$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0660b27b-0de4-3266-bd57-e7d284cec4e7.roa File: 0660b27b-0de4-3266-bd57-e7d284cec4e7.roa (raw, json) Hash identifier: f2WCLewIBmqRI/cQ99zi+ra1QXxPnkg2njwTULsPRDQ= Subject key identifier: C5:AB:F0:28:63:74:97:5A:53:E6:64:66:76:7D:94:42:09:05:5B:7B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E1132F1C1B3F44EC6A1200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0660b27b-0de4-3266-bd57-e7d284cec4e7.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.19.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:13:2f:1c:1b:3f:44:ec:6a:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f218b622-e4fc-4a5b-b4f1-989d1fb17b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1b:fb:d8:33:e9:4a:70:f1:ca:28:5c:87:9c: 80:c3:25:11:63:16:18:fa:00:ad:71:8a:a1:57:2f: 4e:16:c2:fe:22:0e:b1:ef:0d:06:04:65:50:3b:10: e3:7e:e4:67:1b:dc:d4:dd:9d:78:05:b9:db:92:3e: 51:f0:61:f6:9d:1d:bf:3b:cd:88:dc:99:79:5b:7e: 49:0d:b8:59:8b:59:6b:5e:d1:0c:fb:d9:99:19:27: eb:b9:4f:79:a7:18:87:28:60:a0:ef:93:24:10:0c: aa:e3:ca:83:d7:17:1c:8c:c7:14:3a:27:da:0d:31: 4a:2c:50:77:78:77:69:da:3c:59:57:5e:05:bb:17: cc:28:85:6f:c1:5b:03:5f:61:96:4a:1d:35:cc:61: 2a:df:da:bc:a5:67:71:c5:0a:4e:96:b5:ef:6c:cc: 39:29:a7:97:37:9d:4d:96:78:cd:9a:a0:2b:f1:85: 93:7a:4d:cd:2f:4c:8b:ae:6b:fe:18:70:ec:2a:48: ec:de:73:32:2f:84:63:ad:4d:01:d6:c5:8b:f3:b6: 61:fb:c1:30:d7:13:6a:7f:11:4d:bf:dc:4e:9f:94: 80:7b:22:6f:c1:47:19:07:08:34:5d:b0:9b:69:b1: f2:04:40:fa:b5:5f:56:08:60:8c:b9:41:fa:45:b6: aa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AB:F0:28:63:74:97:5A:53:E6:64:66:76:7D:94:42:09:05:5B:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0660b27b-0de4-3266-bd57-e7d284cec4e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7d:4a:53:41:aa:f6:fe:09:5f:41:1a:5a:1c:a8:5c:ab:99: f2:39:ce:9f:fe:ee:ab:ac:0a:63:5c:9b:e7:f2:8a:5f:5d:69: ac:c1:a4:1a:ed:35:0f:6d:85:6f:67:6e:6a:99:b9:85:75:79: 1b:41:6a:43:12:c5:e8:4c:9f:fd:11:11:6c:20:af:e1:b9:1b: 1e:ce:13:20:be:9a:d9:3b:d3:9b:b4:7f:a9:09:5d:c9:d1:8b: 2e:f0:60:3c:94:0c:83:a1:da:1f:ba:f6:56:50:53:c9:c8:3e: 36:c9:88:cd:44:8f:df:f2:bd:a9:eb:43:c1:26:f7:1b:cf:ff: 03:ef:be:7b:bc:53:ee:db:c1:f6:94:a6:d2:de:10:2d:42:6b: 2d:6f:80:40:72:e6:12:2f:25:2a:31:df:41:e1:10:64:41:b4: 06:ca:68:fa:7a:75:54:23:f1:3f:78:57:f2:37:e5:fe:10:26: 87:35:df:75:6f:07:e4:51:3b:54:c1:a5:d4:ee:41:18:ce:88: 1c:a4:99:a4:66:7d:c0:80:4a:2e:9e:fe:09:f1:52:b9:70:69: 22:70:5e:db:69:d8:35:81:19:8c:21:7c:3a:04:6b:38:c3:76: 09:84:91:fa:84:4d:83:9c:44:85:15:e7:21:00:61:eb:31:f2: c1:b0:47:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RMvHBs/ROxqEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjIxOGI2MjItZTRmYy00YTViLWI0ZjEtOTg5ZDFmYjE3YjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthv72DPpSnDxyihch5yAwyURYxYY+gCtcYqh Vy9OFsL+Ig6x7w0GBGVQOxDjfuRnG9zU3Z14Bbnbkj5R8GH2nR2/O82I3Jl5W35J DbhZi1lrXtEM+9mZGSfruU95pxiHKGCg75MkEAyq48qD1xccjMcUOifaDTFKLFB3 eHdp2jxZV14FuxfMKIVvwVsDX2GWSh01zGEq39q8pWdxxQpOlrXvbMw5KaeXN51N lnjNmqAr8YWTek3NL0yLrmv+GHDsKkjs3nMyL4RjrU0B1sWL87Zh+8Ew1xNqfxFN v9xOn5SAeyJvwUcZBwg0XbCbabHyBED6tV9WCGCMuUH6RbaqQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWr8ChjdJdaU+ZkZnZ9lEIJBVt7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDY2MGIyN2ItMGRlNC0z MjY2LWJkNTctZTdkMjg0Y2VjNGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl9SlNBqvb+CV9BGlocqFyrmfI5zp/+7qusCmNcm+fyil9daazBpBrt NQ9thW9nbmqZuYV1eRtBakMSxehMn/0REWwgr+G5Gx7OEyC+mtk705u0f6kJXcnR iy7wYDyUDIOh2h+69lZQU8nIPjbJiM1Ej9/yvanrQ8Em9xvP/wPvvnu8U+7bwfaU ptLeEC1Cay1vgEBy5hIvJSox30HhEGRBtAbKaPp6dVQj8T94V/I35f4QJoc133Vv B+RRO1TBpdTuQRjOiBykmaRmfcCASi6e/gnxUrlwaSJwXttp2DWBGYwhfDoEazjD dgmEkfqETYOcRIUV5yEAYesx8sGwR4Q= -----END CERTIFICATE-----Generated at Thu Mar 26 11:33:36 2026 by rpki-client