$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97978250-1bd4-3852-9992-24ba25c2e9b8.roa File: 97978250-1bd4-3852-9992-24ba25c2e9b8.roa (raw, json) Hash identifier: hykaQ4ggJ6f9qIC0LQZglyPfCdRlJCUu/nzk9x9bCYU= Subject key identifier: 31:A6:51:10:6D:63:AB:35:3E:39:33:A9:6B:54:82:45:BA:7F:A5:CA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E043630A7D2850FE15BE74380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97978250-1bd4-3852-9992-24ba25c2e9b8.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 19905 IP address blocks: 173.19.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:30:a7:d2:85:0f:e1:5b:e7:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=3bfc4343-4411-42ae-ba66-9c5b81f80608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:29:2b:a1:fc:4b:61:f6:42:92:a9:f1:43: 0c:2a:99:cd:27:22:3a:14:f5:6c:44:c5:55:61:98: f1:d4:6e:74:ad:ef:7b:59:cc:d9:4c:dc:7a:b3:00: 15:a8:47:e2:4c:c1:cd:34:ed:74:4c:90:40:71:11: 2d:71:b1:06:fd:62:2d:31:6b:71:b3:69:88:56:76: cb:72:76:3c:fc:45:ff:c2:f7:da:5c:1e:cd:f9:2f: 81:7a:1c:5f:71:ee:bc:dc:b0:ff:d8:86:22:d0:d9: 6e:d9:a1:82:0a:d0:4e:f8:50:9e:94:38:e5:2d:d7: 7a:be:b4:93:b4:8b:7c:5d:8e:9b:4b:2e:3a:12:ba: fa:7b:82:e3:82:85:41:4b:8c:03:4c:8e:5e:7e:c0: a3:f0:42:4e:91:98:24:6b:40:f6:2a:8e:26:5e:74: 07:12:ef:e9:22:34:b8:0a:d5:6b:1b:41:27:08:29: 67:0a:d0:33:1f:77:cf:8b:9a:8b:59:41:01:d2:f6: 3d:eb:cd:27:fa:03:a6:1d:ae:a3:da:2f:9f:c3:46: d2:91:ae:fe:d4:a8:1a:e6:39:60:66:2c:5d:16:91: d7:ae:de:bf:b3:84:28:55:bc:ce:57:c8:b6:a6:8c: 72:c3:51:1e:e1:63:7f:ba:36:ad:54:81:ac:bf:73: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A6:51:10:6D:63:AB:35:3E:39:33:A9:6B:54:82:45:BA:7F:A5:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/97978250-1bd4-3852-9992-24ba25c2e9b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:30:f9:71:65:b3:bc:87:ad:c2:7d:aa:b3:1b:9e:60:0d:38: 12:ff:d3:65:85:42:96:f0:a4:34:8c:a7:aa:54:5d:cd:af:7b: 12:9c:69:ec:56:c0:d7:3f:9e:bc:2e:28:e3:62:17:ff:ea:d6: 6a:b6:af:15:cd:6d:49:2d:7d:a7:a8:fc:64:82:ab:4a:db:6f: f1:ae:16:40:bc:26:42:4c:6d:4d:f0:3a:0e:09:59:8a:f6:0a: d6:de:cf:dd:9b:f2:37:6d:7b:a2:ac:0d:09:73:8c:ed:c9:30: d4:d4:79:94:c6:96:54:e2:52:25:25:92:8f:04:e3:47:27:6c: 5e:cd:87:11:b3:b1:d1:fe:eb:19:76:2d:a4:05:15:ca:0b:af: 79:bb:72:bd:4a:65:0d:db:68:b2:39:6d:1b:b0:05:14:33:02: 44:ca:26:14:8d:59:fb:b1:5b:df:18:9e:82:14:6d:d7:78:44: b8:e0:05:ad:84:82:29:ce:09:dd:8d:8d:29:88:3f:5f:54:11: e2:20:62:76:39:15:08:f5:55:d9:f1:4b:84:51:fc:e8:1e:01: 5a:53:40:cd:9b:6e:d5:11:a7:19:00:30:a3:84:0d:14:60:2f: c3:f9:dd:11:4c:4e:01:95:10:25:0b:c2:32:44:70:b9:14:3e: 74:35:cc:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENjCn0oUP4VvnQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk M2JmYzQzNDMtNDQxMS00MmFlLWJhNjYtOWM1YjgxZjgwNjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWcpK6H8S2H2QpKp8UMMKpnNJyI6FPVsRMVV YZjx1G50re97WczZTNx6swAVqEfiTMHNNO10TJBAcREtcbEG/WItMWtxs2mIVnbL cnY8/EX/wvfaXB7N+S+Behxfce683LD/2IYi0Nlu2aGCCtBO+FCelDjlLdd6vrST tIt8XY6bSy46Err6e4LjgoVBS4wDTI5efsCj8EJOkZgka0D2Ko4mXnQHEu/pIjS4 CtVrG0EnCClnCtAzH3fPi5qLWUEB0vY9680n+gOmHa6j2i+fw0bSka7+1Kga5jlg ZixdFpHXrt6/s4QoVbzOV8i2poxyw1Ee4WN/ujatVIGsv3NH7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGmURBtY6s1PjkzqWtUgkW6f6XKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTc5NzgyNTAtMWJkNC0z ODUyLTk5OTItMjRiYTI1YzJlOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArROYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIw+XFls7yHrcJ9qrMbnmANOBL/02WFQpbwpDSMp6pUXc2vexKcaexW wNc/nrwuKONiF//q1mq2rxXNbUktfaeo/GSCq0rbb/GuFkC8JkJMbU3wOg4JWYr2 Ctbez92b8jdte6KsDQlzjO3JMNTUeZTGllTiUiUlko8E40cnbF7NhxGzsdH+6xl2 LaQFFcoLr3m7cr1KZQ3baLI5bRuwBRQzAkTKJhSNWfuxW98YnoIUbdd4RLjgBa2E ginOCd2NjSmIP19UEeIgYnY5FQj1VdnxS4RR/OgeAVpTQM2bbtURpxkAMKOEDRRg L8P53RFMTgGVECULwjJEcLkUPnQ1zDs= -----END CERTIFICATE-----Generated at Sat Jun 13 21:36:10 2026 by rpki-client