$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c9da734-8cdc-3cef-b74c-68bb357d4011.roa File: 0c9da734-8cdc-3cef-b74c-68bb357d4011.roa (raw, json) Hash identifier: 7not6btOfAV1c/7Ns7O8xDfI0tko6ZwEmRtDmTBeZxk= Subject key identifier: 19:CC:6A:F3:9E:AC:36:C8:87:3A:84:0D:42:A1:12:FB:D4:AF:6B:B0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF94E623DB5BA1B0BB7200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c9da734-8cdc-3cef-b74c-68bb357d4011.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.16.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:94:e6:23:db:5b:a1:b0:bb:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7447331a-bf84-40b2-bf99-68846d229165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:10:5e:24:2f:c9:85:68:2a:cc:e4:ed:d7: d8:fe:39:71:94:aa:16:a4:ce:7d:2f:18:c7:78:95: 7b:ec:3d:b1:88:d6:b7:49:75:90:72:c4:76:1a:7f: 3a:1b:4d:a4:c8:88:c3:c2:de:3d:20:e1:f3:ea:06: 71:5a:cb:aa:b1:11:df:4c:49:82:07:30:a7:9a:b6: 29:bd:89:5c:92:38:28:36:b7:73:3f:78:32:69:8b: bd:52:a0:57:6d:99:44:c7:6b:32:5a:e1:3d:38:f6: 92:28:93:59:83:54:a5:c6:5f:97:d1:53:98:d9:79: 5e:bd:6e:50:f9:59:01:9c:f8:65:b5:fc:78:1c:0a: 71:86:73:1f:b4:e9:81:70:23:2e:e5:f6:e2:ca:7e: 3c:c5:14:51:6c:6a:98:b7:1a:68:81:1b:70:a3:04: d6:f4:21:b3:00:9f:72:13:62:3e:40:84:5a:db:d6: d6:4f:12:2e:13:50:3c:be:56:ac:08:5d:db:a3:3c: 98:3d:f3:15:36:c3:38:32:8e:1c:c5:b9:8c:27:34: 34:20:32:4b:bb:9d:85:24:34:79:41:a0:d8:bc:90: e9:00:ac:81:28:22:93:34:f2:59:16:58:43:a4:c5: 9a:e5:b3:b1:71:e5:68:1e:b0:d5:b1:26:47:9f:70: 59:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CC:6A:F3:9E:AC:36:C8:87:3A:84:0D:42:A1:12:FB:D4:AF:6B:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c9da734-8cdc-3cef-b74c-68bb357d4011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:0c:a1:12:de:b0:d3:8c:bd:c0:ff:40:33:04:89:e0:51:dd: 22:a3:2f:df:39:60:c4:d6:9f:e4:87:76:70:6e:85:40:5f:3d: df:26:f4:bd:cc:85:71:6c:fc:c8:5b:18:31:c4:05:6c:b8:10: a9:9c:d1:20:62:fa:38:23:86:31:98:25:08:e2:4c:b2:a2:67: 4b:0b:f7:86:f0:0d:e9:ac:db:e3:07:2b:27:cc:c0:24:1d:df: 4f:69:d3:82:c7:f4:60:a9:5f:1b:76:2e:10:0b:ff:47:b8:08: 8a:3d:88:47:30:cc:f6:18:45:ff:ed:48:aa:6a:a0:e7:53:78: 0d:03:32:51:f2:10:68:9c:d0:d6:04:36:8e:54:93:16:13:28: cd:63:87:90:40:6d:cf:ac:84:03:6f:c9:e4:92:7d:87:ff:b4: 7c:7e:1f:5f:53:db:a3:84:1a:11:52:3a:f1:6d:20:01:eb:4a: eb:2a:bd:6e:81:27:46:89:fa:05:b8:03:1d:e6:32:6e:cc:1a: 93:25:22:95:d0:a8:58:6d:23:0b:13:b9:07:4f:d4:4f:0b:ee: 6e:34:5c:00:97:0f:fd:9f:27:2c:81:96:b4:7c:76:bf:aa:49: 78:ab:ed:18:59:aa:f7:72:fd:a4:d0:f5:f6:9e:49:15:4f:ae: 8d:39:ef:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35TmI9tbobC7cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NzQ0NzMzMWEtYmY4NC00MGIyLWJmOTktNjg4NDZkMjI5MTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS0QXiQvyYVoKszk7dfY/jlxlKoWpM59LxjH eJV77D2xiNa3SXWQcsR2Gn86G02kyIjDwt49IOHz6gZxWsuqsRHfTEmCBzCnmrYp vYlckjgoNrdzP3gyaYu9UqBXbZlEx2syWuE9OPaSKJNZg1Slxl+X0VOY2XlevW5Q +VkBnPhltfx4HApxhnMftOmBcCMu5fbiyn48xRRRbGqYtxpogRtwowTW9CGzAJ9y E2I+QIRa29bWTxIuE1A8vlasCF3bozyYPfMVNsM4Mo4cxbmMJzQ0IDJLu52FJDR5 QaDYvJDpAKyBKCKTNPJZFlhDpMWa5bOxceVoHrDVsSZHn3BZuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnMavOerDbIhzqEDUKhEvvUr2uwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGM5ZGE3MzQtOGNkYy0z Y2VmLWI3NGMtNjhiYjM1N2Q0MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRDPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIMoRLesNOMvcD/QDMEieBR3SKjL985YMTWn+SHdnBuhUBfPd8m9L3M hXFs/MhbGDHEBWy4EKmc0SBi+jgjhjGYJQjiTLKiZ0sL94bwDems2+MHKyfMwCQd 309p04LH9GCpXxt2LhAL/0e4CIo9iEcwzPYYRf/tSKpqoOdTeA0DMlHyEGic0NYE No5UkxYTKM1jh5BAbc+shANvyeSSfYf/tHx+H19T26OEGhFSOvFtIAHrSusqvW6B J0aJ+gW4Ax3mMm7MGpMlIpXQqFhtIwsTuQdP1E8L7m40XACXD/2fJyyBlrR8dr+q SXir7RhZqvdy/aTQ9faeSRVPro0577U= -----END CERTIFICATE-----Generated at Thu Mar 26 13:54:15 2026 by rpki-client