$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6b28976-fcf0-3df8-a9c6-f24cce0dfe9d.roa File: e6b28976-fcf0-3df8-a9c6-f24cce0dfe9d.roa (raw, json) Hash identifier: 8XKHXYf2HHtn/++5VCSrsLflPmet+C2gTTCXGpnYunI= Subject key identifier: D9:89:41:4E:93:A4:0E:82:58:7F:BE:47:41:93:98:6C:F1:D9:13:AA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A82CFCB655E9EF927EB080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6b28976-fcf0-3df8-a9c6-f24cce0dfe9d.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.20.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:2c:fc:b6:55:e9:ef:92:7e:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=1c2a626e-b26f-4458-bcd3-21892c97b827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bd:17:0e:9c:94:aa:d0:b7:1f:17:35:00:ad: 34:6c:bb:7d:d5:ab:ad:6e:94:2a:57:b4:52:47:e3: 64:49:5c:90:27:a1:05:a6:36:b9:83:fb:e6:15:d1: 94:bf:2d:29:44:df:4e:14:9b:94:92:b2:b6:8e:84: 9e:d6:61:dd:d7:b8:45:f4:d5:ff:65:2a:9a:f7:0b: d9:19:ec:fa:0a:92:ec:b8:41:a5:b6:4e:38:01:5d: 66:5b:bf:77:f7:9e:be:6d:9b:3e:1b:e2:eb:bc:6b: 01:4e:47:1a:11:be:31:61:f8:a1:22:29:0a:5a:fb: af:0d:00:93:aa:e2:59:ed:88:84:fb:5a:6b:8c:54: 8d:de:aa:5a:ab:2d:f8:41:56:7b:4a:d9:d9:8e:80: 17:ac:d2:80:f4:0a:db:8e:08:11:23:23:5c:da:98: 36:8a:92:ca:8d:41:88:e9:e9:bc:dd:09:00:bd:29: 63:31:55:cf:8b:ea:62:cb:3a:8e:8a:03:70:61:ca: da:d7:39:7b:dd:30:ae:e9:4b:96:51:a4:f9:a7:1c: 04:dc:d8:8b:d4:69:e1:83:b2:12:5d:75:ab:06:4f: fc:d4:5b:b1:b1:69:8b:15:0a:aa:31:ca:2a:76:7c: 8f:13:d1:33:14:6b:43:94:59:65:b1:bd:e0:e6:ec: 06:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:89:41:4E:93:A4:0E:82:58:7F:BE:47:41:93:98:6C:F1:D9:13:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e6b28976-fcf0-3df8-a9c6-f24cce0dfe9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:3b:d7:3f:97:ee:57:49:5c:5a:64:0a:c6:83:06:0c:5c:1f: ed:1a:91:54:03:34:a3:a0:ad:d6:bc:bd:5f:0c:2c:33:20:fa: 37:fd:7a:00:b0:c4:09:54:03:c7:d5:7c:8d:ba:50:6c:9e:c4: 4d:1c:08:ce:b6:9b:6e:44:c3:9d:1f:4a:f1:73:2a:16:f4:27: 21:8c:4c:ef:bb:98:93:64:34:12:dd:db:cb:d7:a2:a9:db:07: d1:9b:52:23:19:06:91:5b:f2:6b:7e:7d:39:b0:28:53:4a:0c: 17:a5:15:b7:ad:59:e6:a9:0c:53:4f:a5:c9:b0:7b:5f:af:30: 0b:e1:3e:57:68:1e:de:3c:67:2a:7f:3e:b8:ce:0c:e7:f6:46: 84:d3:d6:82:ee:15:c2:76:b4:e3:19:e9:66:84:a3:d8:b1:c2: b0:bb:7f:0a:ef:87:ed:8e:e2:c1:33:d9:e4:f1:6d:a2:ed:f5: 20:4b:ff:10:f4:24:07:19:f1:e7:44:43:24:b7:25:89:86:f5: 87:c9:cd:70:c3:81:c9:63:72:3b:af:f9:d0:2d:c6:cf:40:2b: 17:ce:2d:1b:50:94:41:f3:0f:02:3a:31:e5:12:5c:ce:87:ba: 26:ae:bf:5f:5b:12:3b:46:e7:78:60:ae:58:a0:fc:65:38:44: 17:a3:04:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqCz8tlXp75J+sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MWMyYTYyNmUtYjI2Zi00NDU4LWJjZDMtMjE4OTJjOTdiODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr0XDpyUqtC3Hxc1AK00bLt91autbpQqV7RS R+NkSVyQJ6EFpja5g/vmFdGUvy0pRN9OFJuUkrK2joSe1mHd17hF9NX/ZSqa9wvZ Gez6CpLsuEGltk44AV1mW793956+bZs+G+LrvGsBTkcaEb4xYfihIikKWvuvDQCT quJZ7YiE+1prjFSN3qpaqy34QVZ7StnZjoAXrNKA9ArbjggRIyNc2pg2ipLKjUGI 6em83QkAvSljMVXPi+piyzqOigNwYcra1zl73TCu6UuWUaT5pxwE3NiL1Gnhg7IS XXWrBk/81FuxsWmLFQqqMcoqdnyPE9EzFGtDlFllsb3g5uwGawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmJQU6TpA6CWH++R0GTmGzx2ROqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTZiMjg5NzYtZmNmMC0z ZGY4LWE5YzYtZjI0Y2NlMGRmZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACU71z+X7ldJXFpkCsaDBgxcH+0akVQDNKOgrda8vV8MLDMg+jf9egCw xAlUA8fVfI26UGyexE0cCM62m25Ew50fSvFzKhb0JyGMTO+7mJNkNBLd28vXoqnb B9GbUiMZBpFb8mt+fTmwKFNKDBelFbetWeapDFNPpcmwe1+vMAvhPldoHt48Zyp/ PrjODOf2RoTT1oLuFcJ2tOMZ6WaEo9ixwrC7fwrvh+2O4sEz2eTxbaLt9SBL/xD0 JAcZ8edEQyS3JYmG9YfJzXDDgcljcjuv+dAtxs9AKxfOLRtQlEHzDwI6MeUSXM6H uiauv19bEjtG53hgrlig/GU4RBejBJo= -----END CERTIFICATE-----Generated at Mon Mar 2 12:28:33 2026 by rpki-client