$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f568845e-6a2b-3552-aa3f-087a3d48d162.roa File: f568845e-6a2b-3552-aa3f-087a3d48d162.roa (raw, json) Hash identifier: bek1eceARVh93GFk2U0iBpYwqheogljmMiNCLyQ0m4g= Subject key identifier: A1:5B:4A:AB:E8:9D:73:77:3D:D4:3F:38:71:B9:52:EE:61:94:A6:04 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DF7A5CCF34E7FDCA60EE31680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f568845e-6a2b-3552-aa3f-087a3d48d162.roa Signing time: Wed 27 May 2026 01:00:14 +0000 ROA not before: Wed 27 May 2026 01:00:14 +0000 ROA not after: Tue 25 Aug 2026 01:00:14 +0000 asID: 30036 IP address blocks: 173.20.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f7:a5:cc:f3:4e:7f:dc:a6:0e:e3:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 27 01:00:14 2026 GMT Not After : Aug 25 01:00:14 2026 GMT Subject: CN=a70e28b5-5378-44c3-9a14-c1ab2c4a1b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ce:21:80:bd:b7:8e:5f:db:f7:c3:66:62:e8: 36:2a:24:8b:31:24:e2:b2:ab:7c:bf:a5:70:8a:08: 27:8b:a6:e7:a6:5c:8d:d2:b2:03:ac:3e:5e:92:dd: b1:2f:f7:a8:f0:30:4a:f2:f4:75:21:8d:4e:a0:f8: 4e:a9:2f:84:25:99:1c:5f:f3:29:5c:74:65:8a:e4: 46:82:c9:5c:6d:f9:f0:14:c0:1b:87:e8:86:de:5f: 09:8c:bd:b4:45:72:c3:f4:b9:5e:10:cb:b8:bb:78: d5:d2:bb:94:a8:4f:d7:8b:75:f0:6f:d2:4c:08:b9: 12:4f:67:79:55:67:ff:b5:b6:67:73:5a:d1:6b:5a: ea:13:a6:41:f1:54:72:71:45:f3:c7:54:4a:9d:7e: 9e:38:dd:83:17:04:aa:c4:4e:f1:06:dd:e9:78:c2: 19:98:e9:a6:cd:91:a8:f6:2b:ca:a2:c0:a6:f9:0d: 9b:bb:2d:f1:da:c0:06:f7:59:80:ee:f3:2c:71:ac: 56:2a:99:6e:84:8d:f3:ce:dc:37:bd:81:bc:24:b3: 67:9d:ef:da:3e:35:db:e1:08:f3:73:9a:c6:63:d6: 19:c5:5e:17:77:87:a3:ee:10:23:f5:bb:bd:b8:c7: fb:ac:cc:f7:d2:8e:b6:dc:29:70:62:da:24:fa:a8: 7f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5B:4A:AB:E8:9D:73:77:3D:D4:3F:38:71:B9:52:EE:61:94:A6:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f568845e-6a2b-3552-aa3f-087a3d48d162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:61:1b:38:f7:09:97:5a:4d:2f:83:fa:e2:3d:b2:2e:92:4c: dd:6e:ff:2e:7c:4f:99:60:55:c7:b1:c9:f6:24:60:cc:29:e9: 4a:2d:b2:3e:95:bc:8a:9b:67:7b:44:ca:ef:27:10:00:0a:89: 83:03:5f:90:32:7b:41:95:6d:ff:ed:7b:4f:a3:1d:12:4d:60: 6e:00:20:ff:58:0a:e6:03:ec:4a:ed:e7:88:39:18:21:f4:4c: bb:ab:22:25:47:15:ad:15:51:b6:22:82:88:9f:83:e5:b5:b4: 8f:0c:18:74:94:ec:24:11:0c:5b:e1:2e:30:54:0e:53:75:9a: 54:0f:43:ac:ef:88:d4:f1:53:0c:5f:39:c7:bf:49:e7:11:b8: e2:9e:b3:84:19:32:9f:02:35:e9:4e:37:82:b6:f1:4c:cc:02: 75:01:75:03:9d:c8:cf:d6:60:16:44:3c:28:85:15:22:46:a8: 84:02:93:02:34:75:e3:c6:3a:73:d8:f4:66:af:c2:10:d3:3e: ce:82:5b:66:5b:cf:7d:f4:d5:a0:6c:ff:12:41:49:03:2e:f5: ec:c1:93:44:6e:00:4e:00:9b:5f:4c:0f:cf:2a:ca:f5:4e:01: a3:50:7d:64:3c:19:df:da:c3:59:9e:07:c8:6d:9d:d2:92:d8: 2e:04:6b:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE33pczzTn/cpg7jFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyNzAxMDAxNFoXDTI2MDgyNTAxMDAxNFowLzEtMCsGA1UEAxMk YTcwZTI4YjUtNTM3OC00NGMzLTlhMTQtYzFhYjJjNGExYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh84hgL23jl/b98NmYug2KiSLMSTisqt8v6Vw iggni6bnplyN0rIDrD5ekt2xL/eo8DBK8vR1IY1OoPhOqS+EJZkcX/MpXHRliuRG gslcbfnwFMAbh+iG3l8JjL20RXLD9LleEMu4u3jV0ruUqE/Xi3Xwb9JMCLkST2d5 VWf/tbZnc1rRa1rqE6ZB8VRycUXzx1RKnX6eON2DFwSqxE7xBt3peMIZmOmmzZGo 9ivKosCm+Q2buy3x2sAG91mA7vMscaxWKpluhI3zztw3vYG8JLNnne/aPjXb4Qjz c5rGY9YZxV4Xd4ej7hAj9bu9uMf7rMz30o623ClwYtok+qh/qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFbSqvonXN3PdQ/OHG5Uu5hlKYEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjU2ODg0NWUtNmEyYi0z NTUyLWFhM2YtMDg3YTNkNDhkMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlhGzj3CZdaTS+D+uI9si6STN1u/y58T5lgVcexyfYkYMwp6Uotsj6V vIqbZ3tEyu8nEAAKiYMDX5Aye0GVbf/te0+jHRJNYG4AIP9YCuYD7Ert54g5GCH0 TLurIiVHFa0VUbYigoifg+W1tI8MGHSU7CQRDFvhLjBUDlN1mlQPQ6zviNTxUwxf Oce/SecRuOKes4QZMp8CNelON4K28UzMAnUBdQOdyM/WYBZEPCiFFSJGqIQCkwI0 dePGOnPY9GavwhDTPs6CW2Zbz3301aBs/xJBSQMu9ezBk0RuAE4Am19MD88qyvVO AaNQfWQ8Gd/aw1meB8htndKS2C4Eays= -----END CERTIFICATE-----Generated at Sat Jun 13 16:06:36 2026 by rpki-client