$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58c98bd2-dcad-3956-be00-36aa73050259.roa File: 58c98bd2-dcad-3956-be00-36aa73050259.roa (raw, json) Hash identifier: r5sAFMBRoUmbhz7XZvWxVm873MB6r3u0zXDrBhUwzdM= Subject key identifier: EE:42:40:46:66:0F:0C:AE:B3:65:33:17:16:5C:9A:17:18:C4:81:F1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D59EAB56B7A578989D2FA4A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58c98bd2-dcad-3956-be00-36aa73050259.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 30036 IP address blocks: 173.16.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b5:6b:7a:57:89:89:d2:fa:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=390d11ee-0c35-440c-95f9-f67558beb60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:af:bf:03:97:f0:3a:4c:67:2b:35:97:3b:d7: 90:bb:ba:e8:ac:6c:20:6b:04:7d:a3:a0:1c:54:ec: f3:26:c3:a4:79:f0:37:ff:b3:75:ca:47:79:4d:9b: ab:fa:fb:38:da:8e:34:4b:29:f5:b7:37:21:7d:0d: e8:61:1f:7d:d7:35:58:57:9b:09:2d:f2:20:81:d9: d4:af:54:ef:ff:d5:85:e6:0e:76:2a:ac:f9:7b:6a: e2:de:63:db:31:1a:05:93:4c:bd:5c:6e:01:22:76: cb:24:46:08:93:70:86:45:8e:48:66:17:9b:54:ea: 3f:c9:6d:f1:06:ce:ab:20:a7:e3:ec:71:9f:0f:bd: 93:90:3a:f5:48:bc:64:87:bd:47:ea:18:ff:04:10: b2:77:2f:e5:85:b4:33:c4:6a:b4:28:7a:f4:5d:cb: 9d:41:b2:a5:14:52:ca:97:88:56:60:3a:9f:ad:be: eb:06:d8:25:da:9f:6b:bc:c0:95:60:3f:17:0f:cf: 45:8c:b6:c3:4c:c2:24:80:86:cd:c7:29:2e:34:da: fc:d3:67:37:cc:7e:87:bc:cd:81:21:85:bb:72:b1: 88:91:43:10:8d:5c:33:11:5c:2f:56:6e:e3:ea:66: 26:f3:dd:cc:5b:38:94:1c:31:f9:c6:7b:45:26:08: 6e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:42:40:46:66:0F:0C:AE:B3:65:33:17:16:5C:9A:17:18:C4:81:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58c98bd2-dcad-3956-be00-36aa73050259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:62:2a:2a:24:8f:ed:2a:53:a4:f2:20:2b:ab:bc:e9:9b:e2: 6a:38:45:02:e4:eb:fe:94:03:75:78:aa:60:55:83:bd:86:6e: cb:65:f9:25:5d:1e:58:51:b3:9e:2f:01:2d:a8:e2:46:7a:75: fc:eb:b5:63:8e:d5:b4:6a:a4:ed:81:14:02:66:45:73:94:e1: 83:c6:f7:66:a9:c3:3e:e7:02:75:3f:ae:41:ba:f7:08:a0:4d: 33:06:3e:2b:15:bd:fd:dd:47:4e:fe:1e:3e:78:3f:e6:39:e6: ea:22:f3:0a:dd:08:c5:de:03:53:50:c1:3f:60:ba:ce:7d:d0: 14:f3:a7:88:a4:45:83:2e:22:db:53:1a:0b:6b:d5:78:fb:73: 8c:be:e6:9b:44:cd:15:24:b2:46:88:2e:0a:88:ca:c8:8f:e8: 4f:33:6b:75:42:aa:dd:a0:37:24:a3:fd:4b:f8:a9:bf:68:6b: 75:8c:a7:61:50:9f:a4:cd:30:ca:88:70:c9:9e:07:ed:c6:ed: bb:26:ca:2e:5c:9b:22:47:22:89:cd:3a:c6:1a:d5:4b:27:37: 4d:7e:e0:e6:f5:d8:f2:e5:05:54:cc:0e:c6:1b:c4:3d:6c:28: 38:1c:bc:77:ae:9b:09:d0:8c:27:c6:4d:cb:68:f7:e4:3a:25: 46:a0:3b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6rVreleJidL6SoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MzkwZDExZWUtMGMzNS00NDBjLTk1ZjktZjY3NTU4YmViNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6q+/A5fwOkxnKzWXO9eQu7rorGwgawR9o6Ac VOzzJsOkefA3/7N1ykd5TZur+vs42o40Syn1tzchfQ3oYR991zVYV5sJLfIggdnU r1Tv/9WF5g52Kqz5e2ri3mPbMRoFk0y9XG4BInbLJEYIk3CGRY5IZhebVOo/yW3x Bs6rIKfj7HGfD72TkDr1SLxkh71H6hj/BBCydy/lhbQzxGq0KHr0XcudQbKlFFLK l4hWYDqfrb7rBtgl2p9rvMCVYD8XD89FjLbDTMIkgIbNxykuNNr802c3zH6HvM2B IYW7crGIkUMQjVwzEVwvVm7j6mYm893MWziUHDH5xntFJghuQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5CQEZmDwyus2UzFxZcmhcYxIHxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNThjOThiZDItZGNhZC0z OTU2LWJlMDAtMzZhYTczMDUwMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApiKiokj+0qU6TyICurvOmb4mo4RQLk6/6UA3V4qmBVg72Gbstl+SVd HlhRs54vAS2o4kZ6dfzrtWOO1bRqpO2BFAJmRXOU4YPG92apwz7nAnU/rkG69wig TTMGPisVvf3dR07+Hj54P+Y55uoi8wrdCMXeA1NQwT9gus590BTzp4ikRYMuIttT Ggtr1Xj7c4y+5ptEzRUkskaILgqIysiP6E8za3VCqt2gNySj/Uv4qb9oa3WMp2FQ n6TNMMqIcMmeB+3G7bsmyi5cmyJHIonNOsYa1UsnN01+4Ob12PLlBVTMDsYbxD1s KDgcvHeumwnQjCfGTcto9+Q6JUagO/A= -----END CERTIFICATE-----Generated at Fri Apr 17 18:21:17 2026 by rpki-client