$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6bc97fe-144e-37cb-908c-8939cb4aaa81.roa File: d6bc97fe-144e-37cb-908c-8939cb4aaa81.roa (raw, json) Hash identifier: guFG94uuSjp+Eqelc9mpxB/BwUTdOFHYoLea/xmi2qw= Subject key identifier: 30:AE:CF:DD:54:5A:3B:20:0E:65:08:A7:5D:F1:E4:D6:0E:DA:9E:3D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DE1507DD3BBB1CE7B91AC6700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6bc97fe-144e-37cb-908c-8939cb4aaa81.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 19905 IP address blocks: 173.20.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:7d:d3:bb:b1:ce:7b:91:ac:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=fb7688f2-7a7b-4bb0-8a61-feacb2f02474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:e4:9d:21:c6:f8:0d:f0:43:87:77:6f:6b: 6c:09:b2:4d:9f:0a:28:d0:22:c3:46:d4:5c:25:9e: 99:2f:f4:64:78:ae:9e:09:ac:9f:a9:25:59:30:ed: ef:22:2e:69:d6:24:8d:38:e4:67:fb:17:96:10:f4: 97:ef:d0:87:e4:96:e3:ba:e3:09:48:9f:c3:6b:eb: 20:85:0f:f3:bb:70:98:ba:e9:02:17:d9:ee:bf:69: 57:cc:0a:59:0f:73:d0:63:a9:62:25:27:08:9c:7a: 54:d0:ae:99:0c:13:d6:6b:47:49:77:bb:aa:8b:ac: 5b:64:d9:05:5a:01:32:06:2e:59:f9:71:4f:b0:23: 83:0e:ef:a5:61:43:7e:b3:4d:36:bd:3f:68:b6:e1: e3:34:eb:0d:f6:d8:68:1c:7a:22:e1:5f:0b:b5:81: d0:fa:4b:d7:c2:42:92:b2:e1:42:58:98:4e:ee:27: e4:73:58:75:18:c3:e7:0c:cd:a6:c1:b5:90:99:53: ed:f5:c1:d9:72:86:96:20:6e:3e:f6:03:d9:65:de: de:1b:56:05:47:d8:87:ba:7d:f2:67:06:b8:dd:db: e8:05:05:b8:76:0f:b2:1f:11:04:96:12:45:f0:54: 01:90:6a:84:1d:72:e4:a0:66:6b:45:2f:89:e7:3d: d6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AE:CF:DD:54:5A:3B:20:0E:65:08:A7:5D:F1:E4:D6:0E:DA:9E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6bc97fe-144e-37cb-908c-8939cb4aaa81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f3:e7:ca:8f:6c:0e:35:99:60:64:04:12:73:ff:d7:de:25: 48:f6:42:06:4f:c6:33:0c:14:cd:95:e8:65:86:c2:81:4f:11: 74:2c:5a:08:bc:53:e3:f1:2e:0c:f2:f9:18:17:06:8b:a6:66: 01:51:61:ca:a6:a9:13:8e:37:2f:b9:26:d9:6c:18:40:d1:b3: f9:56:c4:82:93:b3:08:a5:62:f2:04:0d:52:02:0f:64:3c:f1: 64:fb:30:49:54:a6:80:df:e0:e1:4f:82:df:ab:b1:2d:47:2a: 7b:6c:dc:18:32:f3:20:1a:07:ec:d6:2f:92:43:a7:27:4b:9a: dd:77:ee:e3:c2:dc:ff:42:47:0a:69:83:0c:f2:e7:6f:ef:15: c7:d7:cf:a6:42:40:c6:a0:09:1c:f4:fe:bd:75:f8:2e:de:b4: f5:da:94:d9:ee:d5:25:68:d4:b0:4e:26:9a:a2:9e:c7:a9:f6: 0e:45:9b:cb:3e:da:d0:7e:22:0e:f3:44:c6:ad:b9:52:4a:61: b4:2f:b1:f5:0a:e0:2d:40:4b:d8:10:cf:ba:1b:89:af:23:ab: 09:c7:50:fa:47:49:e8:36:6f:a4:5e:80:49:3b:39:89:2e:47: 82:9b:68:4d:4f:ee:f0:bc:70:28:7e:3f:45:d0:5c:07:c1:14: 06:e3:01:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUH3Tu7HOe5GsZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZmI3Njg4ZjItN2E3Yi00YmIwLThhNjEtZmVhY2IyZjAyNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosbknSHG+A3wQ4d3b2tsCbJNnwoo0CLDRtRc JZ6ZL/RkeK6eCayfqSVZMO3vIi5p1iSNOORn+xeWEPSX79CH5JbjuuMJSJ/Da+sg hQ/zu3CYuukCF9nuv2lXzApZD3PQY6liJScInHpU0K6ZDBPWa0dJd7uqi6xbZNkF WgEyBi5Z+XFPsCODDu+lYUN+s002vT9otuHjNOsN9thoHHoi4V8LtYHQ+kvXwkKS suFCWJhO7ifkc1h1GMPnDM2mwbWQmVPt9cHZcoaWIG4+9gPZZd7eG1YFR9iHun3y Zwa43dvoBQW4dg+yHxEElhJF8FQBkGqEHXLkoGZrRS+J5z3WaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCuz91UWjsgDmUIp13x5NYO2p49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDZiYzk3ZmUtMTQ0ZS0z N2NiLTkwOGMtODkzOWNiNGFhYTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/z58qPbA41mWBkBBJz/9feJUj2QgZPxjMMFM2V6GWGwoFPEXQsWgi8 U+PxLgzy+RgXBoumZgFRYcqmqROONy+5JtlsGEDRs/lWxIKTswilYvIEDVICD2Q8 8WT7MElUpoDf4OFPgt+rsS1HKnts3Bgy8yAaB+zWL5JDpydLmt137uPC3P9CRwpp gwzy52/vFcfXz6ZCQMagCRz0/r11+C7etPXalNnu1SVo1LBOJpqinsep9g5Fm8s+ 2tB+Ig7zRMatuVJKYbQvsfUK4C1AS9gQz7obia8jqwnHUPpHSeg2b6RegEk7OYku R4KbaE1P7vC8cCh+P0XQXAfBFAbjAXc= -----END CERTIFICATE-----Generated at Sat Jun 13 15:10:10 2026 by rpki-client