$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05d56e05-1215-3148-b76f-a00f62c90929.roa File: 05d56e05-1215-3148-b76f-a00f62c90929.roa (raw, json) Hash identifier: kHGlv+yaDQsIbaxepDMiBbYZ/qtYXqGaB0Xk48L0slw= Subject key identifier: 47:C0:02:B7:C7:54:83:57:7C:35:EB:0B:8D:00:94:F0:9A:C9:A1:E8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E13361C10A447B1A9BDF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05d56e05-1215-3148-b76f-a00f62c90929.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.17.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:33:61:c1:0a:44:7b:1a:9b:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=34110097-6853-4560-9d46-a2b5c8e06d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:d0:be:dd:a4:84:dc:af:22:8e:9e:4a:78: 90:b2:08:6b:ab:22:db:ee:b5:c6:52:a3:b6:ff:89: c6:ca:d3:78:80:8b:e9:33:ab:29:19:fc:f0:fd:09: 90:2e:ae:63:4e:29:20:91:39:9e:4a:3a:a0:84:14: 49:de:aa:5c:0f:a5:01:57:01:aa:ba:ad:a7:7b:3d: 13:15:00:85:1a:6a:52:5c:7a:2e:eb:75:8d:f9:9d: 39:e3:13:fe:fe:77:8f:c4:eb:b9:75:66:be:4f:52: 03:e6:29:eb:c7:8b:9c:42:5e:36:e6:51:94:cb:ed: 43:6f:bb:b0:48:80:cd:47:79:a5:95:9c:05:84:71: fd:31:f0:46:e0:20:68:91:9b:e9:2b:9b:09:34:d3: bf:bf:81:b7:01:fa:52:dd:31:d7:93:06:6a:bf:24: 67:8d:04:04:f2:dc:a5:e3:57:97:21:17:a7:4f:24: 4b:48:a6:49:34:80:42:77:96:6c:9f:67:13:b6:2d: a1:a7:74:59:f4:c5:e2:98:ff:4e:6e:52:31:be:94: e3:be:b9:6a:bc:5e:4f:45:0a:1d:66:21:8c:ed:b8: 3f:aa:aa:e4:a7:93:bd:68:ef:4c:8e:6a:e6:c5:7c: 6d:f9:54:67:80:68:5a:cb:c8:dc:39:37:92:3b:65: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C0:02:B7:C7:54:83:57:7C:35:EB:0B:8D:00:94:F0:9A:C9:A1:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/05d56e05-1215-3148-b76f-a00f62c90929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a8:19:86:0f:3d:90:47:eb:8e:18:f1:d1:aa:61:e1:09:62: 24:4f:a4:9f:3b:e5:81:70:3e:db:b3:e6:47:ee:9e:d4:78:6c: b5:ab:63:22:17:d2:1b:8f:f9:e5:35:ad:f7:1b:62:aa:b7:19: fe:22:1c:73:69:82:30:f6:2c:47:52:db:74:49:cd:63:c5:16: 45:be:ec:f1:7e:64:c2:8b:94:db:ae:f4:c6:31:07:59:32:c2: aa:84:15:34:b3:fd:5b:c3:a5:b5:38:60:b8:e0:26:cf:17:ec: 1f:9c:1a:58:67:89:3f:6c:cc:12:3d:45:89:54:68:64:a1:d1: ba:67:45:04:08:14:7f:d2:0c:e7:14:de:af:78:80:9b:56:52: 51:50:92:6d:87:f8:cf:ff:8f:98:6b:ed:56:1a:de:d9:1d:bb: bd:4e:85:b9:33:77:a8:c4:cf:6e:34:91:a3:14:9b:51:35:ed: 93:47:65:b4:91:c0:11:bf:c3:2b:61:a2:70:e0:b0:be:32:c3: 11:49:3e:58:70:bb:6d:41:bd:c4:92:f9:3c:18:2c:e6:52:5c: 85:7b:7b:93:87:74:8a:7f:22:a8:0c:59:48:d6:30:d0:ae:e5: d3:21:a4:32:a1:b6:86:d1:d1:74:5a:13:31:76:bb:5f:20:9c: 39:8f:00:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4TNhwQpEexqb3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzQxMTAwOTctNjg1My00NTYwLTlkNDYtYTJiNWM4ZTA2ZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskPQvt2khNyvIo6eSniQsghrqyLb7rXGUqO2 /4nGytN4gIvpM6spGfzw/QmQLq5jTikgkTmeSjqghBRJ3qpcD6UBVwGquq2nez0T FQCFGmpSXHou63WN+Z054xP+/nePxOu5dWa+T1ID5inrx4ucQl425lGUy+1Db7uw SIDNR3mllZwFhHH9MfBG4CBokZvpK5sJNNO/v4G3AfpS3THXkwZqvyRnjQQE8tyl 41eXIRenTyRLSKZJNIBCd5Zsn2cTti2hp3RZ9MXimP9OblIxvpTjvrlqvF5PRQod ZiGM7bg/qqrkp5O9aO9MjmrmxXxt+VRngGhay8jcOTeSO2WQrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfAArfHVINXfDXrC40AlPCayaHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDVkNTZlMDUtMTIxNS0z MTQ4LWI3NmYtYTAwZjYyYzkwOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArREqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOoGYYPPZBH644Y8dGqYeEJYiRPpJ875YFwPtuz5kfuntR4bLWrYyIX 0huP+eU1rfcbYqq3Gf4iHHNpgjD2LEdS23RJzWPFFkW+7PF+ZMKLlNuu9MYxB1ky wqqEFTSz/VvDpbU4YLjgJs8X7B+cGlhniT9szBI9RYlUaGSh0bpnRQQIFH/SDOcU 3q94gJtWUlFQkm2H+M//j5hr7VYa3tkdu71Ohbkzd6jEz240kaMUm1E17ZNHZbSR wBG/wythonDgsL4ywxFJPlhwu21BvcSS+TwYLOZSXIV7e5OHdIp/IqgMWUjWMNCu 5dMhpDKhtobR0XRaEzF2u18gnDmPAMg= -----END CERTIFICATE-----Generated at Thu Mar 26 16:29:45 2026 by rpki-client