$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09d7a587-a979-367c-95a2-0cb463b5d3be.roa File: 09d7a587-a979-367c-95a2-0cb463b5d3be.roa (raw, json) Hash identifier: Q/c6L4eR0kzm/8AvVtqImPZLzYacpa7kRkuTgn2B5Tc= Subject key identifier: DF:E5:48:60:76:74:EB:2E:58:35:A1:51:88:D4:B1:23:50:A4:B7:AA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E112E443E9F255D07E6EA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09d7a587-a979-367c-95a2-0cb463b5d3be.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.22.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:12:e4:43:e9:f2:55:d0:7e:6e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=42e97ae9-3a9e-4647-9815-ef39a64b3378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b3:ab:83:85:6d:1d:6e:e3:83:d2:df:d4:f1: 67:b9:93:af:3e:19:34:e1:d7:09:49:ee:9a:39:e0: 21:95:af:d6:f1:f5:8e:21:7b:e7:66:b9:cf:3d:ac: cc:c2:56:0c:c6:c8:74:eb:19:db:ce:0f:48:b5:f7: f5:5a:9a:02:69:18:3e:f1:1b:a4:ae:2e:3a:49:2b: 36:40:63:77:53:17:33:f7:38:5c:79:cb:d8:34:d3: 11:24:66:1a:14:84:cb:21:20:77:4d:78:4d:1e:06: 2c:d7:38:ec:05:47:ec:3d:4e:03:00:cf:40:ce:ec: bb:73:a8:1a:b4:4d:81:98:80:09:d4:39:27:b6:08: 3f:b8:7f:d7:91:67:6e:63:0c:79:12:8d:f5:47:8d: 18:33:5d:6b:b2:fc:49:53:e4:45:7c:04:2d:20:88: 34:01:c4:8d:e6:6f:6c:36:af:be:9d:10:02:ab:cd: 29:e5:72:9b:7b:ce:40:58:5d:2c:43:75:05:60:40: 7a:9f:1e:28:74:10:fb:a3:0c:5f:98:73:4b:39:29: ed:73:78:03:10:b7:02:53:ec:1f:b0:ff:77:82:1e: d1:e1:be:79:e9:ee:00:5f:56:c3:47:e7:17:80:67: 1f:20:88:b5:b4:f9:4f:34:7a:9f:05:96:08:a6:64: c5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E5:48:60:76:74:EB:2E:58:35:A1:51:88:D4:B1:23:50:A4:B7:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09d7a587-a979-367c-95a2-0cb463b5d3be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:0d:ec:06:59:f6:bd:c0:dc:96:cc:52:f9:88:b7:96:81:30: b4:f5:cf:b5:10:43:44:f1:2f:90:4c:3e:72:60:93:af:fe:51: 5f:38:12:35:cd:c2:d6:c5:39:d8:ae:b8:82:52:1e:d2:a0:f0: 21:54:be:f0:ae:0f:75:3c:73:e3:4b:62:e3:88:dd:4f:2d:4d: 92:0e:cb:e0:52:e2:4a:cc:66:28:56:1f:52:6a:83:85:e9:79: c0:e3:dd:99:33:e8:73:29:53:a6:9e:06:91:b7:89:41:15:4d: aa:2a:91:6f:4b:0b:be:19:eb:67:00:fe:1f:cc:17:63:a6:b6: df:5c:e5:d1:22:81:f4:1c:11:4a:8f:b4:09:77:b8:1e:bf:25: 70:2a:9c:2d:fb:f5:55:ab:f2:cc:79:10:c9:db:f1:51:6b:cf: 1d:86:69:e6:25:0b:94:9b:18:77:0d:c7:6e:1a:3d:56:73:af: b9:00:e6:83:c5:e1:f2:2e:16:d7:48:4b:98:8f:00:ea:c8:9a: 34:ad:6d:a1:e9:dd:d8:ee:31:58:ac:74:fa:63:a2:0f:e9:40: 46:a4:bd:96:cf:95:6c:ba:04:e8:95:bd:80:51:64:d1:7d:66: 07:9c:43:4c:0b:d0:2c:4a:92:67:df:00:e1:d4:7b:ab:49:8b: c2:1c:2d:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RLkQ+nyVdB+bqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDJlOTdhZTktM2E5ZS00NjQ3LTk4MTUtZWYzOWE2NGIzMzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbOrg4VtHW7jg9Lf1PFnuZOvPhk04dcJSe6a OeAhla/W8fWOIXvnZrnPPazMwlYMxsh06xnbzg9Itff1WpoCaRg+8Rukri46SSs2 QGN3Uxcz9zhcecvYNNMRJGYaFITLISB3TXhNHgYs1zjsBUfsPU4DAM9Azuy7c6ga tE2BmIAJ1Dkntgg/uH/XkWduYwx5Eo31R40YM11rsvxJU+RFfAQtIIg0AcSN5m9s Nq++nRACq80p5XKbe85AWF0sQ3UFYEB6nx4odBD7owxfmHNLOSntc3gDELcCU+wf sP93gh7R4b556e4AX1bDR+cXgGcfIIi1tPlPNHqfBZYIpmTFUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/lSGB2dOsuWDWhUYjUsSNQpLeqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDlkN2E1ODctYTk3OS0z NjdjLTk1YTItMGNiNDYzYjVkM2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRasMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYN7AZZ9r3A3JbMUvmIt5aBMLT1z7UQQ0TxL5BMPnJgk6/+UV84EjXN wtbFOdiuuIJSHtKg8CFUvvCuD3U8c+NLYuOI3U8tTZIOy+BS4krMZihWH1Jqg4Xp ecDj3Zkz6HMpU6aeBpG3iUEVTaoqkW9LC74Z62cA/h/MF2Omtt9c5dEigfQcEUqP tAl3uB6/JXAqnC379VWr8sx5EMnb8VFrzx2GaeYlC5SbGHcNx24aPVZzr7kA5oPF 4fIuFtdIS5iPAOrImjStbaHp3djuMVisdPpjog/pQEakvZbPlWy6BOiVvYBRZNF9 ZgecQ0wL0CxKkmffAOHUe6tJi8IcLcA= -----END CERTIFICATE-----Generated at Thu Mar 26 09:13:14 2026 by rpki-client