$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa File: 8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa (raw, json) Hash identifier: MSCfrq+KsunQjhSZK2UE7rJi4xbu6BvHkchyAr3+MK8= Subject key identifier: 5B:FF:89:AF:19:A1:2B:DA:0A:FC:AF:2C:C8:96:75:AF:19:67:B6:99 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E0700A360E8DC1987A7469DE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa Signing time: Mon 01 Jun 2026 13:00:10 +0000 ROA not before: Mon 01 Jun 2026 13:00:10 +0000 ROA not after: Sun 30 Aug 2026 13:00:10 +0000 asID: 30036 IP address blocks: 173.17.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:00:a3:60:e8:dc:19:87:a7:46:9d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 13:00:10 2026 GMT Not After : Aug 30 13:00:10 2026 GMT Subject: CN=1eeafbb1-c221-4d4f-bdf8-7902945b4cd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f8:69:18:cb:ad:7f:e6:42:f0:4c:0c:1e:97: 1c:25:c0:39:10:2f:d5:70:b1:58:b9:f3:50:d9:1e: 9a:fb:e8:b6:aa:b0:a9:48:c6:77:6f:1b:19:af:28: e6:4b:ee:4c:93:9d:f9:76:a3:b7:d9:10:50:3b:95: 60:5c:83:df:00:ec:77:01:29:18:5d:6b:7e:d2:bf: 7d:6f:a9:f3:f4:19:78:d1:ae:91:06:43:c9:7a:00: 80:fb:f0:da:c3:7f:bf:da:3c:e6:b7:08:7a:b5:28: 3b:11:3c:57:cd:d0:3b:fd:5d:8d:4d:16:a5:bd:c5: 16:35:fb:c1:e7:57:b3:75:58:05:e4:f0:df:2d:e8: ae:1b:2d:c1:35:54:bc:81:bb:ea:93:ba:fe:56:d0: c2:47:c3:28:80:5f:22:45:10:37:7d:74:d6:3c:21: 14:37:b4:86:32:33:6b:9b:07:da:7e:31:d9:d2:74: 71:67:39:a1:99:3e:fe:6c:e0:53:27:62:91:01:47: fc:cd:ad:db:d4:14:bc:3d:9c:3c:b7:34:35:3e:92: ab:1b:73:ec:a9:55:66:43:07:10:3a:b3:1e:1c:90: 82:95:65:5c:db:cd:09:7a:e1:d8:50:81:7a:69:0f: 58:e4:14:c5:6c:b1:24:59:19:b0:3b:df:6e:84:90: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FF:89:AF:19:A1:2B:DA:0A:FC:AF:2C:C8:96:75:AF:19:67:B6:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e12cfab-36ac-3b28-8dda-9f2232befc3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ca:3b:6e:fc:61:e6:81:fb:8e:1c:b2:7d:a2:c9:43:8d:1b: eb:63:d0:91:a4:fd:cd:7a:a5:e0:7d:c6:bb:ca:f4:f9:c9:51: 18:da:e9:08:bd:72:dc:04:c9:1a:ae:aa:87:96:6a:f9:50:02: ad:4e:76:7f:e2:c0:1a:14:67:c1:a4:1d:58:4f:8d:56:c1:0d: b6:3b:42:b7:d0:b9:a6:7f:13:6e:d4:06:e8:84:ca:b7:a8:25: 6d:7e:35:f4:22:1a:f8:04:67:e1:e5:5e:22:8e:7b:7a:98:f0: 0e:a2:7b:ca:0d:78:c3:e7:86:aa:03:ba:25:ea:1b:2b:74:9e: 47:56:62:a3:8c:99:f8:40:1b:08:11:8d:86:18:73:e9:f9:8f: 34:20:a8:79:b2:56:53:c6:8c:1e:fc:8b:2a:43:c6:c7:67:95: a8:fa:e3:b3:ec:a7:fc:e3:2d:8e:0e:da:95:33:95:dc:18:66: 76:a1:3a:2e:3f:08:bd:4b:38:01:f2:0c:5c:d1:1b:74:fc:36: 02:6b:2a:ff:a0:c1:ac:8d:25:5e:44:8d:15:38:3d:93:ec:5a: 9d:9d:44:1d:f8:ab:35:13:64:fd:aa:d6:1f:90:82:93:42:fa: 90:0f:0e:4b:2b:96:bf:16:96:06:d6:b4:2d:7f:12:26:ce:8d: 3e:2f:b7:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4HAKNg6NwZh6dGneAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTEzMDAxMFoXDTI2MDgzMDEzMDAxMFowLzEtMCsGA1UEAxMk MWVlYWZiYjEtYzIyMS00ZDRmLWJkZjgtNzkwMjk0NWI0Y2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/hpGMutf+ZC8EwMHpccJcA5EC/VcLFYufNQ 2R6a++i2qrCpSMZ3bxsZryjmS+5Mk535dqO32RBQO5VgXIPfAOx3ASkYXWt+0r99 b6nz9Bl40a6RBkPJegCA+/Daw3+/2jzmtwh6tSg7ETxXzdA7/V2NTRalvcUWNfvB 51ezdVgF5PDfLeiuGy3BNVS8gbvqk7r+VtDCR8MogF8iRRA3fXTWPCEUN7SGMjNr mwfafjHZ0nRxZzmhmT7+bOBTJ2KRAUf8za3b1BS8PZw8tzQ1PpKrG3PsqVVmQwcQ OrMeHJCClWVc280JeuHYUIF6aQ9Y5BTFbLEkWRmwO99uhJCNzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFv/ia8ZoSvaCvyvLMiWda8ZZ7aZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGUxMmNmYWItMzZhYy0z YjI4LThkZGEtOWYyMjMyYmVmYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjKO278YeaB+44csn2iyUONG+tj0JGk/c16peB9xrvK9PnJURja6Qi9 ctwEyRquqoeWavlQAq1Odn/iwBoUZ8GkHVhPjVbBDbY7QrfQuaZ/E27UBuiEyreo JW1+NfQiGvgEZ+HlXiKOe3qY8A6ie8oNeMPnhqoDuiXqGyt0nkdWYqOMmfhAGwgR jYYYc+n5jzQgqHmyVlPGjB78iypDxsdnlaj647Psp/zjLY4O2pUzldwYZnahOi4/ CL1LOAHyDFzRG3T8NgJrKv+gwayNJV5EjRU4PZPsWp2dRB34qzUTZP2q1h+QgpNC +pAPDksrlr8WlgbWtC1/EibOjT4vt30= -----END CERTIFICATE-----Generated at Sat Jun 13 16:03:44 2026 by rpki-client