$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11db554e-b982-3d8a-9cf2-17d247b56546.roa File: 11db554e-b982-3d8a-9cf2-17d247b56546.roa (raw, json) Hash identifier: pLZXTFYfNgLPW/JS1n1GKpvzfLcmKkpYF6sh3YwnDMQ= Subject key identifier: 0C:52:3D:69:5E:A8:0E:55:40:33:DC:D7:00:2E:FB:9A:DE:79:AE:9C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF78C2259CA8D822875240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11db554e-b982-3d8a-9cf2-17d247b56546.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.17.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:78:c2:25:9c:a8:d8:22:87:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4250bae4-9337-48bc-9b34-60318de314bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ce:4d:1b:8a:d7:1e:03:f2:66:9c:53:13:13: ea:3d:37:c2:5d:1b:79:10:a6:fe:b3:32:b1:79:8b: 20:4d:90:1b:d5:52:3d:35:3d:73:b9:bb:42:6b:97: 7c:d5:e7:5b:d2:1a:08:50:f8:ae:a1:31:13:d1:b9: 9a:83:0c:1d:b5:87:0d:49:37:10:79:27:0c:77:db: 26:8a:ef:90:11:7e:62:f4:1e:cd:56:58:10:34:97: fe:39:b7:d6:02:b4:2f:c1:41:54:45:af:9c:37:5d: 00:be:fa:e9:03:ec:49:c1:18:2e:0e:7a:17:53:03: 67:97:5f:1a:3c:71:ac:e4:06:4c:29:4c:98:89:30: c0:07:d7:3c:30:c1:30:38:aa:86:5b:f6:e3:25:3d: 85:12:cf:cd:e4:20:9e:be:78:f6:72:00:3a:22:91: 90:83:e1:45:17:7e:2a:0a:f6:b8:97:28:ca:52:90: 28:c6:25:7f:e3:14:a9:ea:62:3e:2f:87:65:03:a5: dd:9c:20:e8:fa:20:94:af:db:bc:af:65:04:63:a0: c4:6c:0e:a7:72:65:a2:43:ff:39:cb:ce:60:8f:bf: 1d:75:6d:b5:bb:1f:f7:dc:27:15:7e:b8:1e:df:4c: f3:f8:51:19:85:46:4c:85:51:4e:0a:59:4e:1a:0d: ad:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:52:3D:69:5E:A8:0E:55:40:33:DC:D7:00:2E:FB:9A:DE:79:AE:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/11db554e-b982-3d8a-9cf2-17d247b56546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:75:ee:85:bb:fb:9e:25:8d:01:d3:5b:b1:6d:9d:4b:f8:ae: 7d:77:73:56:44:f2:3d:4f:49:0c:b5:88:36:0c:07:a5:9f:f2: d6:da:39:fe:ac:d4:fd:ff:24:b0:36:e0:e9:50:93:7d:ae:2c: 55:52:36:2a:6b:fc:25:02:b0:d8:a9:6c:99:ee:95:71:e6:05: 45:fd:c4:dc:63:0b:36:f5:08:67:cf:60:c6:d7:ea:f8:4f:ec: 2e:1c:1f:53:41:48:9c:18:0d:c1:49:59:f1:b6:67:8e:1e:e8: 08:95:38:37:ec:9e:14:68:d7:29:29:4f:fb:d6:70:33:f9:1e: 06:7d:de:4d:c2:8b:2c:04:3c:39:74:24:41:f1:71:31:e1:7f: 83:39:33:d4:0a:ec:98:72:fb:e3:f4:06:28:fd:f9:65:fe:52: 08:e8:b6:a1:d4:18:a5:4b:d3:65:fa:c7:70:60:45:ed:c5:59: 6c:f8:8a:ae:f6:d5:9a:cc:4d:1b:ca:b0:53:34:19:ee:7f:ba: 8d:a8:97:87:c7:e2:73:dc:29:a7:bc:35:3c:03:46:51:ee:72: 36:7f:54:be:a1:7a:8b:73:03:96:6d:03:80:87:42:1a:21:b3: 90:72:e5:3f:5a:c7:fd:05:ba:28:df:cd:00:dd:7a:95:9b:79: ac:ee:0f:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k33jCJZyo2CKHUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDI1MGJhZTQtOTMzNy00OGJjLTliMzQtNjAzMThkZTMxNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg85NG4rXHgPyZpxTExPqPTfCXRt5EKb+szKx eYsgTZAb1VI9NT1zubtCa5d81edb0hoIUPiuoTET0bmagwwdtYcNSTcQeScMd9sm iu+QEX5i9B7NVlgQNJf+ObfWArQvwUFURa+cN10AvvrpA+xJwRguDnoXUwNnl18a PHGs5AZMKUyYiTDAB9c8MMEwOKqGW/bjJT2FEs/N5CCevnj2cgA6IpGQg+FFF34q Cva4lyjKUpAoxiV/4xSp6mI+L4dlA6XdnCDo+iCUr9u8r2UEY6DEbA6ncmWiQ/85 y85gj78ddW21ux/33CcVfrge30zz+FEZhUZMhVFOCllOGg2toQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxSPWleqA5VQDPc1wAu+5reea6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTFkYjU1NGUtYjk4Mi0z ZDhhLTljZjItMTdkMjQ3YjU2NTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV17oW7+54ljQHTW7FtnUv4rn13c1ZE8j1PSQy1iDYMB6Wf8tbaOf6s 1P3/JLA24OlQk32uLFVSNipr/CUCsNipbJnulXHmBUX9xNxjCzb1CGfPYMbX6vhP 7C4cH1NBSJwYDcFJWfG2Z44e6AiVODfsnhRo1ykpT/vWcDP5HgZ93k3CiywEPDl0 JEHxcTHhf4M5M9QK7Jhy++P0Bij9+WX+UgjotqHUGKVL02X6x3BgRe3FWWz4iq72 1ZrMTRvKsFM0Ge5/uo2ol4fH4nPcKae8NTwDRlHucjZ/VL6heotzA5ZtA4CHQhoh s5By5T9ax/0FuijfzQDdepWbeazuD98= -----END CERTIFICATE-----Generated at Thu Mar 26 09:04:08 2026 by rpki-client