$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58bd4a2f-8531-3247-b07b-d6c33cb96af1.roa File: 58bd4a2f-8531-3247-b07b-d6c33cb96af1.roa (raw, json) Hash identifier: TLg9cS+7TBjh4gfryWY+5Yotg8iuXGtnRX+IZDTj3HA= Subject key identifier: D9:3C:48:DA:EB:BE:C2:EB:7F:30:FE:57:DF:56:6F:FD:A5:87:5E:0A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D4D95F34CE4214AFD4688E900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58bd4a2f-8531-3247-b07b-d6c33cb96af1.roa Signing time: Fri 27 Mar 2026 03:00:57 +0000 ROA not before: Fri 27 Mar 2026 03:00:57 +0000 ROA not after: Thu 25 Jun 2026 03:00:57 +0000 asID: 30036 IP address blocks: 173.20.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:95:f3:4c:e4:21:4a:fd:46:88:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 27 03:00:57 2026 GMT Not After : Jun 25 03:00:57 2026 GMT Subject: CN=d11ede67-bbae-4592-b05e-8a0a51bcb49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:5d:42:12:3d:90:14:f1:5f:04:66:ca:ae: 63:f8:94:21:c9:94:93:da:36:d3:57:b9:94:87:7f: 33:bc:f3:8a:fd:ce:d6:ee:94:4f:a5:54:e3:d8:db: ec:0b:27:05:2d:52:3f:af:02:21:ef:cc:69:05:c0: 62:44:5a:07:ab:39:83:57:3f:3a:62:73:86:b9:0b: b0:05:26:64:0b:20:54:02:b6:3e:b9:a8:5e:dc:37: ca:f5:5e:9e:6a:ad:cd:e3:65:e8:29:97:a4:3b:e4: d8:2f:24:4d:01:fb:6b:b3:6e:64:f0:4a:aa:dd:99: 16:76:d7:40:16:49:c6:ba:3f:f8:32:ff:10:4b:98: 07:05:70:f5:92:4c:12:35:7e:fa:ed:ec:55:58:7c: 38:a0:20:13:ba:cd:4c:a1:9d:14:c7:4b:a2:5a:93: 84:79:0a:fd:50:a1:7f:8d:94:1e:bb:32:fa:3a:b6: 82:03:96:a6:78:f2:6e:39:36:ab:96:06:49:2e:53: ff:22:40:e4:75:6a:d8:70:60:4f:e4:aa:ce:03:0a: 02:f4:67:60:ff:a5:99:fc:c1:a4:5c:fb:36:47:6f: 04:a5:3e:2c:9c:a2:db:87:92:00:2a:88:73:a5:3c: 8c:2e:e4:78:11:30:7c:fe:7e:b9:ba:3d:79:b5:87: fd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3C:48:DA:EB:BE:C2:EB:7F:30:FE:57:DF:56:6F:FD:A5:87:5E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58bd4a2f-8531-3247-b07b-d6c33cb96af1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d8:9d:5f:f0:3e:dd:23:7e:70:a2:bf:07:ff:27:e8:5b:79: 22:ee:d5:8d:48:b1:39:33:92:67:14:c2:d4:93:5d:82:59:4e: cf:af:e1:c5:79:00:18:63:0c:15:fd:91:3e:4a:d0:ce:75:ac: b3:4a:86:92:73:8c:34:2d:56:b7:3f:d5:c3:d2:95:be:12:22: e5:5f:94:eb:aa:c0:43:29:13:58:7e:a2:ef:d1:52:3e:d6:56: a8:96:e6:8a:58:ff:81:76:80:6b:15:c0:c7:aa:69:ca:99:35: 1a:ed:ce:83:7a:41:2f:eb:0f:dc:ee:2d:2a:14:73:6c:e3:fc: 97:ec:4c:58:36:82:e4:88:a9:61:8b:8a:2a:6b:c2:80:06:03: 5c:02:c2:37:77:d8:88:04:8b:10:f6:5b:a5:13:d5:92:bb:4d: 0c:c4:51:8e:09:96:5b:72:0a:a0:48:5c:f0:68:bf:3b:01:9d: 6f:41:45:46:65:b6:17:82:5f:c1:20:21:4e:99:86:f4:4d:db: ba:68:5e:e0:d3:4b:94:12:62:f7:0a:cf:12:46:4c:65:3a:94: 36:ae:77:3b:be:b4:b0:31:a6:32:22:84:62:65:ce:c7:75:ae: a6:bd:cb:4b:1a:36:81:07:d1:9d:87:fe:29:81:75:2b:00:69: 03:fd:1c:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NlfNM5CFK/UaI6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyNzAzMDA1N1oXDTI2MDYyNTAzMDA1N1owLzEtMCsGA1UEAxMk ZDExZWRlNjctYmJhZS00NTkyLWIwNWUtOGEwYTUxYmNiNDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAFdQhI9kBTxXwRmyq5j+JQhyZST2jbTV7mU h38zvPOK/c7W7pRPpVTj2NvsCycFLVI/rwIh78xpBcBiRFoHqzmDVz86YnOGuQuw BSZkCyBUArY+uahe3DfK9V6eaq3N42XoKZekO+TYLyRNAftrs25k8Eqq3ZkWdtdA FknGuj/4Mv8QS5gHBXD1kkwSNX767exVWHw4oCATus1MoZ0Ux0uiWpOEeQr9UKF/ jZQeuzL6OraCA5amePJuOTarlgZJLlP/IkDkdWrYcGBP5KrOAwoC9Gdg/6WZ/MGk XPs2R28EpT4snKLbh5IAKohzpTyMLuR4ETB8/n65uj15tYf9LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNk8SNrrvsLrfzD+V99Wb/2lh14KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNThiZDRhMmYtODUzMS0z MjQ3LWIwN2ItZDZjMzNjYjk2YWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvYnV/wPt0jfnCivwf/J+hbeSLu1Y1IsTkzkmcUwtSTXYJZTs+v4cV5 ABhjDBX9kT5K0M51rLNKhpJzjDQtVrc/1cPSlb4SIuVflOuqwEMpE1h+ou/RUj7W VqiW5opY/4F2gGsVwMeqacqZNRrtzoN6QS/rD9zuLSoUc2zj/JfsTFg2guSIqWGL iiprwoAGA1wCwjd32IgEixD2W6UT1ZK7TQzEUY4JlltyCqBIXPBovzsBnW9BRUZl theCX8EgIU6ZhvRN27poXuDTS5QSYvcKzxJGTGU6lDaudzu+tLAxpjIihGJlzsd1 rqa9y0saNoEH0Z2H/imBdSsAaQP9HLY= -----END CERTIFICATE-----Generated at Fri Apr 17 10:18:14 2026 by rpki-client