$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10e1d8a7-5725-334d-92a5-7db8302cf95f.roa File: 10e1d8a7-5725-334d-92a5-7db8302cf95f.roa (raw, json) Hash identifier: TL1ptThlBMxHzVpGynNIQIWxxYV9HVZWwAW6zZMqddE= Subject key identifier: 9A:43:B7:E3:81:97:2F:24:94:1D:62:31:1E:D2:24:51:C6:70:5A:94 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E1129B1F73A2848C241680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10e1d8a7-5725-334d-92a5-7db8302cf95f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.22.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:12:9b:1f:73:a2:84:8c:24:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=da1196ed-5169-411c-92f3-a623dfc10082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1c:60:b1:bf:d5:64:c3:5a:9f:d6:5c:fa:e6: 93:8e:70:21:78:f1:aa:a7:af:45:a8:e7:94:f4:c8: 4f:61:59:cb:d6:e0:b5:5e:f0:11:ba:83:7a:65:dc: 5e:31:37:36:d0:ca:cb:89:69:47:6c:52:11:da:c3: de:76:fb:e3:9e:12:23:28:bb:9d:1e:ae:7e:33:fb: 4d:a0:da:57:05:ab:35:69:57:62:5b:d7:04:ce:dd: 05:fd:aa:f0:35:9a:49:ee:88:a6:62:c7:34:84:57: 0a:62:d5:df:09:e8:ee:26:f0:1e:54:88:ec:59:03: 31:43:da:96:90:81:bf:c4:99:8b:4b:de:98:72:72: 77:eb:84:1c:d7:e6:60:ae:ca:17:1d:2f:1e:26:ea: 4c:48:5d:05:5e:2f:b0:52:da:b1:38:c6:2c:6f:98: c7:8e:11:e1:35:0c:a8:83:79:e8:c9:6b:7e:f0:f5: 55:45:3c:0d:d0:5d:48:2b:c4:5d:9e:9a:e8:46:bc: af:b9:6f:7b:cf:17:ad:d0:8b:a8:87:69:73:6f:ac: 4d:ed:cb:64:0a:32:b8:0e:56:a1:e4:37:be:f2:c5: f7:3c:76:a4:fe:d4:e9:ec:72:cc:94:a9:05:17:1c: 12:f3:ef:38:fb:9e:fc:f1:77:6c:b8:3c:21:6f:52: 13:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:43:B7:E3:81:97:2F:24:94:1D:62:31:1E:D2:24:51:C6:70:5A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/10e1d8a7-5725-334d-92a5-7db8302cf95f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ec:ba:c9:1f:78:a2:b0:9e:b8:9d:db:70:a2:3d:d0:de:b3: e5:76:a4:1a:cd:b6:42:b9:d9:85:1d:9b:bd:d1:d6:00:fe:0d: 9a:b7:c5:3b:d6:ed:e0:ae:fe:80:ab:38:53:ba:19:0d:c1:16: 1a:e4:1a:80:7f:a7:9d:e4:83:e7:8e:d3:fb:93:f0:45:a3:e4: 6b:26:c2:e2:97:d1:85:ea:50:1c:de:f7:ac:90:58:17:fa:c6: 08:10:a5:88:f3:bf:a2:ca:6d:16:bd:19:e5:9f:a1:e7:bf:6f: 4f:f1:6a:77:04:dc:f8:82:f7:31:67:e9:31:a3:9c:34:0c:2c: 9c:4f:59:d6:84:f3:25:4c:f0:1e:4b:6f:24:48:d2:8a:1d:bf: 8f:61:45:84:d3:6b:b8:f3:17:b0:5f:93:a8:dd:06:5d:f2:27: 99:fa:8e:14:03:55:0a:50:a1:8d:23:35:5b:76:0c:cf:54:6b: 0d:53:33:60:16:26:43:1a:c5:32:99:5f:7c:db:9c:db:49:77: ec:3a:c9:b9:35:3c:fc:e3:75:d8:b8:24:f4:bf:d8:c9:78:75: 54:a0:f3:01:bb:0f:55:07:4d:0d:45:9d:d9:d6:56:7b:50:b5: 54:7a:95:c4:5c:d0:3b:7e:a8:06:16:62:6d:23:75:ca:d5:6e: 5f:ed:5d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RKbH3OihIwkFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGExMTk2ZWQtNTE2OS00MTFjLTkyZjMtYTYyM2RmYzEwMDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Bxgsb/VZMNan9Zc+uaTjnAhePGqp69FqOeU 9MhPYVnL1uC1XvARuoN6ZdxeMTc20MrLiWlHbFIR2sPedvvjnhIjKLudHq5+M/tN oNpXBas1aVdiW9cEzt0F/arwNZpJ7oimYsc0hFcKYtXfCejuJvAeVIjsWQMxQ9qW kIG/xJmLS96YcnJ364Qc1+ZgrsoXHS8eJupMSF0FXi+wUtqxOMYsb5jHjhHhNQyo g3noyWt+8PVVRTwN0F1IK8RdnproRryvuW97zxet0Iuoh2lzb6xN7ctkCjK4Dlah 5De+8sX3PHak/tTp7HLMlKkFFxwS8+84+5788XdsuDwhb1ITrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpDt+OBly8klB1iMR7SJFHGcFqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTBlMWQ4YTctNTcyNS0z MzRkLTkyYTUtN2RiODMwMmNmOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnsuskfeKKwnrid23CiPdDes+V2pBrNtkK52YUdm73R1gD+DZq3xTvW 7eCu/oCrOFO6GQ3BFhrkGoB/p53kg+eO0/uT8EWj5GsmwuKX0YXqUBze96yQWBf6 xggQpYjzv6LKbRa9GeWfoee/b0/xancE3PiC9zFn6TGjnDQMLJxPWdaE8yVM8B5L byRI0oodv49hRYTTa7jzF7Bfk6jdBl3yJ5n6jhQDVQpQoY0jNVt2DM9Uaw1TM2AW JkMaxTKZX3zbnNtJd+w6ybk1PPzjddi4JPS/2Ml4dVSg8wG7D1UHTQ1FndnWVntQ tVR6lcRc0Dt+qAYWYm0jdcrVbl/tXaU= -----END CERTIFICATE-----Generated at Thu Mar 26 14:59:20 2026 by rpki-client