$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e2857175-e001-309f-a35b-5dcf61fb4bd3.roa File: e2857175-e001-309f-a35b-5dcf61fb4bd3.roa (raw, json) Hash identifier: ubGVtLIVEAWyJRpD8Cy6zJPPPM/P5kz77ZATQhvP2nc= Subject key identifier: 4C:5A:26:5A:13:3C:2E:EE:D3:E4:AF:5B:4E:EC:89:05:86:6B:D8:13 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D773A7FE0F44298674C8344A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e2857175-e001-309f-a35b-5dcf61fb4bd3.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 19905 IP address blocks: 173.20.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:7f:e0:f4:42:98:67:4c:83:44:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=b36e340b-dba5-417c-805b-ae1e861b6a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:20:8f:f7:e3:23:4a:4b:28:3e:4c:a4:d8:7d: 5a:a8:f3:14:94:c8:ea:2f:3e:1a:a4:1a:f1:05:f5: 28:1f:60:33:de:f1:51:ea:82:1a:3a:4d:cc:df:d3: 5c:d1:77:00:6b:db:6a:05:d6:f0:a6:dd:aa:ee:80: 87:f1:63:e1:24:52:37:42:db:f7:a1:28:d9:8a:ed: 2d:89:ae:bf:21:2e:2e:e7:4b:65:dc:df:df:6a:30: 1c:9c:3b:8a:3c:ee:93:5e:79:23:af:04:86:08:17: c7:00:6a:8f:8d:b9:b3:83:d9:04:e5:41:20:2c:0a: 19:a7:e0:c2:ad:fa:f5:c2:12:71:7b:6b:18:9f:21: 8b:c7:cc:5e:77:49:89:d9:d6:0d:18:8e:51:c8:d3: 7c:ab:40:95:67:3f:8e:3f:ea:7b:a7:99:01:f9:ca: cc:78:79:9c:06:41:17:b3:7a:fb:83:46:1d:70:3a: d4:10:20:95:00:aa:d9:39:ad:4e:4c:b6:4b:75:9e: ba:9a:02:8c:a1:9d:6a:0a:63:bf:30:c4:65:bf:63: b8:59:1a:9f:92:df:c5:80:00:bc:03:5f:d1:7f:74: cc:8c:ac:59:ef:d8:aa:92:70:11:b3:e6:aa:19:bf: 1f:50:29:76:1a:62:1b:54:87:e0:64:cc:a5:53:b5: 56:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5A:26:5A:13:3C:2E:EE:D3:E4:AF:5B:4E:EC:89:05:86:6B:D8:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e2857175-e001-309f-a35b-5dcf61fb4bd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:6d:a3:db:d9:3f:5f:c0:e8:58:71:6f:96:5b:da:e4:64:99: 67:4d:63:f6:75:49:c0:34:01:93:41:b9:62:9b:03:3e:07:19: 21:40:1d:58:4b:e0:5d:c9:68:1b:d8:c0:00:ad:27:67:83:fd: eb:9b:9b:bc:42:58:95:61:98:7b:3c:94:21:d6:1a:df:00:ea: 01:72:4f:64:b5:65:24:9c:31:0a:1c:f9:77:48:8d:e6:05:3d: ac:ff:28:86:0c:d7:a2:09:ac:e6:46:53:9f:bc:ca:e8:fb:ba: 89:f7:38:98:c0:53:76:c4:99:19:b0:6b:5e:49:b4:4a:df:8f: fa:b2:e5:9c:eb:a7:69:17:6c:ff:0f:21:5c:f6:ab:a1:c4:f4: 4b:1e:a5:bd:07:a6:65:cd:8d:8f:ed:e9:66:eb:8a:5f:65:09: aa:e0:2d:b5:a1:29:d1:ed:e6:70:f1:03:64:e8:ea:02:b3:cc: 3d:60:ce:d7:53:3f:c3:be:87:f6:b0:05:17:65:89:e4:b0:c1: 29:f2:59:27:43:57:e0:3b:e8:7c:02:f5:3e:12:06:06:fb:eb: aa:e9:c8:ab:79:aa:95:46:25:28:83:a5:f7:7d:43:55:32:31: 52:a9:92:3c:1d:74:1b:4e:68:da:93:84:41:34:c7:56:b5:a5: ce:a9:ae:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13On/g9EKYZ0yDRKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk YjM2ZTM0MGItZGJhNS00MTdjLTgwNWItYWUxZTg2MWI2YTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SCP9+MjSksoPkyk2H1aqPMUlMjqLz4apBrx BfUoH2Az3vFR6oIaOk3M39Nc0XcAa9tqBdbwpt2q7oCH8WPhJFI3Qtv3oSjZiu0t ia6/IS4u50tl3N/fajAcnDuKPO6TXnkjrwSGCBfHAGqPjbmzg9kE5UEgLAoZp+DC rfr1whJxe2sYnyGLx8xed0mJ2dYNGI5RyNN8q0CVZz+OP+p7p5kB+crMeHmcBkEX s3r7g0YdcDrUECCVAKrZOa1OTLZLdZ66mgKMoZ1qCmO/MMRlv2O4WRqfkt/FgAC8 A1/Rf3TMjKxZ79iqknARs+aqGb8fUCl2GmIbVIfgZMylU7VWCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExaJloTPC7u0+SvW07siQWGa9gTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTI4NTcxNzUtZTAwMS0z MDlmLWEzNWItNWRjZjYxZmI0YmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJto9vZP1/A6Fhxb5Zb2uRkmWdNY/Z1ScA0AZNBuWKbAz4HGSFAHVhL 4F3JaBvYwACtJ2eD/eubm7xCWJVhmHs8lCHWGt8A6gFyT2S1ZSScMQoc+XdIjeYF Paz/KIYM16IJrOZGU5+8yuj7uon3OJjAU3bEmRmwa15JtErfj/qy5Zzrp2kXbP8P IVz2q6HE9Esepb0HpmXNjY/t6Wbril9lCargLbWhKdHt5nDxA2To6gKzzD1gztdT P8O+h/awBRdlieSwwSnyWSdDV+A76HwC9T4SBgb766rpyKt5qpVGJSiDpfd9Q1Uy MVKpkjwddBtOaNqThEE0x1a1pc6prk8= -----END CERTIFICATE-----Generated at Fri Apr 17 11:19:35 2026 by rpki-client