$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffe719d-7b62-3608-b488-f385e0f93231.roa File: 0ffe719d-7b62-3608-b488-f385e0f93231.roa (raw, json) Hash identifier: 12iT4l1aXuwRduso01i55JcLQ9cOaLgYdh1SX84I014= Subject key identifier: A6:AD:3A:BF:97:B3:1A:6C:6E:46:B0:ED:A6:C9:48:D4:94:9F:53:A1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AAC9AC55C8975A7C25A100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffe719d-7b62-3608-b488-f385e0f93231.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.19.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:c9:ac:55:c8:97:5a:7c:25:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=3bb37ad6-dbde-4052-b5b6-794d21c014d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a5:4f:65:05:c4:35:47:55:a5:d9:72:46:12: cf:f2:db:47:c1:f8:eb:91:70:da:66:86:9e:c9:4d: a1:16:d1:c6:32:f5:00:96:3f:1a:87:6a:34:e7:c0: be:f1:e2:8a:ab:d2:d7:7e:4e:24:95:7f:e5:c1:d8: 17:f4:d6:3d:2d:86:7b:c5:dc:1e:11:9d:69:1a:79: db:9d:ef:b2:82:6d:cd:df:59:bd:b4:c9:be:5a:71: f7:74:e2:ac:21:25:5f:97:ca:86:ee:97:5f:23:b6: 71:42:bb:e2:9b:f5:4b:b9:f8:41:eb:79:7e:b1:5f: 93:2f:41:8e:2f:df:b1:ea:95:b2:16:e9:da:78:94: f3:61:b3:fc:15:15:74:32:98:09:c3:ff:ff:c1:6c: 4c:b5:0b:3a:0f:26:b1:2f:78:80:0f:ac:50:91:7e: e0:00:b2:13:26:ff:14:af:05:88:67:7f:2e:9c:2f: a8:b8:d6:b5:a1:2f:86:6a:59:11:90:fd:51:a1:fe: ce:31:10:11:18:9b:23:db:9c:9e:7d:74:97:8f:d5: dd:d6:85:30:f1:86:09:d8:4c:5d:6a:af:64:6d:91: 30:b9:86:d1:e4:ac:f0:d1:01:4e:6c:ab:87:17:b9: fc:86:cd:72:59:36:f8:81:7e:f8:2b:48:b9:c7:02: 33:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AD:3A:BF:97:B3:1A:6C:6E:46:B0:ED:A6:C9:48:D4:94:9F:53:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ffe719d-7b62-3608-b488-f385e0f93231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:7e:a0:1d:c9:0c:49:25:64:3b:a9:40:c5:24:7a:8d:f9:d1: 84:85:fc:38:47:13:1a:43:af:f1:d4:c6:7c:d1:c3:63:b7:f6: 0f:77:a4:09:f6:64:5e:0f:5b:ed:cd:67:ac:4c:62:96:7c:6d: 00:b3:44:f6:8e:15:ba:07:3c:8c:7d:ec:21:a1:70:87:84:46: ae:2d:68:87:4b:49:ea:ef:f9:28:12:6d:f5:c4:8a:31:d9:6e: fe:5b:ca:07:ab:71:e7:52:6e:d6:d8:bf:35:6c:17:4c:aa:2c: 53:07:96:aa:04:07:2b:9a:a2:3e:b0:63:df:5e:e7:a9:00:19: 26:b5:63:58:d5:96:74:17:98:0f:03:0a:4b:b9:e6:b5:0f:99: 34:f9:28:c2:4e:cb:61:fe:3e:91:11:23:7b:5a:e0:8a:55:05: 6f:1c:5a:55:90:e9:d8:f5:52:c5:a0:16:b3:17:07:0e:a0:b0: 92:9a:ca:f8:12:a2:a6:ea:3e:7e:8f:85:a8:78:c7:34:c5:d2: 6e:3a:81:5f:00:ad:95:34:23:60:b1:c6:a2:ed:5e:bf:c7:b7: 00:5f:b6:f9:4a:c2:a3:27:cb:a1:f3:c3:b4:a7:6d:b0:b3:b1: c1:72:97:59:42:10:f0:d7:c4:c5:70:dc:c1:90:81:d9:03:35: 3f:bc:8a:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqsmsVciXWnwloQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk M2JiMzdhZDYtZGJkZS00MDUyLWI1YjYtNzk0ZDIxYzAxNGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKVPZQXENUdVpdlyRhLP8ttHwfjrkXDaZoae yU2hFtHGMvUAlj8ah2o058C+8eKKq9LXfk4klX/lwdgX9NY9LYZ7xdweEZ1pGnnb ne+ygm3N31m9tMm+WnH3dOKsISVfl8qG7pdfI7ZxQrvim/VLufhB63l+sV+TL0GO L9+x6pWyFunaeJTzYbP8FRV0MpgJw///wWxMtQs6DyaxL3iAD6xQkX7gALITJv8U rwWIZ38unC+ouNa1oS+GalkRkP1Rof7OMRARGJsj25yefXSXj9Xd1oUw8YYJ2Exd aq9kbZEwuYbR5Kzw0QFObKuHF7n8hs1yWTb4gX74K0i5xwIzkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKatOr+Xsxpsbkaw7abJSNSUn1OhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGZmZTcxOWQtN2I2Mi0z NjA4LWI0ODgtZjM4NWUwZjkzMjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAh+oB3JDEklZDupQMUkeo350YSF/DhHExpDr/HUxnzRw2O39g93pAn2 ZF4PW+3NZ6xMYpZ8bQCzRPaOFboHPIx97CGhcIeERq4taIdLServ+SgSbfXEijHZ bv5bygercedSbtbYvzVsF0yqLFMHlqoEByuaoj6wY99e56kAGSa1Y1jVlnQXmA8D Cku55rUPmTT5KMJOy2H+PpERI3ta4IpVBW8cWlWQ6dj1UsWgFrMXBw6gsJKayvgS oqbqPn6Phah4xzTF0m46gV8ArZU0I2CxxqLtXr/HtwBftvlKwqMny6Hzw7SnbbCz scFyl1lCEPDXxMVw3MGQgdkDNT+8iuI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:52:22 2026 by rpki-client