$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a8a1aef-d3c9-3407-be99-5421100118d0.roa File: 8a8a1aef-d3c9-3407-be99-5421100118d0.roa (raw, json) Hash identifier: vLSCdQpi7hRFTxZ8ijxbzYQuj34+0XsYIBjYorTi+so= Subject key identifier: E3:10:F5:AE:6D:1F:A2:32:5E:7E:87:ED:78:0D:D8:F8:4D:D2:27:36 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D5B4FA36F9081AAC4FC21B580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a8a1aef-d3c9-3407-be99-5421100118d0.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 30036 IP address blocks: 173.20.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a3:6f:90:81:aa:c4:fc:21:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=d694e7a7-51bf-456c-91e7-82580682e0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:49:cd:5e:25:db:08:e4:40:cf:b3:54:13:19: 7d:9c:54:31:42:39:65:92:d0:99:47:9b:d7:e5:4b: 55:17:d5:8f:07:cb:86:15:17:4d:87:98:dc:a6:0d: 6d:32:03:68:c4:19:44:15:f3:36:0d:a5:c7:fd:12: fc:17:90:5f:a3:5f:00:e3:08:77:aa:af:04:4e:d4: 86:68:88:8e:3d:d7:b1:56:12:13:0a:ae:e5:f3:72: 55:f5:85:24:4e:52:3f:bc:66:3c:8d:d0:59:21:3d: 85:82:e6:ee:2b:bf:f6:53:11:d7:07:86:c0:63:e8: d6:39:ae:35:7c:f1:46:2a:b9:53:94:d9:58:63:aa: aa:3e:24:e4:26:5a:8d:2b:2d:f6:5b:9e:cf:4b:fa: 0c:7e:86:de:5f:fc:ee:2a:e0:ee:2d:e1:48:f8:aa: de:71:2c:b3:11:56:7d:68:df:c1:fe:fa:ae:e2:9e: fe:8d:66:09:01:36:54:a1:41:11:8c:86:c7:c5:55: 4d:1f:96:c6:ee:c0:3e:c9:fb:81:e1:59:77:c1:7c: ec:c5:f8:da:f4:9c:4a:3b:37:3b:3b:55:91:db:5d: 23:0f:59:75:95:68:a8:3d:5c:82:fb:79:6a:68:b9: a9:21:1d:91:dc:2a:b2:27:9c:41:22:b8:9e:74:1f: ba:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:10:F5:AE:6D:1F:A2:32:5E:7E:87:ED:78:0D:D8:F8:4D:D2:27:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a8a1aef-d3c9-3407-be99-5421100118d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:82:72:dc:82:d7:b7:fb:05:8d:5e:da:8b:f9:6b:af:35:88: 9f:2f:22:a4:03:76:c7:41:c0:76:55:a5:ef:42:04:b6:f3:ba: 2f:e4:19:f8:94:5a:4b:80:01:4d:51:e6:da:4c:6f:ea:dc:35: ff:cf:4f:56:83:01:45:1f:93:ce:47:22:54:ea:70:a3:89:ba: c1:2c:f9:64:b4:3f:d7:68:2a:e4:90:13:4d:11:fc:38:07:f4: 55:fa:9f:d1:e2:ca:b8:8d:74:c1:08:13:59:c7:13:09:f8:a1: d2:cd:08:99:8b:7d:59:50:10:ac:4a:8d:9e:27:e9:12:ed:27: cb:53:61:59:cf:36:60:0b:61:bb:df:d5:79:01:17:b2:ec:ab: fe:15:e3:e5:49:0c:76:f4:31:e4:83:17:7d:dd:8f:bd:0a:96: 40:e7:64:bf:32:9d:61:b2:cd:22:57:fc:37:75:fc:20:3e:2b: 97:fa:4a:37:ff:7f:cc:b6:44:07:fd:d1:9e:04:c7:97:84:8c: b6:3e:98:d2:ff:60:f0:53:ec:9d:76:d9:07:2e:52:f9:11:3a: d7:0a:2a:be:4b:38:c5:2b:97:18:9b:21:79:9a:55:f5:70:b0: a1:e0:db:5b:73:50:3a:42:9d:14:01:af:d2:24:b1:74:08:70: be:cb:74:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6NvkIGqxPwhtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk ZDY5NGU3YTctNTFiZi00NTZjLTkxZTctODI1ODA2ODJlMGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiknNXiXbCORAz7NUExl9nFQxQjllktCZR5vX 5UtVF9WPB8uGFRdNh5jcpg1tMgNoxBlEFfM2DaXH/RL8F5Bfo18A4wh3qq8ETtSG aIiOPdexVhITCq7l83JV9YUkTlI/vGY8jdBZIT2FgubuK7/2UxHXB4bAY+jWOa41 fPFGKrlTlNlYY6qqPiTkJlqNKy32W57PS/oMfobeX/zuKuDuLeFI+KrecSyzEVZ9 aN/B/vqu4p7+jWYJATZUoUERjIbHxVVNH5bG7sA+yfuB4Vl3wXzsxfja9JxKOzc7 O1WR210jD1l1lWioPVyC+3lqaLmpIR2R3CqyJ5xBIriedB+6TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMQ9a5tH6IyXn6H7XgN2PhN0ic2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGE4YTFhZWYtZDNjOS0z NDA3LWJlOTktNTQyMTEwMDExOGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiCctyC17f7BY1e2ov5a681iJ8vIqQDdsdBwHZVpe9CBLbzui/kGfiU WkuAAU1R5tpMb+rcNf/PT1aDAUUfk85HIlTqcKOJusEs+WS0P9doKuSQE00R/DgH 9FX6n9HiyriNdMEIE1nHEwn4odLNCJmLfVlQEKxKjZ4n6RLtJ8tTYVnPNmALYbvf 1XkBF7Lsq/4V4+VJDHb0MeSDF33dj70KlkDnZL8ynWGyzSJX/Dd1/CA+K5f6Sjf/ f8y2RAf90Z4Ex5eEjLY+mNL/YPBT7J122QcuUvkROtcKKr5LOMUrlxibIXmaVfVw sKHg21tzUDpCnRQBr9IksXQIcL7LdI8= -----END CERTIFICATE-----Generated at Fri Apr 17 11:44:34 2026 by rpki-client