$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/646efc33-ad89-3151-81e9-7425077b42b0.roa File: 646efc33-ad89-3151-81e9-7425077b42b0.roa (raw, json) Hash identifier: RDZSn/j77ZZi8oNWSeRHcnp7sNWCXMKysZ1Y+DudDhk= Subject key identifier: CB:5D:7C:D6:D5:11:7C:23:80:E0:0F:F3:47:57:31:AC:E5:AA:CB:43 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059B33071BD058AC19820400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/646efc33-ad89-3151-81e9-7425077b42b0.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.18.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:33:07:1b:d0:58:ac:19:82:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=d2d470bf-61c1-4cb5-8e2e-623694702b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fd:95:74:27:ae:29:7a:42:47:d7:54:cf:fc: ae:31:75:ab:25:78:4c:e1:da:24:44:a9:1e:0b:17: bc:e5:33:ba:fc:19:38:81:40:fc:16:68:26:bd:02: 69:6c:f9:c7:74:35:dc:8d:09:7c:94:27:01:eb:5a: c0:c5:ee:25:9e:7a:5c:0b:47:3a:1d:8e:25:e7:33: e7:2d:65:c8:6e:96:3b:fa:75:85:3e:dd:e2:a4:56: e2:51:55:c8:ba:81:72:bb:3e:f5:1b:3b:e7:b7:d5: 2c:19:01:68:4d:c8:f8:ba:65:27:04:73:b3:5a:7e: 58:ec:55:ef:60:0a:09:1b:32:89:47:73:2d:fc:7f: 07:a3:60:a2:81:9f:ad:c9:8e:65:4b:0a:50:b9:b3: 9f:93:b0:6b:20:61:cb:ee:62:7e:ff:4f:46:25:ce: 2a:45:bc:55:4f:f8:08:9e:69:72:e9:16:3e:2f:e6: dd:9a:f0:0c:e3:7f:e8:1f:b4:bc:bb:3f:a3:96:11: 65:23:24:89:9e:40:c8:f0:6a:de:e8:34:36:b4:8d: d6:f5:a8:50:77:bb:b5:66:b6:47:95:7f:e0:af:04: f9:5d:35:48:88:83:d2:79:05:86:79:a5:a4:40:63: 24:58:15:f4:d4:97:60:01:fa:10:d0:dd:16:77:50: fa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5D:7C:D6:D5:11:7C:23:80:E0:0F:F3:47:57:31:AC:E5:AA:CB:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/646efc33-ad89-3151-81e9-7425077b42b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:eb:b8:ae:de:9a:c8:fd:70:d5:ce:38:f3:00:91:e7:ae:14: ff:dc:37:df:c6:04:cf:ab:5d:35:f5:8d:cf:9f:14:b3:d8:07: 73:e0:03:92:d1:04:8e:50:a6:6e:19:64:f3:2c:e6:99:3f:ac: b7:72:6d:6f:f2:a8:e6:2a:df:19:3c:b6:b9:c8:1d:c7:0b:44: c4:47:99:34:a8:c8:f5:95:8a:f7:41:be:75:cb:c4:b8:c1:f8: df:9b:20:28:e7:14:2c:2b:ec:3f:f7:46:08:71:02:ad:46:4b: 59:bb:ea:12:d3:ac:18:79:b4:7b:05:4c:d8:09:7a:01:41:99: 95:51:86:59:81:38:c5:59:6d:3a:3b:10:32:f9:a0:0a:fb:31: d9:9b:b3:6b:8e:0c:08:6a:59:32:41:83:9d:6d:87:21:0e:21: 76:f2:8d:b9:94:99:3a:d2:d7:ed:d0:6b:1e:e9:0d:f2:df:2c: c5:c5:28:17:ae:c7:8b:e8:2b:0a:8b:9f:24:60:c3:3d:16:f2: b0:b0:34:ee:0c:98:e2:45:c2:7f:30:58:d8:22:39:5a:3f:95: a5:86:dd:27:3c:d8:00:8b:1a:37:d4:d4:a8:7a:a7:1a:a2:94: 1a:66:0a:ae:ce:b4:47:b1:fd:74:ad:93:88:29:22:b5:a7:2b: 23:09:eb:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FmzMHG9BYrBmCBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZDJkNDcwYmYtNjFjMS00Y2I1LThlMmUtNjIzNjk0NzAyYjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/2VdCeuKXpCR9dUz/yuMXWrJXhM4dokRKke Cxe85TO6/Bk4gUD8FmgmvQJpbPnHdDXcjQl8lCcB61rAxe4lnnpcC0c6HY4l5zPn LWXIbpY7+nWFPt3ipFbiUVXIuoFyuz71Gzvnt9UsGQFoTcj4umUnBHOzWn5Y7FXv YAoJGzKJR3Mt/H8Ho2CigZ+tyY5lSwpQubOfk7BrIGHL7mJ+/09GJc4qRbxVT/gI nmly6RY+L+bdmvAM43/oH7S8uz+jlhFlIySJnkDI8Gre6DQ2tI3W9ahQd7u1ZrZH lX/grwT5XTVIiIPSeQWGeaWkQGMkWBX01JdgAfoQ0N0Wd1D6BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtdfNbVEXwjgOAP80dXMazlqstDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjQ2ZWZjMzMtYWQ4OS0z MTUxLTgxZTktNzQyNTA3N2I0MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfruK7emsj9cNXOOPMAkeeuFP/cN9/GBM+rXTX1jc+fFLPYB3PgA5LR BI5Qpm4ZZPMs5pk/rLdybW/yqOYq3xk8trnIHccLRMRHmTSoyPWVivdBvnXLxLjB +N+bICjnFCwr7D/3RghxAq1GS1m76hLTrBh5tHsFTNgJegFBmZVRhlmBOMVZbTo7 EDL5oAr7Mdmbs2uODAhqWTJBg51thyEOIXbyjbmUmTrS1+3Qax7pDfLfLMXFKBeu x4voKwqLnyRgwz0W8rCwNO4MmOJFwn8wWNgiOVo/laWG3Sc82ACLGjfU1Kh6pxqi lBpmCq7OtEex/XStk4gpIrWnKyMJ68g= -----END CERTIFICATE-----Generated at Sat Jun 13 20:58:09 2026 by rpki-client