$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae69f72c-1a33-3636-8017-ad9957fe4afa.roa File: ae69f72c-1a33-3636-8017-ad9957fe4afa.roa (raw, json) Hash identifier: JfPRGXprHO8Y0GvFxovkoDdfab0PcQysFmzKyFQh4eU= Subject key identifier: 4E:60:58:63:86:84:9D:7B:04:72:2A:BD:18:31:31:60:D5:54:6E:4C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059B34206A6061D6CB0E7D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae69f72c-1a33-3636-8017-ad9957fe4afa.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.23.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:34:20:6a:60:61:d6:cb:0e:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=c71b2fb3-16ae-4de9-a944-8d095ba1072f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a6:24:0e:e8:86:b4:66:59:71:fe:f5:63:23: 78:5a:92:04:d4:a2:79:2d:3d:08:fc:6f:a7:96:6f: c0:6d:44:f0:a6:55:56:31:27:0b:a3:81:d1:e4:73: 28:2c:a7:9a:6f:55:c7:cc:41:aa:fa:d0:0e:6c:57: fc:89:55:7a:c2:68:68:9c:6d:29:b2:22:7d:71:37: 71:3f:25:51:c4:c5:25:86:f8:d4:51:59:38:2d:c6: d9:10:08:39:35:62:9e:d8:06:e7:86:90:b1:47:11: 06:44:b7:e3:12:53:19:16:d9:e0:26:14:7f:f1:01: f6:0e:23:9e:63:c6:c3:41:62:31:ff:36:8b:b9:9d: de:55:af:56:c1:d4:ad:3b:e4:50:c1:f4:2d:66:ad: 81:be:37:c8:ee:34:f8:d5:1b:15:9f:a2:70:0b:d0: e5:6f:d1:66:51:b7:2b:19:2c:bc:fd:cd:d2:da:38: 1e:a8:54:0b:07:36:39:e9:7b:e7:5c:10:23:dd:8d: 3f:45:3e:28:59:71:30:cf:c9:72:84:11:43:95:5b: 69:53:33:6e:6a:5e:1f:19:c1:45:d2:47:96:8b:18: 6f:23:84:03:dc:18:5e:7e:30:6b:e8:87:d2:75:61: d9:16:d8:05:48:a7:fa:ca:af:b3:2f:73:3d:ac:ac: d7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:60:58:63:86:84:9D:7B:04:72:2A:BD:18:31:31:60:D5:54:6E:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae69f72c-1a33-3636-8017-ad9957fe4afa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1b:7e:b0:76:8f:14:3a:5d:df:bd:84:b9:ef:42:3e:66:9d: 0d:2d:55:57:cd:96:b8:6a:b8:de:c2:ab:1c:e7:4d:2d:f2:95: f9:6f:91:27:c7:00:e1:12:1e:9f:cf:12:e5:ef:74:8b:bd:8a: a4:28:e5:06:93:3d:46:3f:0a:2b:80:91:a6:c0:3a:34:ac:99: b6:70:26:99:e0:2d:9a:58:ae:f6:f6:c1:0f:c9:41:31:54:93: ab:a0:70:02:ee:f0:0d:97:c0:d9:ef:b5:9a:10:13:4a:6e:72: f2:22:ee:d3:be:75:fd:eb:53:77:11:4f:7f:f8:61:7e:c9:71: 76:b5:a0:6d:d7:9d:bd:19:08:9e:00:17:ab:f7:ca:2f:13:78: 6e:18:af:73:f2:41:70:ef:08:c3:8d:0f:28:0a:04:84:fc:1d: 9b:b3:6c:d3:51:b5:b5:b3:e0:d9:d4:fb:98:b1:45:49:aa:c5: 1b:da:c9:0e:0b:fe:f1:c4:1a:b1:11:81:b8:ec:6f:36:68:9e: 31:0a:e0:42:bf:2e:e8:2b:c4:c7:83:c1:cd:35:00:8f:68:f4: 02:8d:88:07:00:b0:e6:fc:56:bb:7b:d6:40:9f:a9:dc:b0:0b: 9a:9d:27:cd:9d:44:d1:a5:9e:5a:3b:7a:5a:b7:98:51:54:f9: 9d:6e:37:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FmzQgamBh1ssOfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YzcxYjJmYjMtMTZhZS00ZGU5LWE5NDQtOGQwOTViYTEwNzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKYkDuiGtGZZcf71YyN4WpIE1KJ5LT0I/G+n lm/AbUTwplVWMScLo4HR5HMoLKeab1XHzEGq+tAObFf8iVV6wmhonG0psiJ9cTdx PyVRxMUlhvjUUVk4LcbZEAg5NWKe2AbnhpCxRxEGRLfjElMZFtngJhR/8QH2DiOe Y8bDQWIx/zaLuZ3eVa9WwdStO+RQwfQtZq2BvjfI7jT41RsVn6JwC9Dlb9FmUbcr GSy8/c3S2jgeqFQLBzY56XvnXBAj3Y0/RT4oWXEwz8lyhBFDlVtpUzNual4fGcFF 0keWixhvI4QD3BhefjBr6IfSdWHZFtgFSKf6yq+zL3M9rKzXdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5gWGOGhJ17BHIqvRgxMWDVVG5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWU2OWY3MmMtMWEzMy0z NjM2LTgwMTctYWQ5OTU3ZmU0YWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRdkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsbfrB2jxQ6Xd+9hLnvQj5mnQ0tVVfNlrhquN7CqxznTS3ylflvkSfH AOESHp/PEuXvdIu9iqQo5QaTPUY/CiuAkabAOjSsmbZwJpngLZpYrvb2wQ/JQTFU k6ugcALu8A2XwNnvtZoQE0pucvIi7tO+df3rU3cRT3/4YX7JcXa1oG3Xnb0ZCJ4A F6v3yi8TeG4Yr3PyQXDvCMONDygKBIT8HZuzbNNRtbWz4NnU+5ixRUmqxRvayQ4L /vHEGrERgbjsbzZonjEK4EK/LugrxMeDwc01AI9o9AKNiAcAsOb8Vrt71kCfqdyw C5qdJ82dRNGlnlo7elq3mFFU+Z1uN5s= -----END CERTIFICATE-----Generated at Sat Jun 13 20:04:42 2026 by rpki-client