$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa File: 4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa (raw, json) Hash identifier: Fz+GxIYLVnJq77t5UQpuHHXtpZO5t8lSyIkWcvmlIII= Subject key identifier: F9:52:4C:7F:39:44:99:EB:7A:78:74:F2:C3:2B:2B:D0:E6:0B:A5:5F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E0865E4768C9D58477192C500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.20.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:e4:76:8c:9d:58:47:71:92:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=32215ba1-ddb8-4d66-8341-6a6894ee0d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:27:c4:ea:38:bb:16:bc:82:9a:97:f8:87:ec: 17:41:99:d3:b2:89:6c:92:90:f9:ab:aa:c1:9f:ee: e5:41:aa:bc:d8:3f:80:91:cb:b8:67:15:97:8e:37: 9e:20:c1:80:d0:1d:25:5d:41:e9:fa:73:df:58:d0: 0f:0a:c6:d9:72:05:53:a5:6e:1a:a2:ed:be:4a:d4: 1e:dc:a3:34:5f:1d:c5:39:88:f0:8d:a8:47:85:83: 73:72:02:09:64:01:cd:94:6a:73:2b:b7:da:be:34: 80:f2:69:61:87:0e:20:51:1a:0e:ee:49:13:15:31: eb:04:61:90:8c:e1:59:3b:7d:d4:f5:17:58:15:34: fe:e4:67:f1:a2:dc:57:13:2e:47:a6:53:1c:77:a2: 75:ee:25:a6:a5:9a:7a:b9:f5:f9:ed:01:ca:15:16: df:3d:f1:2c:b3:30:0b:8c:8b:81:b1:16:b8:ab:7e: 96:03:73:76:f3:1b:11:6e:d7:d7:14:63:17:4e:9c: 1b:b1:e1:ef:8e:17:e0:69:7d:89:91:77:15:eb:b1: 97:85:1b:41:40:d3:31:fb:e3:1e:9d:e8:1f:59:cd: 5a:e8:7b:1f:5b:e4:86:a7:a9:6e:69:80:e8:80:d9: be:85:77:3d:5a:ab:a5:04:ba:e2:31:2f:7f:a3:bc: f3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:52:4C:7F:39:44:99:EB:7A:78:74:F2:C3:2B:2B:D0:E6:0B:A5:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:8d:33:bd:d0:64:75:f3:ea:04:a7:2d:71:ee:54:aa:b2:bf: e6:50:c6:61:d1:3c:4e:bd:3d:d6:ea:51:53:f6:74:a3:77:ad: a5:97:1f:3d:c9:e0:fe:a5:b2:98:a1:e0:63:06:41:7c:87:18: 03:7c:91:7b:c8:0f:0b:8c:46:80:d9:ff:5f:54:35:de:95:d7: 30:e0:02:07:dd:90:56:fe:17:38:57:fc:ca:19:c0:dc:3d:f7: a9:c2:d1:a6:da:43:55:c8:9b:f1:a4:89:3a:97:43:94:1c:c3: ed:d4:f6:f4:43:30:c4:3e:2f:a9:b5:6f:7c:b2:d3:3d:0e:13: 43:ca:c9:65:ad:38:af:a8:fa:a0:bf:28:af:4e:94:98:cd:67: a6:e4:e2:a0:c8:50:39:cc:15:d1:fb:a7:65:4e:26:05:e2:83: 4c:0a:65:bd:79:55:bb:50:1f:76:09:83:41:24:b2:89:9f:be: 39:c0:6b:c1:60:d6:42:63:bc:72:41:98:28:19:d7:a9:2d:ac: c5:c1:46:62:2b:01:93:7c:33:f6:f8:00:04:0d:a7:af:58:d1: 50:a8:26:1a:96:70:6a:e8:b9:17:29:fc:96:6b:02:4f:da:30: cf:67:1e:ab:0a:fa:a7:6e:97:49:31:e9:9c:e4:75:6b:e8:59: 81:88:b4:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZeR2jJ1YR3GSxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MzIyMTViYTEtZGRiOC00ZDY2LTgzNDEtNmE2ODk0ZWUwZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ifE6ji7FryCmpf4h+wXQZnTsolskpD5q6rB n+7lQaq82D+Akcu4ZxWXjjeeIMGA0B0lXUHp+nPfWNAPCsbZcgVTpW4aou2+StQe 3KM0Xx3FOYjwjahHhYNzcgIJZAHNlGpzK7favjSA8mlhhw4gURoO7kkTFTHrBGGQ jOFZO33U9RdYFTT+5GfxotxXEy5HplMcd6J17iWmpZp6ufX57QHKFRbfPfEsszAL jIuBsRa4q36WA3N28xsRbtfXFGMXTpwbseHvjhfgaX2JkXcV67GXhRtBQNMx++Me negfWc1a6HsfW+SGp6luaYDogNm+hXc9WqulBLriMS9/o7zziwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlSTH85RJnrenh08sMrK9DmC6VfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY1MmI1YjQtMWI3Ni0z M2E5LTg0MzMtZWU0YzZlNjk2YzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCNM73QZHXz6gSnLXHuVKqyv+ZQxmHRPE69PdbqUVP2dKN3raWXHz3J 4P6lspih4GMGQXyHGAN8kXvIDwuMRoDZ/19UNd6V1zDgAgfdkFb+FzhX/MoZwNw9 96nC0abaQ1XIm/GkiTqXQ5Qcw+3U9vRDMMQ+L6m1b3yy0z0OE0PKyWWtOK+o+qC/ KK9OlJjNZ6bk4qDIUDnMFdH7p2VOJgXig0wKZb15VbtQH3YJg0EksomfvjnAa8Fg 1kJjvHJBmCgZ16ktrMXBRmIrAZN8M/b4AAQNp69Y0VCoJhqWcGrouRcp/JZrAk/a MM9nHqsK+qdul0kx6ZzkdWvoWYGItOA= -----END CERTIFICATE-----Generated at Sat Jun 13 19:10:53 2026 by rpki-client