$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0812ff7a-9c76-36d9-a7b1-930ddf649605.roa File: 0812ff7a-9c76-36d9-a7b1-930ddf649605.roa (raw, json) Hash identifier: Z9sGobiIBMMgSFsiLYr2ohrPbpQ2Je9V7rpmVaR8oBQ= Subject key identifier: 65:08:EC:33:2C:91:88:EA:A7:03:B7:36:09:F2:CB:67:09:D9:5A:39 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D332C7A5526BEC75E19E5BE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0812ff7a-9c76-36d9-a7b1-930ddf649605.roa Signing time: Tue 17 Mar 2026 15:57:25 +0000 ROA not before: Tue 17 Mar 2026 15:57:25 +0000 ROA not after: Mon 15 Jun 2026 15:57:25 +0000 asID: 30036 IP address blocks: 173.17.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:33:2c:7a:55:26:be:c7:5e:19:e5:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 17 15:57:25 2026 GMT Not After : Jun 15 15:57:25 2026 GMT Subject: CN=7d178acd-0e96-4b74-8528-78e364642450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:76:20:40:ab:4a:52:d9:9a:f9:58:70:97: d2:6f:82:a2:4d:34:1b:66:43:8d:fa:67:89:77:35: 93:8e:19:5f:47:41:a1:a1:f4:a8:78:6b:01:c9:df: bc:ce:ba:eb:c3:09:6d:fc:43:6f:cf:31:d2:cb:66: e0:9d:f8:0f:57:a3:ce:26:db:13:6a:98:b2:e9:f8: 3a:26:47:d7:38:ad:28:52:fa:7a:71:27:f5:30:d7: f6:83:46:b2:a9:6b:82:d5:50:15:de:a8:97:6f:54: 52:e8:ed:c2:02:07:a6:76:6e:3e:91:ca:68:83:97: d5:ad:ed:a6:d7:6f:4c:6a:53:dc:87:01:d8:09:63: 61:af:ac:e5:cd:b9:a4:e1:9e:ca:18:d1:7a:a2:af: f1:bb:90:06:cc:9b:fc:20:03:fc:50:f4:ca:e5:e7: 87:cf:19:08:bb:95:4a:7e:e5:2c:02:5c:0c:10:6d: cb:f1:c3:15:1f:ab:d8:a6:a0:a2:36:c7:72:00:be: 92:85:ab:f2:15:c1:54:64:d7:9c:d3:d1:bd:ac:9b: c1:2d:a6:39:fb:2d:f6:77:91:ab:44:7d:ae:09:b1: ef:ab:5a:86:b5:ce:c5:1d:18:f8:8d:96:6b:42:8b: 57:c4:fa:95:88:e0:fc:aa:17:42:3f:d6:e0:65:48: 29:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:08:EC:33:2C:91:88:EA:A7:03:B7:36:09:F2:CB:67:09:D9:5A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0812ff7a-9c76-36d9-a7b1-930ddf649605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e1:b2:f1:e8:f3:b1:33:14:be:2a:21:a9:90:b3:ed:57:66: 6b:88:a5:c8:51:29:55:32:7b:5b:76:88:2c:9b:81:71:74:5e: 47:ae:f9:a5:c7:a1:45:f7:b2:12:94:ef:ac:6d:b4:01:6b:19: ad:a6:50:2a:0c:d6:23:82:fe:e8:44:68:08:c7:5d:ae:bb:9b: ab:97:f0:e8:dc:c0:a3:c9:8b:b0:d2:15:15:ec:ba:b9:05:3d: 64:99:21:e2:1a:61:55:53:93:7c:36:ec:7b:01:61:14:4e:36: 67:05:59:18:21:56:32:0e:10:6f:4d:a8:cd:91:97:cd:9d:fd: f9:1a:7b:79:7f:ea:f2:02:81:b7:f1:5f:50:90:5a:09:c7:7a: 9d:4c:33:a7:ca:3e:9d:04:7d:28:29:f5:e6:c9:19:c9:4c:e8: 19:82:f5:50:35:8e:74:9a:e5:ab:7c:15:6a:ee:7a:e4:74:e2: 6b:63:10:dd:7c:ef:55:db:c9:d9:7b:af:fc:85:8c:96:3a:8f: 99:72:28:0d:77:1a:d0:84:f0:fa:dd:d0:48:c3:49:69:13:b3: 1e:6f:c0:72:af:50:5f:87:18:ce:5a:3c:d7:28:bf:4b:94:92: a8:4f:59:a3:b7:9d:e9:f6:66:c4:6d:5d:95:a9:c1:13:48:77: 8a:b3:cb:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0zLHpVJr7HXhnlvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxNzE1NTcyNVoXDTI2MDYxNTE1NTcyNVowLzEtMCsGA1UEAxMk N2QxNzhhY2QtMGU5Ni00Yjc0LTg1MjgtNzhlMzY0NjQyNDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttN2IECrSlLZmvlYcJfSb4KiTTQbZkON+meJ dzWTjhlfR0GhofSoeGsByd+8zrrrwwlt/ENvzzHSy2bgnfgPV6POJtsTapiy6fg6 JkfXOK0oUvp6cSf1MNf2g0ayqWuC1VAV3qiXb1RS6O3CAgemdm4+kcpog5fVre2m 129MalPchwHYCWNhr6zlzbmk4Z7KGNF6oq/xu5AGzJv8IAP8UPTK5eeHzxkIu5VK fuUsAlwMEG3L8cMVH6vYpqCiNsdyAL6ShavyFcFUZNec09G9rJvBLaY5+y32d5Gr RH2uCbHvq1qGtc7FHRj4jZZrQotXxPqViOD8qhdCP9bgZUgpbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUI7DMskYjqpwO3Ngnyy2cJ2Vo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDgxMmZmN2EtOWM3Ni0z NmQ5LWE3YjEtOTMwZGRmNjQ5NjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvhsvHo87EzFL4qIamQs+1XZmuIpchRKVUye1t2iCybgXF0Xkeu+aXH oUX3shKU76xttAFrGa2mUCoM1iOC/uhEaAjHXa67m6uX8OjcwKPJi7DSFRXsurkF PWSZIeIaYVVTk3w27HsBYRRONmcFWRghVjIOEG9NqM2Rl82d/fkae3l/6vICgbfx X1CQWgnHep1MM6fKPp0EfSgp9ebJGclM6BmC9VA1jnSa5at8FWrueuR04mtjEN18 71Xbydl7r/yFjJY6j5lyKA13GtCE8Prd0EjDSWkTsx5vwHKvUF+HGM5aPNcov0uU kqhPWaO3nen2ZsRtXZWpwRNId4qzywk= -----END CERTIFICATE-----Generated at Thu Mar 26 09:11:42 2026 by rpki-client