$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa File: 85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa (raw, json) Hash identifier: 84Xq3RVYwPD+UNGP5HH8FV9ZPbY9MBFE2TrLwbWnbis= Subject key identifier: F5:0F:02:AD:75:4D:43:95:31:93:40:03:EE:B6:3A:73:23:D6:35:B6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059C59E361EAB8FD044609C8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.28.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:59:e3:61:ea:b8:fd:04:46:09:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=7295e1fd-3e48-48f4-80fc-a325e5ea9734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8a:fc:1a:7a:b1:04:55:ae:e1:11:a0:2f:63: 38:b3:32:43:e7:1e:f7:b6:d4:06:f5:6b:68:b8:04: 73:46:6e:5b:17:60:f4:ef:8b:32:1f:3b:ff:68:65: 51:23:62:7c:a0:a4:37:3e:57:e3:e9:00:24:31:92: 2b:0c:db:73:4f:b8:f7:f2:5e:90:20:0c:c3:70:ea: 01:c3:f6:bc:20:65:e6:75:0d:48:9a:f8:a5:b7:fa: 25:82:70:d7:d2:4e:83:c1:82:9f:60:91:75:f2:0b: f0:e4:9d:63:45:72:e3:63:27:26:42:4c:ed:c1:10: 9e:ff:18:c1:c9:28:24:e8:89:bb:3d:34:12:27:a2: 0d:02:38:7e:3f:55:49:af:db:33:c3:1d:a0:46:8d: fb:d3:1a:e6:6a:b3:e0:dd:e5:5c:d6:c3:29:64:46: 05:53:cb:8d:15:f6:fd:e6:55:79:a4:51:b4:84:66: b7:bc:61:b1:d8:b6:a5:22:0a:7e:21:e8:b8:47:da: 63:69:54:69:21:2d:bb:2b:19:31:6b:23:da:0f:ef: e4:ec:a3:5d:02:ac:bd:79:78:20:f7:60:f5:27:6e: 3f:64:5a:e8:1a:86:a3:88:f2:d5:e4:3a:f3:2e:50: 42:13:00:49:03:ce:0c:4c:00:3d:c9:77:cd:42:35: 6f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0F:02:AD:75:4D:43:95:31:93:40:03:EE:B6:3A:73:23:D6:35:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:af:23:33:c6:7a:54:79:f5:2c:df:47:4c:1b:5b:32:c1:0a: 96:3c:61:e7:f1:6f:10:30:52:04:db:a0:94:d3:c7:f6:02:32: 21:17:c5:80:a5:8d:01:05:62:aa:f4:35:f2:0b:a7:09:a3:e8: 90:11:50:23:60:b7:5b:a5:df:3a:a4:b0:c2:3c:47:63:f7:da: e9:6b:ce:dd:c4:75:83:9c:5d:cc:76:6b:9a:c0:51:4e:82:42: 79:ac:e6:6c:cc:e4:cc:92:a7:7b:26:57:91:4e:6e:c5:ed:9d: 6c:78:b3:4d:0c:b7:02:91:67:3c:e0:ba:94:aa:82:0e:30:0d: de:ed:cd:6c:e2:72:bf:98:4f:ff:5b:83:07:15:18:9e:a3:35: ac:59:d8:a1:30:70:b4:27:e5:00:80:6a:1c:9d:e7:5d:aa:45: 19:14:90:b0:6c:f9:9b:7f:76:51:62:74:ad:33:05:ab:19:6d: 65:29:31:20:4f:8f:aa:f4:0a:1f:be:2e:ac:60:df:b5:0b:da: 10:cc:50:e3:2b:6d:a9:de:a6:2e:bb:be:dd:00:98:04:7e:c3: 92:1f:57:67:41:1b:9b:ce:41:c2:d9:73:41:7c:88:f7:e7:f7: 11:58:b7:de:df:55:51:f7:e7:35:66:dc:2d:1d:78:87:e0:67: 89:09:26:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnFnjYeq4/QRGCcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NzI5NWUxZmQtM2U0OC00OGY0LTgwZmMtYTMyNWU1ZWE5NzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4r8GnqxBFWu4RGgL2M4szJD5x73ttQG9Wto uARzRm5bF2D074syHzv/aGVRI2J8oKQ3Plfj6QAkMZIrDNtzT7j38l6QIAzDcOoB w/a8IGXmdQ1Imvilt/olgnDX0k6DwYKfYJF18gvw5J1jRXLjYycmQkztwRCe/xjB ySgk6Im7PTQSJ6INAjh+P1VJr9szwx2gRo370xrmarPg3eVc1sMpZEYFU8uNFfb9 5lV5pFG0hGa3vGGx2LalIgp+Iei4R9pjaVRpIS27KxkxayPaD+/k7KNdAqy9eXgg 92D1J24/ZFroGoajiPLV5DrzLlBCEwBJA84MTAA9yXfNQjVvkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUPAq11TUOVMZNAA+62OnMj1jW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVlNmRiMjItZmM1MC0z ZjAxLWIxMDAtZGY4YWUxZThmNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqvIzPGelR59SzfR0wbWzLBCpY8YefxbxAwUgTboJTTx/YCMiEXxYCl jQEFYqr0NfILpwmj6JARUCNgt1ul3zqksMI8R2P32ulrzt3EdYOcXcx2a5rAUU6C Qnms5mzM5MySp3smV5FObsXtnWx4s00MtwKRZzzgupSqgg4wDd7tzWzicr+YT/9b gwcVGJ6jNaxZ2KEwcLQn5QCAahyd512qRRkUkLBs+Zt/dlFidK0zBasZbWUpMSBP j6r0Ch++Lqxg37UL2hDMUOMrbanepi67vt0AmAR+w5IfV2dBG5vOQcLZc0F8iPfn 9xFYt97fVVH35zVm3C0deIfgZ4kJJsE= -----END CERTIFICATE-----Generated at Sun Jun 14 01:37:18 2026 by rpki-client