$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9b3e35d-47d1-3af0-9773-086c2338376c.roa File: f9b3e35d-47d1-3af0-9773-086c2338376c.roa (raw, json) Hash identifier: lQX8blQM0ixx6wIxw27Rwe52Aej5wbLi4Hek/9L+mgU= Subject key identifier: 73:A9:26:CB:8A:07:A6:2B:0E:6C:2D:01:41:D2:BA:BB:A3:26:D2:43 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059B49A53E1FA1EB6218EC70 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9b3e35d-47d1-3af0-9773-086c2338376c.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.20.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:49:a5:3e:1f:a1:eb:62:18:ec:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=0e394c9a-8483-47af-b8d2-ecc1b66518a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:fd:c4:17:cd:67:31:67:af:9e:5d:28:6a: 05:19:d9:07:a0:dc:99:2b:92:98:64:eb:89:c2:42: ad:6d:7a:4c:78:dd:f3:c2:ec:9a:76:ce:fe:c3:01: f0:be:c3:cd:32:c4:5d:9a:8f:89:41:1c:9e:43:c0: d7:8c:bb:5c:ba:e8:76:31:fa:be:1a:18:9a:44:ca: 15:ce:0a:80:78:aa:c4:5b:11:31:af:da:69:f0:94: f9:e8:30:b3:1a:14:b2:37:6e:b4:d3:e3:81:77:ad: d9:b8:16:77:35:13:52:ed:dc:38:ff:f1:2a:02:64: 04:23:d8:ac:76:8f:5a:95:29:13:c2:ed:c5:48:cc: 2f:76:48:a5:ec:6c:07:fd:04:8f:d7:53:67:f6:d9: 07:a2:61:ee:ac:5e:c5:bd:47:aa:ce:33:3c:55:f5: 0c:7f:a8:23:8f:42:0e:e9:43:38:cd:32:1d:45:49: 6a:6a:83:3a:2e:f7:22:53:03:bd:d0:73:8f:bb:b5: ee:89:ae:29:5b:ed:ba:4e:ab:ef:12:ea:25:ac:3d: d9:18:c1:a6:a3:6b:0e:14:fa:f7:24:24:13:b5:43: 9a:e7:04:26:26:52:bb:44:1e:86:9f:bd:59:50:2b: 11:51:72:48:77:8c:de:ba:44:9b:dc:b6:22:52:e3: 77:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A9:26:CB:8A:07:A6:2B:0E:6C:2D:01:41:D2:BA:BB:A3:26:D2:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9b3e35d-47d1-3af0-9773-086c2338376c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:95:0a:4e:b7:cf:79:a9:15:34:64:0b:b5:1f:65:3a:35:c9: 34:b3:e0:ef:6b:ab:b6:07:05:9f:a4:24:97:87:e6:9d:6d:8d: 68:2d:91:59:20:1d:86:c8:4d:03:00:b3:56:e4:20:f6:b9:4e: 93:4d:f9:66:be:9f:da:71:ca:81:80:84:65:9f:ce:5e:2f:b5: bd:dd:c5:b0:8e:b5:3c:68:1a:d7:52:34:ff:72:90:d4:c6:02: 77:ba:87:b2:06:ff:18:26:f1:02:24:cf:ec:ef:bb:b6:21:f4: 9f:0a:e3:24:11:35:c4:1b:71:bd:3b:b7:3e:64:f8:e4:74:bd: f7:17:a7:78:a4:1c:70:b3:b9:49:fc:27:ef:b0:e3:f3:7f:16: 24:3c:50:07:66:92:b7:0a:4d:5c:5d:2c:5a:42:a7:8a:40:48: 43:3f:c1:c1:06:12:d9:e7:47:e4:b7:ef:47:83:13:a2:c2:85: 5a:69:08:f1:d0:48:5d:7f:4b:5f:c7:3d:ae:31:f2:1f:8a:4c: af:86:27:f7:9a:6f:98:48:d5:4a:3a:24:68:dc:af:79:3e:ef: 8f:21:bf:da:a3:8b:78:6b:b1:13:80:4d:70:bc:96:7a:a9:de: f3:b0:fe:f6:f8:95:1e:4f:db:9b:8d:06:83:e9:74:3b:38:cd: ca:9d:f7:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm0mlPh+h62IY7HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MGUzOTRjOWEtODQ4My00N2FmLWI4ZDItZWNjMWI2NjUxOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHL9xBfNZzFnr55dKGoFGdkHoNyZK5KYZOuJ wkKtbXpMeN3zwuyads7+wwHwvsPNMsRdmo+JQRyeQ8DXjLtcuuh2Mfq+GhiaRMoV zgqAeKrEWxExr9pp8JT56DCzGhSyN2600+OBd63ZuBZ3NRNS7dw4//EqAmQEI9is do9alSkTwu3FSMwvdkil7GwH/QSP11Nn9tkHomHurF7FvUeqzjM8VfUMf6gjj0IO 6UM4zTIdRUlqaoM6LvciUwO90HOPu7Xuia4pW+26TqvvEuolrD3ZGMGmo2sOFPr3 JCQTtUOa5wQmJlK7RB6Gn71ZUCsRUXJId4zeukSb3LYiUuN3jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOpJsuKB6YrDmwtAUHSurujJtJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjliM2UzNWQtNDdkMS0z YWYwLTk3NzMtMDg2YzIzMzgzNzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRR5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqVCk63z3mpFTRkC7UfZTo1yTSz4O9rq7YHBZ+kJJeH5p1tjWgtkVkg HYbITQMAs1bkIPa5TpNN+Wa+n9pxyoGAhGWfzl4vtb3dxbCOtTxoGtdSNP9ykNTG Ane6h7IG/xgm8QIkz+zvu7Yh9J8K4yQRNcQbcb07tz5k+OR0vfcXp3ikHHCzuUn8 J++w4/N/FiQ8UAdmkrcKTVxdLFpCp4pASEM/wcEGEtnnR+S370eDE6LChVppCPHQ SF1/S1/HPa4x8h+KTK+GJ/eab5hI1Uo6JGjcr3k+748hv9qji3hrsROATXC8lnqp 3vOw/vb4lR5P25uNBoPpdDs4zcqd98o= -----END CERTIFICATE-----Generated at Sat Jun 13 19:01:15 2026 by rpki-client