$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/122c6bfa-a998-31cf-82a5-f32b6525309e.roa File: 122c6bfa-a998-31cf-82a5-f32b6525309e.roa (raw, json) Hash identifier: MAQwBFEKb/wYXxpI/7dGjCn1LKvfk8CP51PgV9TJmWc= Subject key identifier: 67:90:67:57:E2:88:B1:0B:62:A8:9B:97:DF:14:C6:77:F3:B3:05:38 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D39CF7B0B6F1F7E07F4FD4160 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/122c6bfa-a998-31cf-82a5-f32b6525309e.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.29.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:7b:0b:6f:1f:7e:07:f4:fd:41:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=b2fe1b60-2552-4825-8ad3-9a0dbcb46d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bc:59:81:e2:07:da:24:0e:a5:ac:e5:af:2c: fa:12:b5:55:6b:65:ae:d7:06:1f:70:49:43:6d:58: 93:b9:81:2e:33:ed:45:26:9f:52:4a:2e:a0:66:27: 32:9a:89:1a:c9:30:76:92:fa:8e:9f:1b:b8:8f:35: 63:19:2a:7b:8e:5f:32:08:03:a3:63:ea:16:1b:75: f0:8c:43:b9:6a:3a:d3:e3:78:02:9e:d8:32:56:0f: 78:84:74:b4:2e:c9:53:fa:f3:7d:c9:f7:30:ea:19: c8:7f:56:cc:fa:6b:85:a7:9f:9b:b5:be:37:eb:99: 45:00:8d:ea:4f:10:e5:4e:33:10:92:4f:f3:ef:e8: 12:0a:02:3a:98:0e:fc:ba:7e:5e:b6:16:f5:f7:54: 46:a4:ce:0a:d8:f1:27:73:69:47:d8:07:f4:d2:27: 20:04:c4:ed:eb:e8:00:60:54:f8:f8:4d:40:b9:b4: a6:b2:24:9c:9e:e3:8b:fe:a1:c1:c5:11:de:27:d6: c0:d6:a8:7b:1b:7e:7c:14:7e:26:80:95:8d:61:b1: 06:93:1f:7f:52:48:c7:67:27:d6:29:1a:16:7a:e1: 10:11:57:a3:25:b7:49:73:d8:ae:ea:b4:6c:ee:dc: d3:bd:77:5e:7b:6f:8b:21:26:21:d6:5d:5b:9f:42: e0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:90:67:57:E2:88:B1:0B:62:A8:9B:97:DF:14:C6:77:F3:B3:05:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/122c6bfa-a998-31cf-82a5-f32b6525309e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d9:c3:33:93:77:2d:46:b3:d0:73:c7:1f:25:63:e5:18:93: 75:1d:36:f4:4a:1a:44:a4:2d:70:64:56:ba:29:c8:40:09:ef: de:88:71:96:b9:83:44:13:75:c0:43:42:68:e2:1e:7f:57:c2: a9:39:b9:fb:dd:1a:5a:d4:f0:e0:b5:a2:ff:4e:80:6b:39:04: 96:aa:54:59:89:72:d5:ea:f8:0d:0d:b0:a7:3f:f0:8e:38:cf: f1:14:67:23:39:50:c0:ac:18:0f:c8:8e:5c:d6:c2:df:b8:3e: 9b:81:f5:c8:ca:8a:96:bc:eb:6f:40:92:40:cb:f4:f7:2a:53: 91:5b:a3:58:62:fe:e9:1d:26:78:d1:8e:63:98:16:05:11:dc: 0f:70:6f:23:f3:d9:71:91:42:c0:4d:a9:99:fe:4b:06:34:a3: bc:4c:c2:4b:d8:21:6a:f8:3f:04:8e:4d:22:00:b4:ec:db:e5: 1c:71:38:e3:a1:e4:72:41:92:b0:de:ed:69:68:c4:4e:45:d1: e0:35:47:27:42:b1:6e:ec:d7:87:a4:41:a0:57:18:45:7e:c8: fe:d9:1b:8f:01:f9:10:18:19:a1:2d:08:73:99:3f:81:40:f7: 9e:15:02:30:14:fb:23:e4:c8:4e:a0:03:5a:71:f1:63:45:21: eb:2e:e1:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z3sLbx9+B/T9QWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk YjJmZTFiNjAtMjU1Mi00ODI1LThhZDMtOWEwZGJjYjQ2ZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbxZgeIH2iQOpazlryz6ErVVa2Wu1wYfcElD bViTuYEuM+1FJp9SSi6gZicymokayTB2kvqOnxu4jzVjGSp7jl8yCAOjY+oWG3Xw jEO5ajrT43gCntgyVg94hHS0LslT+vN9yfcw6hnIf1bM+muFp5+btb4365lFAI3q TxDlTjMQkk/z7+gSCgI6mA78un5ethb191RGpM4K2PEnc2lH2Af00icgBMTt6+gA YFT4+E1AubSmsiScnuOL/qHBxRHeJ9bA1qh7G358FH4mgJWNYbEGkx9/UkjHZyfW KRoWeuEQEVejJbdJc9iu6rRs7tzTvXdee2+LISYh1l1bn0LgPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeQZ1fiiLELYqibl98UxnfzswU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTIyYzZiZmEtYTk5OC0z MWNmLTgyYTUtZjMyYjY1MjUzMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfZwzOTdy1Gs9Bzxx8lY+UYk3UdNvRKGkSkLXBkVropyEAJ796IcZa5 g0QTdcBDQmjiHn9Xwqk5ufvdGlrU8OC1ov9OgGs5BJaqVFmJctXq+A0NsKc/8I44 z/EUZyM5UMCsGA/IjlzWwt+4PpuB9cjKipa8629AkkDL9PcqU5Fbo1hi/ukdJnjR jmOYFgUR3A9wbyPz2XGRQsBNqZn+SwY0o7xMwkvYIWr4PwSOTSIAtOzb5RxxOOOh 5HJBkrDe7WloxE5F0eA1RydCsW7s14ekQaBXGEV+yP7ZG48B+RAYGaEtCHOZP4FA 954VAjAU+yPkyE6gA1px8WNFIesu4c4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:27:16 2026 by rpki-client