$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a20ed0da-7729-3ea1-aa03-72c852aa1b13.roa File: a20ed0da-7729-3ea1-aa03-72c852aa1b13.roa (raw, json) Hash identifier: 3xnapvYQ/vPjawcXexKz18+570NeeVlQWdUpi8MXYDE= Subject key identifier: 19:A6:C7:68:A6:6F:99:A4:AC:BB:B9:BF:D2:DD:66:A7:D3:9D:5B:04 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CEDCE9C781CEA29953D7DEA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a20ed0da-7729-3ea1-aa03-72c852aa1b13.roa Signing time: Fri 20 Feb 2026 19:37:31 +0000 ROA not before: Fri 20 Feb 2026 19:37:31 +0000 ROA not after: Thu 21 May 2026 18:37:31 +0000 asID: 19905 IP address blocks: 170.52.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:ce:9c:78:1c:ea:29:95:3d:7d:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 20 19:37:31 2026 GMT Not After : May 21 18:37:31 2026 GMT Subject: CN=e883b578-0387-44ff-9083-ecc9ff85b206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:1e:00:03:63:09:ff:2e:4f:29:c2:8d:92: 5d:a9:c4:49:ac:f2:c6:e7:d1:fc:48:83:15:7f:3b: 0c:5a:08:30:ca:76:c7:ee:5c:bb:3c:42:fd:2d:24: 8e:48:42:f0:aa:0c:ac:ca:94:33:b4:46:ae:35:6c: fe:37:a6:6b:8d:89:e0:1a:f4:2f:f1:6b:ea:57:6b: 68:72:b3:30:2b:de:53:b7:c4:0a:b8:a7:b7:f8:e6: 6b:73:76:14:84:70:bb:44:2e:5f:06:6f:b4:76:0b: ad:2f:e7:ae:8e:b8:cb:65:f9:e7:5b:e3:dd:f6:28: d6:7e:59:12:55:0c:d1:a9:74:17:d3:42:99:d5:b8: 7a:8b:75:11:6c:44:8f:20:c0:69:57:70:1f:08:99: b7:33:e0:32:43:3d:be:fe:2d:6a:c7:f7:5d:07:68: bb:a5:0b:fb:fb:d1:e5:63:55:92:9c:7a:73:f0:c1: 6f:89:60:fa:47:10:1e:bd:bd:0f:ad:46:f2:6e:a4: 5d:52:a9:74:e5:5b:5f:e2:82:1d:5d:a7:05:04:b9: b2:a3:93:36:b8:69:2c:68:74:a2:2e:e1:79:b1:4e: 7b:c5:71:e4:f6:24:18:f8:f2:c1:ba:50:7c:f7:44: a5:bb:24:47:d2:74:b5:e9:1a:e7:21:c0:32:77:a7: 27:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A6:C7:68:A6:6F:99:A4:AC:BB:B9:BF:D2:DD:66:A7:D3:9D:5B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a20ed0da-7729-3ea1-aa03-72c852aa1b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 170.52.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:41:26:8f:03:b7:e1:13:b5:58:5e:38:f0:5a:18:ef:b9:22: 43:52:b4:3a:eb:89:46:2b:13:d2:d1:2b:54:48:a8:14:10:78: 50:02:3d:fd:9e:5d:e1:4f:9f:2e:56:82:51:76:1a:d0:bc:09: f3:77:83:4f:82:dd:54:e6:85:6a:9b:53:8a:a3:a7:61:33:99: 2d:8c:1a:aa:7a:6c:c3:68:0e:40:09:8f:3e:51:db:65:a0:fa: 86:4c:7e:0d:db:fb:4d:d7:c2:e8:60:45:fe:5f:d3:9a:0a:49: 87:74:16:1b:32:7d:92:cd:fb:34:7f:b9:c2:da:6d:62:0a:79: fd:77:fa:d6:f6:64:22:a8:ef:98:19:0d:85:31:ce:64:a8:0e: c3:c0:1f:6c:c0:68:eb:95:c9:96:18:75:b1:5d:59:85:e5:ef: 4c:4a:cd:c0:88:8d:bd:75:dc:fd:5f:f7:ac:99:af:b9:c9:a3: 56:35:92:1d:1e:cd:70:25:36:65:da:13:f6:0a:10:91:cb:e0: 80:98:62:bc:2d:b0:d5:97:c7:0f:ba:eb:1b:32:ad:50:2d:25: bf:8f:46:23:02:26:af:1a:01:6f:9c:7d:bd:d0:ed:3d:bc:c7: 1e:06:4d:b3:d0:cb:f7:b0:a0:8e:41:12:a7:a5:32:cb:db:bc: f4:b5:0e:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztzpx4HOoplT196gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIyMDE5MzczMVoXDTI2MDUyMTE4MzczMVowLzEtMCsGA1UEAxMk ZTg4M2I1NzgtMDM4Ny00NGZmLTkwODMtZWNjOWZmODViMjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbweAANjCf8uTynCjZJdqcRJrPLG59H8SIMV fzsMWggwynbH7ly7PEL9LSSOSELwqgysypQztEauNWz+N6ZrjYngGvQv8WvqV2to crMwK95Tt8QKuKe3+OZrc3YUhHC7RC5fBm+0dgutL+eujrjLZfnnW+Pd9ijWflkS VQzRqXQX00KZ1bh6i3URbESPIMBpV3AfCJm3M+AyQz2+/i1qx/ddB2i7pQv7+9Hl Y1WSnHpz8MFviWD6RxAevb0PrUbybqRdUql05Vtf4oIdXacFBLmyo5M2uGksaHSi LuF5sU57xXHk9iQY+PLBulB890SluyRH0nS16RrnIcAyd6cn5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmmx2imb5mkrLu5v9LdZqfTnVsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIwZWQwZGEtNzcyOS0z ZWExLWFhMDMtNzJjODUyYWExYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqjQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVBJo8Dt+ETtVheOPBaGO+5IkNStDrriUYrE9LRK1RIqBQQeFACPf2e XeFPny5WglF2GtC8CfN3g0+C3VTmhWqbU4qjp2EzmS2MGqp6bMNoDkAJjz5R22Wg +oZMfg3b+03XwuhgRf5f05oKSYd0FhsyfZLN+zR/ucLabWIKef13+tb2ZCKo75gZ DYUxzmSoDsPAH2zAaOuVyZYYdbFdWYXl70xKzcCIjb113P1f96yZr7nJo1Y1kh0e zXAlNmXaE/YKEJHL4ICYYrwtsNWXxw+66xsyrVAtJb+PRiMCJq8aAW+cfb3Q7T28 xx4GTbPQy/ewoI5BEqelMsvbvPS1Djs= -----END CERTIFICATE-----Generated at Mon Mar 2 03:54:57 2026 by rpki-client