$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5884b29c-a872-3e34-b240-29d0cd9512f8.roa File: 5884b29c-a872-3e34-b240-29d0cd9512f8.roa (raw, json) Hash identifier: p5fdmlbw5dcEYpXHJHF1INgxSC/YiA1Ru45EMooYZA8= Subject key identifier: 15:FA:01:F8:D3:C3:41:F0:3A:CF:19:C0:AC:16:63:3B:C7:11:AA:38 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CE62CCEC0EAA66A87C62CF200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5884b29c-a872-3e34-b240-29d0cd9512f8.roa Signing time: Wed 18 Feb 2026 02:00:31 +0000 ROA not before: Wed 18 Feb 2026 02:00:31 +0000 ROA not after: Tue 19 May 2026 01:00:31 +0000 asID: 30036 IP address blocks: 173.20.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e6:2c:ce:c0:ea:a6:6a:87:c6:2c:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 18 02:00:31 2026 GMT Not After : May 19 01:00:31 2026 GMT Subject: CN=f15c7a11-a132-4b24-bd42-2f85d4cf2038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8d:c4:06:a6:4a:e2:f8:b1:d5:63:12:42:36: 20:fa:4a:8b:75:1a:33:b4:33:99:26:96:45:7f:4b: 47:4a:2a:02:82:59:fe:0c:32:bc:a9:28:a5:2e:e5: 8b:e0:18:81:2a:23:00:d9:18:fe:39:94:9e:46:ee: 84:e6:5d:17:78:48:ef:f4:f6:62:d2:fc:43:48:0c: 03:8f:6a:8a:2f:06:7e:3c:37:f1:0e:86:dc:b4:13: 51:c2:eb:0a:bf:fa:77:55:c9:fb:40:e9:46:d9:b3: 9d:f4:d1:62:02:35:69:3b:c7:d7:23:04:ef:5e:60: aa:09:27:06:5b:e5:a5:04:55:0f:d3:10:c4:b5:0c: 4c:82:fa:6c:bd:86:f2:88:f3:57:1c:1c:c3:83:de: 8f:b5:14:f9:08:80:7c:57:3b:2e:03:40:86:af:f0: 10:6a:4b:53:e1:9a:3a:b5:9e:23:db:3a:ae:0e:dc: 67:13:f6:60:b9:1d:ce:10:ea:a3:b8:48:38:6d:60: f1:da:00:4c:c1:1c:2d:40:10:44:2a:59:c1:32:35: f5:13:e7:73:2b:a8:38:e9:ac:f2:2f:d8:e9:33:ed: e2:63:8a:bb:c9:c0:14:24:e2:30:6f:58:f5:53:d3: 01:0a:8f:3c:4f:f9:64:bc:c6:d5:88:ee:2c:53:0d: 60:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FA:01:F8:D3:C3:41:F0:3A:CF:19:C0:AC:16:63:3B:C7:11:AA:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5884b29c-a872-3e34-b240-29d0cd9512f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3d:26:5b:3a:9f:f4:c5:4a:3e:fd:4b:90:82:97:aa:6d:85: 35:49:54:a2:6b:5b:47:57:42:ef:2f:37:6a:1d:c5:cf:c5:1b: 57:d9:64:71:c0:99:69:e7:e8:8c:46:b1:d9:dc:ae:6f:64:b0: 11:a4:4d:37:a0:93:2e:5e:c9:fe:80:b8:46:c0:a9:38:a2:b4: 21:4e:ac:3e:7a:0c:dc:dc:af:81:eb:14:e1:60:e1:64:81:f1: be:78:64:ea:91:5d:02:b7:c1:00:b0:84:da:0a:bd:36:4d:b1: 29:17:3c:b3:a2:76:ae:3c:1b:2f:54:4a:f8:1f:c1:f3:15:ec: 1a:0e:fa:d2:a5:e1:36:4e:9c:a0:84:e8:3e:6a:de:77:e1:b2: 39:cd:b9:17:ac:79:c5:cb:62:63:5e:18:c9:68:23:04:bd:32: 26:85:8f:7a:e7:b3:41:2e:09:93:a8:e4:04:c5:4a:6e:27:9e: 09:bf:e3:46:b2:b9:4c:0c:ed:d7:6f:4d:15:87:9f:9c:02:7c: e4:9b:6b:42:0b:cc:83:a3:84:b7:f1:f0:eb:74:93:a9:5d:0f: a1:2e:6c:78:19:91:72:e8:dd:35:59:76:0c:9b:96:0a:8f:21: e3:b5:f8:16:e5:30:7c:01:1b:e0:ea:ee:f1:a5:c0:2d:71:8d: 90:f8:81:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzmLM7A6qZqh8Ys8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIxODAyMDAzMVoXDTI2MDUxOTAxMDAzMVowLzEtMCsGA1UEAxMk ZjE1YzdhMTEtYTEzMi00YjI0LWJkNDItMmY4NWQ0Y2YyMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI3EBqZK4vix1WMSQjYg+kqLdRoztDOZJpZF f0tHSioCgln+DDK8qSilLuWL4BiBKiMA2Rj+OZSeRu6E5l0XeEjv9PZi0vxDSAwD j2qKLwZ+PDfxDobctBNRwusKv/p3Vcn7QOlG2bOd9NFiAjVpO8fXIwTvXmCqCScG W+WlBFUP0xDEtQxMgvpsvYbyiPNXHBzDg96PtRT5CIB8VzsuA0CGr/AQaktT4Zo6 tZ4j2zquDtxnE/ZguR3OEOqjuEg4bWDx2gBMwRwtQBBEKlnBMjX1E+dzK6g46azy L9jpM+3iY4q7ycAUJOIwb1j1U9MBCo88T/lkvMbViO4sUw1gPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBX6AfjTw0HwOs8ZwKwWYzvHEao4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTg4NGIyOWMtYTg3Mi0z ZTM0LWIyNDAtMjlkMGNkOTUxMmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg9Jls6n/TFSj79S5CCl6pthTVJVKJrW0dXQu8vN2odxc/FG1fZZHHA mWnn6IxGsdncrm9ksBGkTTegky5eyf6AuEbAqTiitCFOrD56DNzcr4HrFOFg4WSB 8b54ZOqRXQK3wQCwhNoKvTZNsSkXPLOidq48Gy9USvgfwfMV7BoO+tKl4TZOnKCE 6D5q3nfhsjnNuResecXLYmNeGMloIwS9MiaFj3rns0EuCZOo5ATFSm4nngm/40ay uUwM7ddvTRWHn5wCfOSba0ILzIOjhLfx8Ot0k6ldD6EubHgZkXLo3TVZdgyblgqP IeO1+BblMHwBG+Dq7vGlwC1xjZD4gV0= -----END CERTIFICATE-----Generated at Mon Mar 2 12:18:37 2026 by rpki-client