$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/956796f9-31e4-3cd3-85ad-be60f52ec842.roa File: 956796f9-31e4-3cd3-85ad-be60f52ec842.roa (raw, json) Hash identifier: IpP8Rv7XaffWB16J1+TIw3L8puXU9jh4Lq7MM2cCeLM= Subject key identifier: 4B:69:3F:18:0D:52:66:C7:BC:B9:B0:34:CA:E9:E5:FE:D0:08:3D:92 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CB981D25C84B477E5A8EFD380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/956796f9-31e4-3cd3-85ad-be60f52ec842.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.20.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:d2:5c:84:b4:77:e5:a8:ef:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=89ad1be6-231b-4fd8-aee2-d11de5856ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b5:d3:00:61:04:e7:ad:dd:93:07:bd:da:e1: ee:10:85:75:a3:23:f0:23:d1:18:9c:2c:ac:22:53: 9e:1b:02:56:4c:cf:23:27:1b:b3:92:2a:ab:d2:c4: 6e:b8:61:0d:7a:8b:84:67:12:19:78:4d:8d:d4:bd: f8:88:6e:b5:6e:f6:4b:08:c5:0f:28:ea:1d:77:f9: 20:a0:15:0c:12:11:32:ff:1f:ed:be:9b:b3:cd:99: 6d:80:03:86:24:46:92:e8:bc:66:99:f2:c3:97:95: c8:39:84:fb:c0:0f:e4:0f:61:b1:b0:c2:f1:2c:fb: f0:b6:70:d0:f7:0c:c0:f6:43:43:85:f8:f1:b0:87: 16:f3:29:2f:35:90:90:eb:9d:dd:cb:2a:ea:59:e5: 4f:33:ed:11:6e:a9:28:3b:ab:44:58:8b:12:c9:52: 5f:72:82:51:9e:7a:f4:10:d7:79:8e:7d:cb:dc:31: 3e:71:7b:1d:d1:39:7d:cb:30:be:94:89:70:9e:87: ac:9a:ae:2a:40:9a:51:78:40:7a:fb:43:e5:09:cd: 37:42:5e:02:5c:7a:82:50:53:39:6b:5a:35:5f:c7: 5d:68:2c:0d:5e:df:87:84:0e:a6:22:7f:da:e8:27: ca:87:82:55:59:1b:c7:40:cf:4d:eb:a1:a5:5c:cb: 8a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:69:3F:18:0D:52:66:C7:BC:B9:B0:34:CA:E9:E5:FE:D0:08:3D:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/956796f9-31e4-3cd3-85ad-be60f52ec842.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:19:e1:6c:0b:76:8b:f7:31:3c:c9:fe:85:09:1f:c5:85:59: dc:02:51:cf:f2:67:c5:c7:b0:04:e2:69:e9:ed:96:c3:59:0c: 67:c9:5d:dc:dc:b7:90:e8:2f:24:05:e6:c2:43:3d:de:41:1e: f4:4a:f2:87:1b:93:b8:98:eb:41:a8:2d:1a:e3:f0:60:f0:37: a6:b1:a2:4d:e8:d7:e0:14:54:e0:c8:14:8c:c9:c9:ad:11:5a: b0:72:4a:68:9f:97:7c:6c:ba:5b:8e:d1:c1:99:14:d5:1f:b4: a3:64:43:f8:38:e6:62:85:5b:dd:8e:ec:52:2b:13:f9:82:ad: b3:41:6d:af:a7:c6:13:27:dc:fe:77:16:f1:8f:62:22:d6:e9: ea:4a:a9:55:44:eb:36:72:4f:30:f3:4b:a4:09:19:58:49:15: e8:b4:e9:3e:4c:46:d5:49:de:4c:88:2a:80:95:18:c4:22:73: c7:ac:7a:90:10:95:39:75:22:26:df:52:23:38:b2:71:6a:14: 08:8c:fc:cf:e2:41:35:c3:5a:51:05:99:b7:86:ec:bc:68:f7: 7e:f5:a0:16:d6:ae:f4:c0:59:17:f9:fd:38:83:6b:0a:09:68: 17:cb:50:c1:77:8a:f5:63:04:23:51:a6:e2:f2:71:1f:c9:27: da:33:0f:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gdJchLR35ajv04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk ODlhZDFiZTYtMjMxYi00ZmQ4LWFlZTItZDExZGU1ODU2YWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirXTAGEE563dkwe92uHuEIV1oyPwI9EYnCys IlOeGwJWTM8jJxuzkiqr0sRuuGENeouEZxIZeE2N1L34iG61bvZLCMUPKOodd/kg oBUMEhEy/x/tvpuzzZltgAOGJEaS6LxmmfLDl5XIOYT7wA/kD2GxsMLxLPvwtnDQ 9wzA9kNDhfjxsIcW8ykvNZCQ653dyyrqWeVPM+0RbqkoO6tEWIsSyVJfcoJRnnr0 ENd5jn3L3DE+cXsd0Tl9yzC+lIlwnoesmq4qQJpReEB6+0PlCc03Ql4CXHqCUFM5 a1o1X8ddaCwNXt+HhA6mIn/a6CfKh4JVWRvHQM9N66GlXMuKVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtpPxgNUmbHvLmwNMrp5f7QCD2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTU2Nzk2ZjktMzFlNC0z Y2QzLTg1YWQtYmU2MGY1MmVjODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgZ4WwLdov3MTzJ/oUJH8WFWdwCUc/yZ8XHsATiaentlsNZDGfJXdzc t5DoLyQF5sJDPd5BHvRK8ocbk7iY60GoLRrj8GDwN6axok3o1+AUVODIFIzJya0R WrBySmifl3xsuluO0cGZFNUftKNkQ/g45mKFW92O7FIrE/mCrbNBba+nxhMn3P53 FvGPYiLW6epKqVVE6zZyTzDzS6QJGVhJFei06T5MRtVJ3kyIKoCVGMQic8esepAQ lTl1IibfUiM4snFqFAiM/M/iQTXDWlEFmbeG7Lxo9371oBbWrvTAWRf5/TiDawoJ aBfLUMF3ivVjBCNRpuLycR/JJ9ozDws= -----END CERTIFICATE-----Generated at Sun Mar 1 23:16:16 2026 by rpki-client