$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c043170f-a250-3170-a4aa-5ad85a821236.roa File: c043170f-a250-3170-a4aa-5ad85a821236.roa (raw, json) Hash identifier: 3ZCweErhKue5MqfAPNCaoHMJW+q3OsGmRBQzkvTt+68= Subject key identifier: F1:7B:7A:25:60:F1:E7:31:D8:6F:53:39:7E:12:79:EE:F0:62:45:19 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059B3322BCCF2C7CE34F1400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c043170f-a250-3170-a4aa-5ad85a821236.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.20.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:33:22:bc:cf:2c:7c:e3:4f:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=f836e273-0cbc-4778-ad06-0933c83da5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1b:22:74:96:7e:b2:4f:0c:31:ac:78:9a:33: 9b:49:06:9e:5a:64:9b:ae:93:ee:f3:6d:e3:a2:03: 98:20:6a:78:9f:6e:8a:ac:ef:82:aa:72:1b:b9:8b: 6f:29:5c:9b:7a:43:25:3d:2e:e1:7f:4d:95:bb:01: 77:36:85:f6:22:9d:96:f9:8d:e2:56:ce:89:c7:0c: c6:12:02:d0:dc:35:56:0a:d0:bb:15:06:43:a4:15: 75:3b:b7:9e:ad:1d:2e:d8:a2:82:3e:80:65:95:4c: f2:4c:d9:86:80:c3:a8:8f:61:42:8f:04:99:44:5d: 93:15:7c:de:07:e0:79:18:29:4b:72:3d:bb:ae:41: 99:d9:a9:cd:ca:1c:d8:cb:4b:92:38:59:74:13:70: 2c:f2:44:cb:d7:83:f6:3f:b3:69:42:d2:88:1d:3c: 73:49:9f:65:2f:d8:37:4e:59:2f:c8:ce:ce:85:cc: 4e:91:87:f2:6c:e8:bb:9d:42:f3:93:60:16:e3:5c: 5b:2b:87:ea:19:5f:11:1e:3b:0a:47:d3:a4:a8:d7: 47:02:68:4d:07:d3:9f:85:c2:4e:21:2d:55:51:c6: 2e:76:04:a9:14:15:f6:81:07:d5:02:87:ab:9b:23: 43:d9:17:8d:2e:b9:81:0e:36:cd:07:d9:30:4f:2c: f2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7B:7A:25:60:F1:E7:31:D8:6F:53:39:7E:12:79:EE:F0:62:45:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c043170f-a250-3170-a4aa-5ad85a821236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ce:ac:5d:c7:d2:06:39:67:72:7b:3c:61:d1:8e:68:8e:f1: 1e:58:7d:71:51:8e:48:b2:c4:c2:df:90:14:31:30:1d:be:e5: 6a:08:cc:03:2c:fd:43:5d:55:48:23:a5:0e:1c:3c:d0:e7:50: e5:67:dc:1c:90:b7:3f:91:21:ad:33:41:1f:9d:d7:68:f6:18: 39:3c:59:5d:27:87:d3:1e:44:90:46:2a:0e:9c:94:12:33:e0: d0:ca:ba:b1:8d:ee:98:f1:3b:02:f4:86:70:55:37:8c:32:ce: fd:27:15:02:c8:ea:a0:e0:13:29:34:b5:6a:50:ad:a8:6b:bc: 80:8c:65:3f:4f:6c:0d:05:76:f0:6f:dc:85:de:2b:72:10:43: 03:7b:20:db:76:42:eb:dc:20:e0:ab:59:12:a1:5c:fd:ea:20: da:73:d4:24:e3:6c:f4:29:9d:9b:3c:97:93:7c:f8:a3:d5:b4: ca:17:54:5c:ca:fb:ee:51:d7:e0:d4:e8:8b:d1:9f:91:88:e1: a7:03:51:68:e7:ad:99:5d:27:70:67:2b:fd:82:e4:dc:8c:ec: 57:2f:5e:97:dd:cb:e2:5d:85:fd:56:81:ce:d2:b8:bc:69:0f: 50:24:d1:51:8f:8a:4b:68:0c:88:3e:a4:59:2a:ea:47:3a:fd: ac:14:18:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FmzMivM8sfONPFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZjgzNmUyNzMtMGNiYy00Nzc4LWFkMDYtMDkzM2M4M2RhNWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhsidJZ+sk8MMax4mjObSQaeWmSbrpPu823j ogOYIGp4n26KrO+CqnIbuYtvKVybekMlPS7hf02VuwF3NoX2Ip2W+Y3iVs6JxwzG EgLQ3DVWCtC7FQZDpBV1O7eerR0u2KKCPoBllUzyTNmGgMOoj2FCjwSZRF2TFXze B+B5GClLcj27rkGZ2anNyhzYy0uSOFl0E3As8kTL14P2P7NpQtKIHTxzSZ9lL9g3 TlkvyM7OhcxOkYfybOi7nULzk2AW41xbK4fqGV8RHjsKR9OkqNdHAmhNB9OfhcJO IS1VUcYudgSpFBX2gQfVAoermyND2ReNLrmBDjbNB9kwTyzyuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPF7eiVg8ecx2G9TOX4See7wYkUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzA0MzE3MGYtYTI1MC0z MTcwLWE0YWEtNWFkODVhODIxMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLOrF3H0gY5Z3J7PGHRjmiO8R5YfXFRjkiyxMLfkBQxMB2+5WoIzAMs /UNdVUgjpQ4cPNDnUOVn3ByQtz+RIa0zQR+d12j2GDk8WV0nh9MeRJBGKg6clBIz 4NDKurGN7pjxOwL0hnBVN4wyzv0nFQLI6qDgEyk0tWpQrahrvICMZT9PbA0FdvBv 3IXeK3IQQwN7INt2QuvcIOCrWRKhXP3qINpz1CTjbPQpnZs8l5N8+KPVtMoXVFzK ++5R1+DU6IvRn5GI4acDUWjnrZldJ3BnK/2C5NyM7FcvXpfdy+Jdhf1Wgc7SuLxp D1Ak0VGPiktoDIg+pFkq6kc6/awUGHY= -----END CERTIFICATE-----Generated at Sat Jun 13 20:59:12 2026 by rpki-client