$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1fa6f86-5c5f-35e8-b050-4d0d08635614.roa File: c1fa6f86-5c5f-35e8-b050-4d0d08635614.roa (raw, json) Hash identifier: QESJVZSauYgO8sNRapX2bM+LuLafpQ4FmCUnY4m2hdk= Subject key identifier: B7:53:2A:3B:D5:1D:7F:CD:7E:4B:B2:8E:81:16:2B:59:2F:0F:C3:37 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059C77E4F7D1D90C9393C300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1fa6f86-5c5f-35e8-b050-4d0d08635614.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.20.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:77:e4:f7:d1:d9:0c:93:93:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=c1dedb87-29ae-4c61-92ba-5cdf7d3fe113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:2a:7b:d2:10:c0:77:3b:f2:64:b0:fa:76: c1:b9:84:b9:41:f4:d2:c8:34:f4:d9:fa:19:14:47: 35:e2:01:b2:8a:d2:8c:46:a2:3e:fc:ad:aa:64:95: 41:1b:3a:1d:5b:a1:5a:00:30:39:97:fe:7e:90:95: 5b:cf:48:06:20:e2:f1:96:d2:9d:08:91:af:11:26: 76:46:54:e2:16:8a:fe:e4:3c:3b:4c:bf:8a:33:5f: d6:13:7c:a6:48:ba:6b:ed:0f:90:3e:b3:a1:c0:46: a3:a2:25:51:b5:64:61:f0:23:f4:3b:66:eb:a3:b5: 75:f7:46:72:c3:e5:ef:17:b3:72:4c:b8:de:cf:35: d7:33:6f:06:68:c2:1e:39:de:32:3e:fe:12:ec:61: d6:f4:85:51:42:05:2a:dd:04:d3:78:31:0e:7e:a3: 49:a7:36:8a:a8:88:bf:b2:19:65:ce:f8:9b:12:32: 3d:ef:35:c0:5e:2e:17:8a:da:e1:d4:1c:fa:38:49: 66:5b:f5:30:c3:24:70:5d:b9:3a:3a:86:26:0e:13: af:c3:cc:99:19:47:df:2e:56:72:fe:8d:6f:38:58: df:12:85:9f:da:b6:69:70:15:71:80:b4:69:ca:a5: 04:82:70:e6:ae:31:8a:24:59:78:0c:57:61:97:cb: 8c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:53:2A:3B:D5:1D:7F:CD:7E:4B:B2:8E:81:16:2B:59:2F:0F:C3:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1fa6f86-5c5f-35e8-b050-4d0d08635614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:9e:23:1e:c9:18:fc:3d:81:8c:d3:d8:21:08:5b:f4:e0:1b: 19:a9:8d:27:f5:e6:70:8e:6a:bf:59:2a:d5:90:26:f9:9c:ab: 79:bb:d6:f7:26:bd:c7:8b:cf:e3:83:eb:c6:f4:9a:1d:78:2a: bf:b0:40:2f:4f:42:ae:1d:83:71:02:cf:c3:28:fe:77:54:51: 96:31:57:c5:73:3e:94:99:27:c2:72:ca:29:c3:46:dc:28:b7: 05:19:13:59:6f:4f:f3:62:0e:9b:5c:89:1b:bb:34:46:b1:9c: 7c:9b:8c:e7:a9:1c:11:53:b9:04:10:bf:38:80:9e:ba:e9:95: ad:16:c2:07:cd:54:c0:e3:9d:79:9c:ca:3b:39:c8:93:ec:92: a9:12:d4:eb:92:ea:04:9b:92:bf:75:8c:8e:aa:34:23:c5:15: 30:4d:01:fb:39:68:b0:bc:c6:f8:0c:4a:33:33:d0:13:89:8b: f4:31:e5:ed:82:18:a8:b4:17:47:f3:7e:29:73:cd:9e:35:0b: 27:ef:95:83:24:3a:91:cd:b6:d6:8c:89:6a:70:cb:44:b4:b3: 72:a9:ed:63:79:8f:73:9f:f8:03:3c:91:ff:96:cc:22:ae:76: 61:1f:bc:9f:12:c1:48:d2:41:92:10:a5:f4:b5:73:d7:80:78: 17:ea:c6:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnHfk99HZDJOTwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk YzFkZWRiODctMjlhZS00YzYxLTkyYmEtNWNkZjdkM2ZlMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrgqe9IQwHc78mSw+nbBuYS5QfTSyDT02foZ FEc14gGyitKMRqI+/K2qZJVBGzodW6FaADA5l/5+kJVbz0gGIOLxltKdCJGvESZ2 RlTiFor+5Dw7TL+KM1/WE3ymSLpr7Q+QPrOhwEajoiVRtWRh8CP0O2bro7V190Zy w+XvF7NyTLjezzXXM28GaMIeOd4yPv4S7GHW9IVRQgUq3QTTeDEOfqNJpzaKqIi/ shllzvibEjI97zXAXi4Xitrh1Bz6OElmW/UwwyRwXbk6OoYmDhOvw8yZGUffLlZy /o1vOFjfEoWf2rZpcBVxgLRpyqUEgnDmrjGKJFl4DFdhl8uMmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdTKjvVHX/NfkuyjoEWK1kvD8M3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzFmYTZmODYtNWM1Zi0z NWU4LWIwNTAtNGQwZDA4NjM1NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2eIx7JGPw9gYzT2CEIW/TgGxmpjSf15nCOar9ZKtWQJvmcq3m71vcm vceLz+OD68b0mh14Kr+wQC9PQq4dg3ECz8Mo/ndUUZYxV8VzPpSZJ8JyyinDRtwo twUZE1lvT/NiDptciRu7NEaxnHybjOepHBFTuQQQvziAnrrpla0WwgfNVMDjnXmc yjs5yJPskqkS1OuS6gSbkr91jI6qNCPFFTBNAfs5aLC8xvgMSjMz0BOJi/Qx5e2C GKi0F0fzfilzzZ41CyfvlYMkOpHNttaMiWpwy0S0s3Kp7WN5j3Of+AM8kf+WzCKu dmEfvJ8SwUjSQZIQpfS1c9eAeBfqxjc= -----END CERTIFICATE-----Generated at Sat Jun 13 19:26:14 2026 by rpki-client