$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa File: f1b86a0a-93ba-368e-9650-058271f8c2a3.roa (raw, json) Hash identifier: CanZ6L6fGKLXlgihz7WVn83yktN74tj5JmCdam3CSQA= Subject key identifier: DA:71:9A:23:8E:E4:3E:8E:F3:59:16:B0:4A:42:94:99:79:AA:1C:D4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059C656052A57BA8226B5580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:65:60:52:a5:7b:a8:22:6b:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=e18e50ca-1763-4851-bbe9-b341fe724aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:01:8a:19:17:56:2d:7b:32:da:13:89:8d:09: d2:56:25:2a:91:eb:1d:91:52:fd:f0:a8:de:3c:9a: 66:4f:4e:82:57:72:fb:32:72:ef:58:fc:8f:cc:7b: 8e:81:d0:92:92:c9:39:65:92:c7:ef:b0:cc:33:92: fa:1a:2e:22:14:70:f3:7b:ba:2e:bd:ef:e4:f6:5f: 12:83:dd:c1:e0:9e:bc:ce:2b:a4:3a:db:f3:39:99: 2d:4e:38:f9:cc:a4:3e:3c:ae:10:64:21:55:bc:9a: b3:9c:cf:54:12:6c:a7:1e:0e:15:e0:eb:dc:0a:21: 5e:71:9d:08:42:a4:10:b8:4a:9b:3c:d2:37:be:8c: df:36:1e:c5:83:2c:07:71:88:3b:e0:3c:10:d7:3a: 99:c9:a9:15:6d:b9:82:c1:d9:fc:86:bc:5a:1a:87: ff:51:c1:f0:47:6e:13:1a:24:9f:73:e9:f2:11:d9: f7:61:5f:b9:b7:17:35:49:9a:95:6c:71:46:b2:21: bf:b3:91:fc:4a:ec:e7:f3:b3:98:4a:58:4c:49:15: ca:6b:3a:b9:39:23:e5:8b:45:ed:03:90:89:71:84: fc:6f:41:a0:e9:8b:20:43:7e:02:7f:6d:fd:52:33: b0:9c:43:17:ba:b0:79:94:22:1e:42:a8:a3:91:90: c4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:71:9A:23:8E:E4:3E:8E:F3:59:16:B0:4A:42:94:99:79:AA:1C:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:3f:91:b6:72:0b:10:5b:c6:48:80:40:c9:2e:8f:20:7c:bb: 60:6c:67:c9:b0:47:e1:c9:9b:2e:41:7d:d7:13:09:b8:fa:63: 75:a0:6e:8e:8d:e0:4d:01:c9:b5:93:47:4a:9d:9d:7f:cb:11: 26:be:7a:03:87:20:6d:22:c3:50:62:b8:79:a8:6f:de:96:c5: 04:7a:30:4f:14:5b:06:31:28:f9:ff:5a:09:35:5a:de:18:31: c4:26:2c:80:d0:32:45:7e:71:9c:e6:c0:0a:bc:7e:1c:cf:58: ef:00:01:cb:90:05:11:7e:f8:c2:bf:95:71:d1:c8:4a:f5:68: 9f:4d:29:1d:a0:50:5f:7e:8e:21:60:ba:ee:e5:15:34:a5:e4: 5a:66:3e:a4:84:5d:7a:d8:1c:61:c2:ca:18:c5:16:a6:91:82: 52:d2:0c:42:0d:58:3f:22:b4:4a:69:3d:56:5d:4a:81:da:9b: d2:a3:dd:27:83:00:1e:bd:fa:46:79:05:f9:1c:2b:57:7f:cf: 8a:bd:4e:27:36:44:83:c4:ff:70:b0:05:f9:ba:84:b3:36:10: d8:39:8a:67:7c:0a:cd:7c:20:a6:f3:e4:79:71:8d:83:cd:49: 5c:62:d3:e0:61:9d:ce:85:21:65:a7:73:ed:bf:76:c5:96:b5: aa:48:cf:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnGVgUqV7qCJrVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZTE4ZTUwY2EtMTc2My00ODUxLWJiZTktYjM0MWZlNzI0YWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQGKGRdWLXsy2hOJjQnSViUqkesdkVL98Kje PJpmT06CV3L7MnLvWPyPzHuOgdCSksk5ZZLH77DMM5L6Gi4iFHDze7ouve/k9l8S g93B4J68ziukOtvzOZktTjj5zKQ+PK4QZCFVvJqznM9UEmynHg4V4OvcCiFecZ0I QqQQuEqbPNI3vozfNh7FgywHcYg74DwQ1zqZyakVbbmCwdn8hrxaGof/UcHwR24T GiSfc+nyEdn3YV+5txc1SZqVbHFGsiG/s5H8Suzn87OYSlhMSRXKazq5OSPli0Xt A5CJcYT8b0Gg6YsgQ34Cf239UjOwnEMXurB5lCIeQqijkZDEfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpxmiOO5D6O81kWsEpClJl5qhzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjFiODZhMGEtOTNiYS0z NjhlLTk2NTAtMDU4MjcxZjhjMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQ/kbZyCxBbxkiAQMkujyB8u2BsZ8mwR+HJmy5BfdcTCbj6Y3Wgbo6N 4E0BybWTR0qdnX/LESa+egOHIG0iw1BiuHmob96WxQR6ME8UWwYxKPn/Wgk1Wt4Y McQmLIDQMkV+cZzmwAq8fhzPWO8AAcuQBRF++MK/lXHRyEr1aJ9NKR2gUF9+jiFg uu7lFTSl5FpmPqSEXXrYHGHCyhjFFqaRglLSDEINWD8itEppPVZdSoHam9Kj3SeD AB69+kZ5BfkcK1d/z4q9Tic2RIPE/3CwBfm6hLM2ENg5imd8Cs18IKbz5HlxjYPN SVxi0+Bhnc6FIWWnc+2/dsWWtapIz2k= -----END CERTIFICATE-----Generated at Sat Jun 13 21:43:01 2026 by rpki-client