$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9434cf7e-54eb-3e7a-afb5-0298c829c0af.roa File: 9434cf7e-54eb-3e7a-afb5-0298c829c0af.roa (raw, json) Hash identifier: SIwilhB4leiDdRt22LCTk/7qJ3T4VACLd/BZrPPVY7s= Subject key identifier: 87:23:48:56:4A:C8:D1:14:4C:06:51:1D:A5:10:04:B4:FF:25:72:D1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DEC7B21A1CAA55FDBDE76168C Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9434cf7e-54eb-3e7a-afb5-0298c829c0af.roa Signing time: Sat 23 May 2026 01:00:25 +0000 ROA not before: Sat 23 May 2026 01:00:25 +0000 ROA not after: Fri 21 Aug 2026 01:00:25 +0000 asID: 30036 IP address blocks: 173.18.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ec:7b:21:a1:ca:a5:5f:db:de:76:16:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 23 01:00:25 2026 GMT Not After : Aug 21 01:00:25 2026 GMT Subject: CN=1af9eb6d-b020-46e4-82de-c5d00c6020f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2f:b7:90:9c:bd:4f:9e:8b:84:b2:d8:4d:62: a6:42:e4:a8:e1:e8:0e:46:ad:52:82:b5:9a:eb:67: 25:e3:84:2e:72:fa:58:e3:25:3d:4b:40:91:e5:cc: c2:a8:8d:37:a1:16:ba:53:1f:b3:7f:d4:f4:2d:59: 19:ed:37:bd:b5:77:35:18:26:52:dc:22:ca:7d:d3: 8c:62:90:3f:1d:84:5b:01:d2:5a:ff:d6:27:55:f4: 18:17:d8:ee:4e:5e:67:ea:dc:5b:b7:4e:38:f2:d9: 79:95:cb:8f:00:97:d7:2f:cd:2f:b5:3c:b4:0f:2c: 37:00:37:16:ea:eb:f4:c0:db:57:11:d4:8b:82:cf: b3:5d:17:5c:9e:47:b4:ea:8f:7a:de:a3:13:f5:e0: 59:a9:ff:2b:47:a2:66:b8:66:15:c2:03:e3:84:1e: d2:57:8c:4e:72:5b:77:69:ed:67:37:08:72:43:8c: d2:e1:a9:af:37:bd:24:83:ba:8f:52:04:c0:e0:1b: 49:6d:15:f7:64:dd:9f:b3:be:d6:76:aa:16:ab:47: d3:cc:f7:3e:aa:5c:7f:ee:73:fb:9d:e4:84:1f:e9: 86:8a:f4:06:a4:11:30:40:c7:b3:64:ba:a9:5b:85: b2:36:da:07:74:d0:ba:b8:03:87:f2:72:e3:72:40: 34:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:23:48:56:4A:C8:D1:14:4C:06:51:1D:A5:10:04:B4:FF:25:72:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9434cf7e-54eb-3e7a-afb5-0298c829c0af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a2:1b:53:d3:4c:95:ee:0a:b2:c1:88:1d:72:56:c8:82:0e: eb:6c:c3:de:a7:24:72:4c:da:49:61:2d:b0:45:8f:2e:74:cd: 66:11:fc:e9:78:a7:d9:92:14:d4:2e:90:5d:66:79:a6:91:dd: 34:b6:a5:af:8f:40:5e:f5:06:4c:50:6c:95:f1:1e:ee:2f:03: 51:65:5c:f5:d1:d3:5e:21:72:e2:1e:05:94:83:4a:e1:d5:2c: 06:84:c5:c2:a9:70:9d:a0:b2:6b:1f:32:90:34:e0:51:41:fa: 1f:ad:72:82:dc:3b:83:42:bd:df:9b:5c:9f:c5:39:ac:0b:4c: 32:ec:b1:13:7b:ea:d3:7a:b4:03:3d:91:11:52:cc:07:59:cb: c8:e7:11:fe:11:e9:63:1f:6d:73:cb:ec:34:d5:ba:ec:b4:dd: 9f:49:9e:df:54:6c:41:a8:0f:dd:fb:d5:61:45:7a:e6:88:ae: 30:0c:74:4d:ca:e8:53:29:7f:a3:ce:93:d5:3d:a2:1f:2e:27: 5f:4a:5e:c1:05:a2:36:6f:0c:5d:c8:2d:4b:5a:f2:73:09:4d: 66:55:71:0a:3f:fb:e7:93:a6:d2:5e:b1:40:c1:74:20:71:37: d9:a6:60:cc:41:29:ea:49:79:9e:0d:3d:73:bf:e0:54:32:0e: 27:39:e6:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3seyGhyqVf2952FowwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk MWFmOWViNmQtYjAyMC00NmU0LTgyZGUtYzVkMDBjNjAyMGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC+3kJy9T56LhLLYTWKmQuSo4egORq1SgrWa 62cl44QucvpY4yU9S0CR5czCqI03oRa6Ux+zf9T0LVkZ7Te9tXc1GCZS3CLKfdOM YpA/HYRbAdJa/9YnVfQYF9juTl5n6txbt0448tl5lcuPAJfXL80vtTy0Dyw3ADcW 6uv0wNtXEdSLgs+zXRdcnke06o963qMT9eBZqf8rR6JmuGYVwgPjhB7SV4xOclt3 ae1nNwhyQ4zS4amvN70kg7qPUgTA4BtJbRX3ZN2fs77WdqoWq0fTzPc+qlx/7nP7 neSEH+mGivQGpBEwQMezZLqpW4WyNtoHdNC6uAOH8nLjckA0/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcjSFZKyNEUTAZRHaUQBLT/JXLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTQzNGNmN2UtNTRlYi0z ZTdhLWFmYjUtMDI5OGM4MjljMGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCiG1PTTJXuCrLBiB1yVsiCDutsw96nJHJM2klhLbBFjy50zWYR/Ol4 p9mSFNQukF1meaaR3TS2pa+PQF71BkxQbJXxHu4vA1FlXPXR014hcuIeBZSDSuHV LAaExcKpcJ2gsmsfMpA04FFB+h+tcoLcO4NCvd+bXJ/FOawLTDLssRN76tN6tAM9 kRFSzAdZy8jnEf4R6WMfbXPL7DTVuuy03Z9Jnt9UbEGoD9371WFFeuaIrjAMdE3K 6FMpf6POk9U9oh8uJ19KXsEFojZvDF3ILUta8nMJTWZVcQo/++eTptJesUDBdCBx N9mmYMxBKepJeZ4NPXO/4FQyDic55s4= -----END CERTIFICATE-----Generated at Sat Jun 13 17:11:07 2026 by rpki-client