$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5b6e4a89-ce6d-31be-b194-24c92206bea6.roa File: 5b6e4a89-ce6d-31be-b194-24c92206bea6.roa (raw, json) Hash identifier: TmW8AC0FHNDKGiiZ5lMNgrwwrhGjQ2hKHHKTYrhQUsM= Subject key identifier: 85:81:CC:E3:31:D5:02:84:92:4C:C0:58:BC:EB:53:FA:22:10:3D:F6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D5B4FA37C009E8C511C2E3000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5b6e4a89-ce6d-31be-b194-24c92206bea6.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 30036 IP address blocks: 173.27.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a3:7c:00:9e:8c:51:1c:2e:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=8701cdfb-86bd-4904-bbd9-bf9c822fec71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:71:f5:63:f9:8e:82:a3:91:96:b8:6c:c0:49: 0d:91:8e:99:41:58:2c:a3:bc:b2:dd:e2:cf:0e:07: 8d:6e:58:01:46:2e:48:c3:5f:0c:95:af:e1:76:09: ec:f1:71:00:5c:b0:53:64:52:23:a6:e0:f6:d8:1e: a3:ca:50:fb:7b:3d:fb:82:5d:d4:49:82:b2:19:b7: 40:5b:9e:22:07:e9:56:4a:e7:c2:b5:e1:aa:4f:5d: 6b:30:c4:00:db:39:24:71:9b:f3:31:cf:1a:13:ac: 1e:9a:97:b8:01:cd:13:8e:10:66:1f:0b:60:15:88: f9:e8:de:a4:34:2e:44:22:1b:5f:ea:ec:c1:66:e7: 4b:e1:bb:56:07:90:c4:7c:24:0a:b3:1d:82:52:a3: b7:10:72:42:11:73:52:c8:38:c6:98:44:f4:3f:80: 2d:fb:cb:33:76:88:f2:c9:bd:36:7b:97:18:e5:60: af:80:ae:bf:78:72:e7:82:28:d8:f2:89:47:84:87: 21:92:aa:cd:70:43:bb:25:70:d1:fb:bd:25:cc:cf: 85:f6:5a:4c:d9:b1:60:98:96:6d:87:77:3f:39:4b: 87:7d:f7:61:b2:f3:19:be:2c:41:b9:82:d1:53:56: c2:f1:e7:12:43:66:f4:c5:89:12:1d:fb:78:c0:4c: 47:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:81:CC:E3:31:D5:02:84:92:4C:C0:58:BC:EB:53:FA:22:10:3D:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5b6e4a89-ce6d-31be-b194-24c92206bea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:00:18:29:08:b8:e5:4d:86:88:c0:f4:c2:16:f3:5a:5a:3a: 4f:48:c5:30:30:5f:a2:ff:82:22:46:af:27:d4:76:4c:6b:3d: 0a:e4:eb:1c:0f:8e:ed:48:64:fe:49:67:03:f3:d4:1e:f4:c2: 33:dd:ba:95:e1:9f:c4:28:5d:09:27:8f:91:81:38:51:d6:e0: 00:4a:19:27:25:14:f8:95:16:7d:7c:00:f5:52:17:e1:64:6f: 48:ef:da:73:63:36:0f:a3:a3:ec:36:a8:42:40:4e:93:76:76: e9:4b:37:d9:06:01:8e:38:12:0d:84:1d:ca:02:2d:0d:b4:e7: c7:1a:88:4a:80:4f:e6:64:5e:c1:29:6d:e9:f2:a0:5e:29:3e: 3a:95:4e:38:95:5d:b9:df:74:66:d2:34:0d:7f:e6:38:f6:c2: 99:c4:6d:e6:c7:92:b7:8d:57:9b:0d:62:00:ba:a6:e7:df:83: fa:93:c1:b5:6f:45:67:65:7d:6a:2f:c4:0f:a2:fd:9e:6a:10: d5:c2:33:21:ed:ce:97:4e:05:f1:47:0c:89:b6:7e:9e:d5:ae: c4:ef:89:fe:f7:6f:a1:2a:29:05:b1:c8:46:5b:8c:c1:c3:44: b0:e5:a6:92:30:cf:a5:88:16:07:e5:35:27:64:db:54:d2:c8: 68:dd:79:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6N8AJ6MURwuMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk ODcwMWNkZmItODZiZC00OTA0LWJiZDktYmY5YzgyMmZlYzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHH1Y/mOgqORlrhswEkNkY6ZQVgso7yy3eLP DgeNblgBRi5Iw18Mla/hdgns8XEAXLBTZFIjpuD22B6jylD7ez37gl3USYKyGbdA W54iB+lWSufCteGqT11rMMQA2zkkcZvzMc8aE6wempe4Ac0TjhBmHwtgFYj56N6k NC5EIhtf6uzBZudL4btWB5DEfCQKsx2CUqO3EHJCEXNSyDjGmET0P4At+8szdojy yb02e5cY5WCvgK6/eHLngijY8olHhIchkqrNcEO7JXDR+70lzM+F9lpM2bFgmJZt h3c/OUuHffdhsvMZvixBuYLRU1bC8ecSQ2b0xYkSHft4wExHrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWBzOMx1QKEkkzAWLzrU/oiED32MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWI2ZTRhODktY2U2ZC0z MWJlLWIxOTQtMjRjOTIyMDZiZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkAGCkIuOVNhojA9MIW81paOk9IxTAwX6L/giJGryfUdkxrPQrk6xwP ju1IZP5JZwPz1B70wjPdupXhn8QoXQknj5GBOFHW4ABKGSclFPiVFn18APVSF+Fk b0jv2nNjNg+jo+w2qEJATpN2dulLN9kGAY44Eg2EHcoCLQ2058caiEqAT+ZkXsEp benyoF4pPjqVTjiVXbnfdGbSNA1/5jj2wpnEbebHkreNV5sNYgC6puffg/qTwbVv RWdlfWovxA+i/Z5qENXCMyHtzpdOBfFHDIm2fp7VrsTvif73b6EqKQWxyEZbjMHD RLDlppIwz6WIFgflNSdk21TSyGjdeaU= -----END CERTIFICATE-----Generated at Fri Apr 17 14:16:39 2026 by rpki-client