$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5be81a37-e17e-311b-a5b0-58f4797a651d.roa File: 5be81a37-e17e-311b-a5b0-58f4797a651d.roa (raw, json) Hash identifier: fF5LJD3/bTrat3IwGdpmuyM+Dgma5W5uJaRUlbFNdOs= Subject key identifier: 64:D9:EE:7E:3D:3A:1C:31:80:98:06:34:C9:91:A8:B3:0B:73:89:C6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D0647AA43562ECEBB1BE80B40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5be81a37-e17e-311b-a5b0-58f4797a651d.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 19905 IP address blocks: 173.20.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:aa:43:56:2e:ce:bb:1b:e8:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=679310c6-d74d-4656-a6df-e8d2a8abd9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:92:e7:04:05:24:32:5e:be:d6:d4:3f:4e:f7: 90:ed:e7:1e:68:d4:ed:b5:4c:e4:38:3c:1f:d3:17: 0a:38:ed:a0:0a:7d:97:1c:84:ac:be:e4:e3:69:6b: a2:08:28:b1:88:a6:3a:54:52:5e:9e:a7:9b:95:24: fa:52:5a:39:c1:36:d7:40:73:18:f1:1b:1b:0e:60: 81:30:bc:bb:86:f8:6b:1d:45:a8:2e:3f:06:d0:77: 6d:d8:4c:e7:46:e4:fa:b6:00:1c:94:0e:93:61:d3: d1:56:44:46:82:7e:d7:18:c4:68:0e:4d:2c:41:b1: 8a:0a:6e:5d:96:fe:01:f6:c0:cb:0c:67:07:f8:f7: f5:51:75:08:b4:c6:a2:ca:2f:8e:21:5f:54:6a:ab: 41:3f:e9:3d:c5:46:48:6c:4c:b9:24:d2:2b:26:aa: 90:74:8d:12:25:7e:bd:05:dd:36:61:7c:c7:c7:35: a6:d2:9c:40:63:a8:5a:7d:2a:a7:09:b3:4e:6d:2e: 40:30:0d:f7:30:bd:19:47:e1:e7:fb:5e:90:ae:7a: f0:b3:e8:8b:d0:11:52:83:a5:77:d3:81:40:73:e9: 94:12:6b:1c:de:e5:9c:91:08:d9:11:42:f3:23:e9: 5c:a5:cf:f1:a5:84:03:25:65:b9:cf:2a:4a:15:5a: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D9:EE:7E:3D:3A:1C:31:80:98:06:34:C9:91:A8:B3:0B:73:89:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5be81a37-e17e-311b-a5b0-58f4797a651d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:19:fb:f5:69:88:6e:81:e5:64:93:8f:ac:e5:ee:49:94:23: 51:99:f5:2e:d8:03:3b:98:50:32:20:e2:c5:a7:83:d1:a6:f2: ad:db:a7:d3:21:d7:7d:4a:d3:d2:ce:f9:2e:d4:57:42:c0:d9: 22:f6:5a:c5:34:58:84:99:1a:20:df:e3:61:00:00:eb:ae:df: 66:26:8f:fc:05:d1:99:23:ac:4c:c2:81:38:78:9d:fc:25:bf: 54:19:52:21:08:fa:26:93:84:8d:cb:18:b3:e3:ee:20:e8:cf: 30:e3:78:67:2a:4f:c5:43:2b:50:fb:44:66:a4:b7:80:0e:95: 3a:33:57:70:95:1a:3a:84:40:f6:ef:85:57:46:c9:35:c9:be: 9b:a7:74:0a:09:d6:6b:8b:d3:8f:94:a1:06:6a:eb:c5:2b:24: 84:06:6e:ec:22:1e:56:c5:07:58:89:3c:d0:61:fb:9b:29:3e: 5c:ce:61:fd:4d:61:f1:a6:32:a2:25:65:39:ab:aa:fa:21:06: f9:bd:db:ac:e8:6f:19:7f:0c:52:b2:c7:72:b0:c1:42:8c:a9: bf:0a:0d:be:d3:44:3b:31:55:f0:27:17:18:d3:4a:13:62:01: 03:f9:72:1c:db:1c:6d:91:aa:75:b5:06:07:f5:0c:86:d1:b5: 1d:65:aa:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR6pDVi7OuxvoC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk Njc5MzEwYzYtZDc0ZC00NjU2LWE2ZGYtZThkMmE4YWJkOWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJLnBAUkMl6+1tQ/TveQ7eceaNTttUzkODwf 0xcKOO2gCn2XHISsvuTjaWuiCCixiKY6VFJenqeblST6Ulo5wTbXQHMY8RsbDmCB MLy7hvhrHUWoLj8G0Hdt2EznRuT6tgAclA6TYdPRVkRGgn7XGMRoDk0sQbGKCm5d lv4B9sDLDGcH+Pf1UXUItMaiyi+OIV9UaqtBP+k9xUZIbEy5JNIrJqqQdI0SJX69 Bd02YXzHxzWm0pxAY6hafSqnCbNObS5AMA33ML0ZR+Hn+16Qrnrws+iL0BFSg6V3 04FAc+mUEmsc3uWckQjZEULzI+lcpc/xpYQDJWW5zypKFVoIPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTZ7n49OhwxgJgGNMmRqLMLc4nGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWJlODFhMzctZTE3ZS0z MTFiLWE1YjAtNThmNDc5N2E2NTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQZ+/VpiG6B5WSTj6zl7kmUI1GZ9S7YAzuYUDIg4sWng9Gm8q3bp9Mh 131K09LO+S7UV0LA2SL2WsU0WISZGiDf42EAAOuu32Ymj/wF0ZkjrEzCgTh4nfwl v1QZUiEI+iaThI3LGLPj7iDozzDjeGcqT8VDK1D7RGakt4AOlTozV3CVGjqEQPbv hVdGyTXJvpundAoJ1muL04+UoQZq68UrJIQGbuwiHlbFB1iJPNBh+5spPlzOYf1N YfGmMqIlZTmrqvohBvm926zobxl/DFKyx3KwwUKMqb8KDb7TRDsxVfAnFxjTShNi AQP5chzbHG2RqnW1Bgf1DIbRtR1lqnA= -----END CERTIFICATE-----Generated at Mon Mar 2 00:44:04 2026 by rpki-client