/oW27ai18tgG1eY5IQgfaBan2I4OGLGpA8lERZ +TdaiUG+4PxNlip+WeDb6uTtN8LOqu3D0ZmO2m0xI3VQ6sfIeGxkrvWwQVuK9H7Y yoDm79Gd3xYKThs49KvMyqjnjGmdNGM= -----END CERTIFICATE-----Generated at Sun Mar 1 23:11:40 2026 by rpki-client