$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/90523931-6a92-36c3-951c-a28e12ef57e6.roa File: 90523931-6a92-36c3-951c-a28e12ef57e6.roa (raw, json) Hash identifier: IkPlLvV7Yc0VcaniYYVQsQTT7aD/ArWhFZo0qMORYK8= Subject key identifier: CD:5B:A9:08:30:92:94:04:C1:02:C6:14:AE:2E:00:FC:B2:E7:66:A8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059C6D6DF0AFEE6556F0AE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/90523931-6a92-36c3-951c-a28e12ef57e6.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.20.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:6d:6d:f0:af:ee:65:56:f0:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=c041c21d-c660-4d8b-a4ca-a3fc997e6911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:7d:a4:9f:98:45:ec:cd:77:6e:29:2d:d4: 1c:df:25:2d:1b:07:50:20:b1:73:f5:bd:b0:e6:a2: 5c:f6:8d:11:29:54:4a:7e:40:0f:d7:9d:60:3e:9d: 66:b7:49:51:f3:b1:37:ae:ce:29:81:a8:01:20:7e: 3d:d3:74:86:65:a5:f7:74:98:c7:91:73:9d:c9:cb: d4:fb:24:6e:71:9b:65:23:9c:95:a9:d6:5d:e3:02: 71:cd:1e:2e:15:7d:df:cd:3e:f6:3e:d2:71:5f:ed: e7:35:87:99:86:7d:94:ec:87:27:b5:13:68:f2:3b: b8:79:0a:40:a5:b1:92:5b:da:87:9a:fb:88:dd:90: de:1b:35:b1:a9:7d:8b:69:86:db:e9:78:c1:65:4b: aa:cf:d5:43:ae:3c:1a:a9:bc:4b:4a:25:e7:28:be: 7c:b6:18:5e:95:66:4a:0e:35:6a:b9:95:fb:14:f4: 60:5f:92:3e:96:14:c5:08:c3:a1:84:ad:f6:8c:3d: e0:8f:a7:e9:ba:59:88:be:e5:0f:44:6f:54:8f:d2: cc:62:0f:b7:04:d6:40:e2:84:ee:44:ad:f1:36:81: d7:bb:c9:bd:a1:76:f1:d2:c0:21:b3:5f:9e:e5:fb: 41:c0:19:97:55:d5:dc:40:fc:23:55:c8:07:e5:d8: c0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5B:A9:08:30:92:94:04:C1:02:C6:14:AE:2E:00:FC:B2:E7:66:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/90523931-6a92-36c3-951c-a28e12ef57e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:13:d6:66:e2:5a:b0:4c:7c:ae:ab:3b:40:37:68:38:8f:3d: 34:33:68:62:57:3b:5a:b5:04:ec:d2:c9:f1:20:bb:1b:4c:28: 8a:cb:27:6f:f3:da:c4:9e:2f:21:e8:d9:4d:c1:a3:af:13:1e: bb:87:92:2a:f3:de:99:7a:88:18:b2:59:c3:cf:75:23:b7:49: c1:cb:8f:d0:8e:e6:d1:73:59:35:31:83:93:b4:47:ce:42:6c: bc:59:ef:0f:2a:a2:36:f9:7f:4a:d6:4d:82:35:8b:e5:98:57: cb:58:69:a6:7c:c8:3d:2d:d1:88:10:01:01:6c:2a:e8:dc:c6: c8:c1:9f:5b:f7:1f:ab:c4:36:82:b2:14:ba:11:3f:f7:b1:27: 6b:79:0c:cc:9d:1c:a3:fb:93:76:2b:de:75:65:d9:9d:9a:0e: ab:4a:73:56:fc:22:61:77:dd:dd:c8:ea:5c:9b:86:b6:1d:dc: f5:09:f7:17:5b:d4:62:fd:a8:00:16:99:c1:31:a3:89:5f:c5: b9:5a:98:84:21:73:56:e9:51:4b:75:0b:0c:6d:42:7d:68:ea: 22:ab:50:2a:c5:d1:03:45:57:68:7d:71:8b:dc:eb:3b:3b:7a: 11:47:56:3e:09:60:e5:08:b7:7b:d7:59:c9:e0:a4:37:72:8c: 05:7d:2b:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnG1t8K/uZVbwrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YzA0MWMyMWQtYzY2MC00ZDhiLWE0Y2EtYTNmYzk5N2U2OTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr59pJ+YRezNd24pLdQc3yUtGwdQILFz9b2w 5qJc9o0RKVRKfkAP151gPp1mt0lR87E3rs4pgagBIH4903SGZaX3dJjHkXOdycvU +yRucZtlI5yVqdZd4wJxzR4uFX3fzT72PtJxX+3nNYeZhn2U7IcntRNo8ju4eQpA pbGSW9qHmvuI3ZDeGzWxqX2LaYbb6XjBZUuqz9VDrjwaqbxLSiXnKL58thhelWZK DjVquZX7FPRgX5I+lhTFCMOhhK32jD3gj6fpulmIvuUPRG9Uj9LMYg+3BNZA4oTu RK3xNoHXu8m9oXbx0sAhs1+e5ftBwBmXVdXcQPwjVcgH5djA6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1bqQgwkpQEwQLGFK4uAPyy52aoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTA1MjM5MzEtNmE5Mi0z NmMzLTk1MWMtYTI4ZTEyZWY1N2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsT1mbiWrBMfK6rO0A3aDiPPTQzaGJXO1q1BOzSyfEguxtMKIrLJ2/z 2sSeLyHo2U3Bo68THruHkirz3pl6iBiyWcPPdSO3ScHLj9CO5tFzWTUxg5O0R85C bLxZ7w8qojb5f0rWTYI1i+WYV8tYaaZ8yD0t0YgQAQFsKujcxsjBn1v3H6vENoKy FLoRP/exJ2t5DMydHKP7k3Yr3nVl2Z2aDqtKc1b8ImF33d3I6lybhrYd3PUJ9xdb 1GL9qAAWmcExo4lfxblamIQhc1bpUUt1CwxtQn1o6iKrUCrF0QNFV2h9cYvc6zs7 ehFHVj4JYOUIt3vXWcngpDdyjAV9Kwc= -----END CERTIFICATE-----Generated at Sun Jun 14 03:04:10 2026 by rpki-client