$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a5151864-29a0-3d39-8d1c-a9332f60bf56.roa File: a5151864-29a0-3d39-8d1c-a9332f60bf56.roa (raw, json) Hash identifier: lFTdkoTTAEoc3of2JXuxzztSVK6jkew+aY1N31wgeAs= Subject key identifier: C4:36:8E:DE:EA:82:59:95:2B:6E:88:AB:8C:C5:AB:B2:C7:4F:03:E3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E04361BA84F7A19B6793BD680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a5151864-29a0-3d39-8d1c-a9332f60bf56.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 19905 IP address blocks: 173.20.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:1b:a8:4f:7a:19:b6:79:3b:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=8a7c472c-4604-4356-ab27-d7d87981c9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:42:ae:95:74:7e:76:62:b3:46:04:fc:dd:ed: 8d:4e:e2:d9:3a:17:1b:5b:e9:6c:5c:3e:e2:0e:01: 76:7f:e5:f0:91:04:27:b5:58:b0:e1:1b:58:10:4f: e1:45:cc:75:2f:fb:35:77:c9:67:07:69:a9:6e:d5: 5e:6a:7f:5d:cd:95:55:aa:23:2f:83:90:4d:2f:01: 02:dd:f8:c0:5c:12:2b:1b:e3:b6:4b:cf:c2:8e:25: 70:54:eb:57:b7:60:48:e5:c9:ad:cd:d9:d2:26:55: 72:7d:d7:74:b7:e8:f2:01:26:09:61:dc:58:2a:cf: fc:97:b1:36:64:ea:13:30:09:c0:c8:14:f3:38:45: a1:ae:62:ce:4c:57:25:9b:2f:72:cd:4d:71:b6:c4: fc:e9:d9:0a:46:84:0b:66:3b:c5:af:19:05:5d:c6: 9d:c0:14:22:b9:33:21:c4:69:eb:f3:07:be:6f:7f: 83:45:6c:ee:77:2d:f7:36:da:a2:f2:ac:84:ea:75: ca:22:09:d0:ee:4c:95:14:df:1f:44:fe:bc:4d:95: 04:f0:19:10:da:bd:0a:0d:1a:3e:17:94:50:1e:4f: ff:84:63:5c:dc:d8:58:d3:c5:a0:af:f0:c5:fd:6e: 98:57:d2:80:cf:05:eb:bb:14:33:60:ca:a9:e8:ad: 98:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:36:8E:DE:EA:82:59:95:2B:6E:88:AB:8C:C5:AB:B2:C7:4F:03:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a5151864-29a0-3d39-8d1c-a9332f60bf56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:3f:22:29:3b:0a:0c:ea:c0:56:6a:e3:8e:f8:75:fb:11:3e: 23:d1:f1:de:0c:53:bf:44:ee:b3:81:3d:18:1d:4e:d6:5d:43: 73:d4:50:63:a8:10:f4:78:32:3b:75:ce:1c:0b:de:af:fe:f1: be:c9:f4:a8:89:6d:0c:8d:56:08:2f:e6:aa:d8:03:72:26:99: 5b:01:9c:a2:4a:e3:b2:03:c7:64:76:78:55:99:94:aa:a7:d9: e1:17:39:3f:99:66:75:57:14:e6:8e:c8:2b:e7:6f:ae:3e:35: a0:f8:54:39:a3:2c:9e:08:fc:e3:da:31:66:3d:14:44:3a:97: 32:02:db:9e:0c:d7:79:6d:83:ac:b6:2d:b4:bd:8a:44:80:c1: d8:e6:c5:1e:aa:aa:3d:54:9b:6f:68:22:37:18:fb:f7:4b:b1: ff:ef:ec:97:56:bd:f4:c2:1f:6c:57:53:17:8c:40:ae:79:f1: ed:38:93:4c:a9:df:83:17:5a:7b:31:42:b6:b8:1c:3b:fb:6b: bf:ad:9c:8b:ef:dc:72:b9:6c:41:48:38:56:be:45:b9:0b:9a: cd:61:e4:63:75:9b:d2:4b:0a:de:9d:d4:88:95:29:31:3d:eb: d9:2b:d5:06:d2:21:9f:60:f2:5c:c8:90:2d:75:da:32:27:0c: 23:e6:69:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENhuoT3oZtnk71oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk OGE3YzQ3MmMtNDYwNC00MzU2LWFiMjctZDdkODc5ODFjOWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkKulXR+dmKzRgT83e2NTuLZOhcbW+lsXD7i DgF2f+XwkQQntViw4RtYEE/hRcx1L/s1d8lnB2mpbtVean9dzZVVqiMvg5BNLwEC 3fjAXBIrG+O2S8/CjiVwVOtXt2BI5cmtzdnSJlVyfdd0t+jyASYJYdxYKs/8l7E2 ZOoTMAnAyBTzOEWhrmLOTFclmy9yzU1xtsT86dkKRoQLZjvFrxkFXcadwBQiuTMh xGnr8we+b3+DRWzudy33Ntqi8qyE6nXKIgnQ7kyVFN8fRP68TZUE8BkQ2r0KDRo+ F5RQHk//hGNc3NhY08Wgr/DF/W6YV9KAzwXruxQzYMqp6K2YQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQ2jt7qglmVK26Iq4zFq7LHTwPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTUxNTE4NjQtMjlhMC0z ZDM5LThkMWMtYTkzMzJmNjBiZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU/Iik7CgzqwFZq4474dfsRPiPR8d4MU79E7rOBPRgdTtZdQ3PUUGOo EPR4Mjt1zhwL3q/+8b7J9KiJbQyNVggv5qrYA3ImmVsBnKJK47IDx2R2eFWZlKqn 2eEXOT+ZZnVXFOaOyCvnb64+NaD4VDmjLJ4I/OPaMWY9FEQ6lzIC254M13ltg6y2 LbS9ikSAwdjmxR6qqj1Um29oIjcY+/dLsf/v7JdWvfTCH2xXUxeMQK558e04k0yp 34MXWnsxQra4HDv7a7+tnIvv3HK5bEFIOFa+RbkLms1h5GN1m9JLCt6d1IiVKTE9 69kr1QbSIZ9g8lzIkC112jInDCPmaSM= -----END CERTIFICATE-----Generated at Sat Jun 13 17:26:48 2026 by rpki-client