$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1ff5463-2e58-3c3b-990e-77477a6f7698.roa File: a1ff5463-2e58-3c3b-990e-77477a6f7698.roa (raw, json) Hash identifier: 9/NZ2EDFm6+wTURMACCg5SmY9NbnQrl440Xtasr1STk= Subject key identifier: 2F:F2:6D:34:F3:29:31:5B:37:4B:BD:F0:38:E2:C8:0C:F3:C1:10:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D849B5A8CAC6F582CEA42EB60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1ff5463-2e58-3c3b-990e-77477a6f7698.roa Signing time: Wed 15 Apr 2026 20:01:18 +0000 ROA not before: Wed 15 Apr 2026 20:01:18 +0000 ROA not after: Tue 14 Jul 2026 20:01:18 +0000 asID: 19905 IP address blocks: 173.29.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:84:9b:5a:8c:ac:6f:58:2c:ea:42:eb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 15 20:01:18 2026 GMT Not After : Jul 14 20:01:18 2026 GMT Subject: CN=662251bd-9104-4525-aa75-965d56cdda75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:17:27:b3:3e:a1:85:56:a6:e1:a1:c3:d1: 57:ca:bf:88:a3:ef:a7:3e:c6:0b:0b:2b:ed:6a:4e: f5:23:29:1b:5f:a3:67:7d:65:50:d1:94:5e:e9:2c: a7:12:14:74:27:9d:91:97:a2:60:06:d2:fa:52:83: 9b:25:41:ea:79:a8:3c:40:61:41:08:16:cc:8c:c0: c9:74:97:5f:64:bf:ee:73:5c:00:c7:0b:91:eb:c3: eb:86:0c:23:f5:68:a3:6c:a6:59:fb:da:33:c2:ab: aa:76:69:6d:76:19:20:59:7b:07:eb:7f:6e:cf:61: 27:d1:4b:a6:de:f4:a6:49:bc:81:bc:9d:1f:68:2e: 22:0a:54:9c:1a:c1:51:f5:86:c7:fc:52:b7:71:fe: 5e:09:c5:e9:63:f5:0f:c3:1d:15:32:95:ba:b4:d3: 70:e6:4b:c3:56:1b:d1:c3:07:d5:d2:5e:6c:71:f3: ea:8b:62:b3:f4:c9:13:7f:d2:19:fb:90:5e:07:99: 9d:82:90:67:bd:2a:2d:64:9d:c3:dd:55:1a:5a:6a: df:d4:1c:72:99:b2:5f:7f:27:5a:63:43:eb:b9:0f: dd:62:20:ca:2c:6b:63:cb:24:4b:51:b9:4e:ce:2d: 97:54:0d:d7:6e:e9:43:cb:6f:a2:cc:f3:09:29:c5: ec:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F2:6D:34:F3:29:31:5B:37:4B:BD:F0:38:E2:C8:0C:F3:C1:10:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1ff5463-2e58-3c3b-990e-77477a6f7698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:04:bf:18:f9:11:8b:5a:f8:52:b9:69:3a:e4:37:24:88:6c: 32:95:27:f8:ef:82:8f:ca:c8:ec:53:2a:a0:c4:71:d8:15:56: fd:84:43:d4:60:c3:3b:54:46:8d:51:0c:66:f1:4d:c9:d3:10: ee:c5:46:24:ba:75:b4:01:3c:1e:b1:5c:5d:be:f0:4e:ef:31: d5:57:be:14:50:b2:ff:30:32:46:ce:4b:5a:9f:5f:4c:0b:7a: 82:8f:a1:31:14:c2:d1:ae:b3:10:ed:ed:a6:3d:8a:bc:b4:03: 34:b5:48:55:97:23:c1:be:0a:58:98:c0:fd:55:88:71:c5:8d: 44:5b:17:88:d5:f1:46:e9:ec:e5:04:b8:19:e1:c3:45:0c:b5: ea:1c:74:ab:e5:20:84:10:05:0c:e7:39:8b:d2:b0:01:ab:d8: 38:24:cb:99:e9:9e:36:c9:81:cf:1b:fa:32:ee:fe:46:4e:b9: 7d:0c:fd:0d:d6:65:93:64:b8:94:84:0d:53:57:2b:9a:78:b0: 1b:ec:73:d4:bc:0f:d5:56:50:12:bd:f5:90:52:ec:7d:ea:c6: 5e:56:81:a7:e3:18:67:c1:ce:1f:be:aa:07:22:88:46:a4:9c: 70:4e:65:e5:8a:ed:58:a4:0e:6b:c0:6f:d4:80:25:14:95:64: 8a:c1:3c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Em1qMrG9YLOpC62AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQxNTIwMDExOFoXDTI2MDcxNDIwMDExOFowLzEtMCsGA1UEAxMk NjYyMjUxYmQtOTEwNC00NTI1LWFhNzUtOTY1ZDU2Y2RkYTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJAXJ7M+oYVWpuGhw9FXyr+Io++nPsYLCyvt ak71IykbX6NnfWVQ0ZRe6SynEhR0J52Rl6JgBtL6UoObJUHqeag8QGFBCBbMjMDJ dJdfZL/uc1wAxwuR68Prhgwj9WijbKZZ+9ozwquqdmltdhkgWXsH639uz2En0Uum 3vSmSbyBvJ0faC4iClScGsFR9YbH/FK3cf5eCcXpY/UPwx0VMpW6tNNw5kvDVhvR wwfV0l5scfPqi2Kz9MkTf9IZ+5BeB5mdgpBnvSotZJ3D3VUaWmrf1BxymbJffyda Y0PruQ/dYiDKLGtjyyRLUblOzi2XVA3XbulDy2+izPMJKcXsAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/ybTTzKTFbN0u98DjiyAzzwRByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTFmZjU0NjMtMmU1OC0z YzNiLTk5MGUtNzc0NzdhNmY3Njk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0Evxj5EYta+FK5aTrkNySIbDKVJ/jvgo/KyOxTKqDEcdgVVv2EQ9Rg wztURo1RDGbxTcnTEO7FRiS6dbQBPB6xXF2+8E7vMdVXvhRQsv8wMkbOS1qfX0wL eoKPoTEUwtGusxDt7aY9iry0AzS1SFWXI8G+CliYwP1ViHHFjURbF4jV8Ubp7OUE uBnhw0UMteocdKvlIIQQBQznOYvSsAGr2Dgky5npnjbJgc8b+jLu/kZOuX0M/Q3W ZZNkuJSEDVNXK5p4sBvsc9S8D9VWUBK99ZBS7H3qxl5WgafjGGfBzh++qgciiEak nHBOZeWK7VikDmvAb9SAJRSVZIrBPJk= -----END CERTIFICATE-----Generated at Fri Apr 17 11:42:00 2026 by rpki-client