$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8921189-8a05-30ea-b129-092968bc220d.roa File: d8921189-8a05-30ea-b129-092968bc220d.roa (raw, json) Hash identifier: Km2w2NwnSAULDjUXTy0yDc7txjSTxx+CnBwvXFI3TUU= Subject key identifier: 22:A3:57:4C:63:34:9F:9D:5E:95:BD:4A:0A:9B:B8:4F:11:4A:ED:48 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059C78C2B384A0B1A6F944C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8921189-8a05-30ea-b129-092968bc220d.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.20.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:78:c2:b3:84:a0:b1:a6:f9:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=797f9d67-abea-4e4f-b55b-7255dd34c90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:e0:fd:a5:59:a3:ed:e0:b2:1c:de:3f:d5: 60:75:86:69:ab:d1:f5:25:9f:d6:76:c2:06:70:1d: 70:e1:ca:b0:f4:69:86:b1:3e:6f:f3:96:52:36:65: ee:19:5f:1d:1a:11:7f:57:91:a1:31:4b:65:55:8e: 93:74:a3:b6:a9:9d:15:04:04:9a:5c:b5:e0:59:9b: b2:f5:b8:ce:92:b6:b6:88:3e:aa:83:02:88:cf:ec: c6:d4:87:30:5d:81:50:76:a2:1d:06:66:d6:be:d2: 53:46:4a:94:ff:ce:a2:57:fb:42:42:10:05:f5:e6: 94:2f:4e:22:ae:da:f9:d0:1a:d3:09:85:96:9b:88: ad:c6:a5:a8:29:85:a4:e4:ce:96:12:1a:d7:7c:d8: 98:a2:33:7a:09:0f:a3:19:0e:1c:80:9b:35:ee:53: 2a:6c:f1:11:4c:56:82:94:68:65:1d:0d:31:b8:27: c0:cc:f7:e3:25:ce:78:01:30:da:e3:50:72:98:9b: 4f:ca:05:3b:22:b7:ac:83:57:1a:1b:5e:64:0d:fd: a4:c6:bf:a7:69:03:50:0c:7d:67:6b:ea:ed:b1:27: cd:8e:86:e9:ff:60:21:2c:4b:28:a4:7c:3f:84:11: 9d:c8:aa:15:ff:08:b3:d4:33:e8:c0:4a:4d:95:70: 73:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A3:57:4C:63:34:9F:9D:5E:95:BD:4A:0A:9B:B8:4F:11:4A:ED:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8921189-8a05-30ea-b129-092968bc220d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:7f:85:9d:c0:5c:1f:e5:8c:70:a9:fc:23:16:e8:37:cf:82: 1a:38:56:8c:ac:19:79:82:79:b6:99:3a:0f:b7:cd:19:8d:53: 7a:2b:4f:a9:1f:cb:ee:8b:a7:f6:e6:00:b2:ba:1b:f7:bb:a8: 9e:bd:f9:42:b9:79:c8:f4:95:75:55:4f:8b:13:e4:72:ba:44: 6b:53:e3:de:47:1d:1b:2c:2f:81:ce:e5:bb:9e:49:0a:bb:a3: 6d:66:7d:15:12:44:6a:27:2c:69:16:46:c3:9b:f6:e8:8c:98: b2:bd:e5:f1:ee:71:dd:1b:74:42:de:7b:f4:34:8c:80:63:4c: 5b:8f:b1:27:44:15:41:17:cd:0f:77:1d:06:07:39:d9:02:65: 9f:af:b7:54:47:cf:f3:ec:b6:5b:c2:d2:a6:a9:aa:55:8f:50: a2:b7:ea:8c:d1:32:7f:12:71:6e:10:29:4b:b7:c9:e1:60:41: af:ce:e8:fc:b2:eb:c2:e9:b9:95:67:85:3d:0e:65:1d:53:eb: ef:43:da:0c:8c:3b:df:a7:90:44:5b:d6:80:bf:c4:4f:f7:7d: c0:fb:93:20:46:83:99:75:4f:1f:06:81:23:14:7d:47:96:3d: 3e:56:57:64:e8:8e:4f:12:07:7f:51:fe:57:72:2a:85:62:a4: 4f:89:08:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnHjCs4Sgsab5RMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk Nzk3ZjlkNjctYWJlYS00ZTRmLWI1NWItNzI1NWRkMzRjOTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6fg/aVZo+3gshzeP9VgdYZpq9H1JZ/WdsIG cB1w4cqw9GmGsT5v85ZSNmXuGV8dGhF/V5GhMUtlVY6TdKO2qZ0VBASaXLXgWZuy 9bjOkra2iD6qgwKIz+zG1IcwXYFQdqIdBmbWvtJTRkqU/86iV/tCQhAF9eaUL04i rtr50BrTCYWWm4itxqWoKYWk5M6WEhrXfNiYojN6CQ+jGQ4cgJs17lMqbPERTFaC lGhlHQ0xuCfAzPfjJc54ATDa41BymJtPygU7Iresg1caG15kDf2kxr+naQNQDH1n a+rtsSfNjobp/2AhLEsopHw/hBGdyKoV/wiz1DPowEpNlXBzbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKjV0xjNJ+dXpW9SgqbuE8RSu1IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDg5MjExODktOGEwNS0z MGVhLWIxMjktMDkyOTY4YmMyMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ/hZ3AXB/ljHCp/CMW6DfPgho4VoysGXmCebaZOg+3zRmNU3orT6kf y+6Lp/bmALK6G/e7qJ69+UK5ecj0lXVVT4sT5HK6RGtT495HHRssL4HO5bueSQq7 o21mfRUSRGonLGkWRsOb9uiMmLK95fHucd0bdELee/Q0jIBjTFuPsSdEFUEXzQ93 HQYHOdkCZZ+vt1RHz/PstlvC0qapqlWPUKK36ozRMn8ScW4QKUu3yeFgQa/O6Pyy 68LpuZVnhT0OZR1T6+9D2gyMO9+nkERb1oC/xE/3fcD7kyBGg5l1Tx8GgSMUfUeW PT5WV2Tojk8SB39R/ldyKoVipE+JCOo= -----END CERTIFICATE-----Generated at Sat Jun 13 17:10:34 2026 by rpki-client