$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/146c450d-5661-3ac3-b61e-59ddd5a6500e.roa File: 146c450d-5661-3ac3-b61e-59ddd5a6500e.roa (raw, json) Hash identifier: EQXMTvBzpGb7iOXHJq/cvexR+ZY0g4Vw66ANPTJzo8k= Subject key identifier: 13:5A:F6:60:8D:2E:CD:A2:7E:3C:B7:7A:18:45:AA:42:7E:C7:04:5A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF9AE3B6226F952A5C2488 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/146c450d-5661-3ac3-b61e-59ddd5a6500e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.21.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:9a:e3:b6:22:6f:95:2a:5c:24:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4bd3d65f-b0aa-4323-8cde-b3d1268b3a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:a7:df:b7:cd:15:95:50:a0:c3:6b:75:ae: 5c:d5:c5:6e:73:9a:90:00:50:e1:8f:bd:ad:82:55: e4:b6:a2:22:99:de:73:b9:3f:51:75:b0:75:c8:46: bf:6a:d9:80:c8:b4:e5:c9:9b:34:a3:04:4f:96:dd: 7f:a9:c3:72:67:79:74:5a:f2:a7:39:51:0b:09:fb: 9f:c8:93:6f:dc:e1:d2:72:dc:08:77:d7:56:3f:55: 88:2b:6b:05:b0:e3:d1:e9:9a:c7:a1:c3:2e:a1:5a: 87:06:85:8b:1a:d9:57:4c:6f:14:5e:63:9a:d9:37: fc:cf:a0:07:31:e5:8d:9f:60:e2:f1:be:6d:37:a2: cc:12:ac:fd:06:63:5b:09:a3:1e:54:a2:b6:2c:11: 0a:0b:fc:02:ae:53:67:af:39:67:cd:69:f9:b5:f1: 83:07:de:bb:dd:1b:10:c6:7b:cf:98:29:b1:a1:07: 69:a2:8b:33:59:df:70:a2:8c:b5:f9:c8:22:7f:20: 82:85:92:5b:4e:0b:14:fa:45:f9:40:1b:25:43:dd: 62:19:15:52:ca:31:0f:6e:bf:79:cb:54:24:2b:5e: 70:a4:74:7d:f5:e1:d1:ef:8e:78:ec:09:9f:dd:a0: 70:64:ec:60:ce:5b:b0:d3:c6:ac:12:2a:4c:c7:16: 69:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5A:F6:60:8D:2E:CD:A2:7E:3C:B7:7A:18:45:AA:42:7E:C7:04:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/146c450d-5661-3ac3-b61e-59ddd5a6500e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:61:ed:fb:c2:24:57:6f:2f:68:4f:7e:9a:07:a6:02:e5:58: 64:5b:a3:b8:d8:c5:6c:1a:87:22:df:4b:66:90:b0:37:6e:2a: 1b:1b:24:45:37:3a:32:3c:66:bb:38:df:1b:0f:dc:70:8c:14: 06:21:06:40:73:f2:02:56:69:f8:08:4e:d5:30:3c:d8:8f:ae: 38:c5:d6:4c:83:a1:83:13:52:8a:7e:db:e0:71:93:00:2b:01: 93:78:b3:17:93:c0:2a:be:52:d2:a7:03:07:31:0e:4c:61:1e: 0f:32:21:13:36:c1:cb:71:f1:e7:08:61:1b:31:05:a5:91:87: da:7b:f6:c8:bd:42:09:a2:44:d5:1c:87:ee:89:84:b6:7c:36: 5a:82:37:3d:9c:cf:ba:7f:4c:8c:39:43:6c:92:ce:fa:d9:eb: 7d:f9:fa:e0:1f:69:97:59:53:70:11:32:a0:e0:06:36:38:cb: bb:e0:5b:2d:a3:b3:c1:ef:b2:e3:25:55:c7:db:7d:23:e5:39: f0:aa:a4:79:a4:d3:57:66:10:17:97:55:84:12:ef:bf:1a:f1: 52:21:5e:d0:6e:44:b7:43:d5:db:59:91:71:3f:54:d3:9f:25: ae:76:70:45:f1:1d:1e:fd:80:86:04:db:60:78:09:86:da:f2: 93:4a:a3:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35rjtiJvlSpcJIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGJkM2Q2NWYtYjBhYS00MzIzLThjZGUtYjNkMTI2OGIzYTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnain37fNFZVQoMNrda5c1cVuc5qQAFDhj72t glXktqIimd5zuT9RdbB1yEa/atmAyLTlyZs0owRPlt1/qcNyZ3l0WvKnOVELCfuf yJNv3OHSctwId9dWP1WIK2sFsOPR6ZrHocMuoVqHBoWLGtlXTG8UXmOa2Tf8z6AH MeWNn2Di8b5tN6LMEqz9BmNbCaMeVKK2LBEKC/wCrlNnrzlnzWn5tfGDB9673RsQ xnvPmCmxoQdpooszWd9wooy1+cgifyCChZJbTgsU+kX5QBslQ91iGRVSyjEPbr95 y1QkK15wpHR99eHR74547Amf3aBwZOxgzluw08asEipMxxZpYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNa9mCNLs2ifjy3ehhFqkJ+xwRaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTQ2YzQ1MGQtNTY2MS0z YWMzLWI2MWUtNTlkZGQ1YTY1MDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRh7fvCJFdvL2hPfpoHpgLlWGRbo7jYxWwahyLfS2aQsDduKhsbJEU3 OjI8Zrs43xsP3HCMFAYhBkBz8gJWafgITtUwPNiPrjjF1kyDoYMTUop+2+BxkwAr AZN4sxeTwCq+UtKnAwcxDkxhHg8yIRM2wctx8ecIYRsxBaWRh9p79si9QgmiRNUc h+6JhLZ8NlqCNz2cz7p/TIw5Q2ySzvrZ6335+uAfaZdZU3ARMqDgBjY4y7vgWy2j s8HvsuMlVcfbfSPlOfCqpHmk01dmEBeXVYQS778a8VIhXtBuRLdD1dtZkXE/VNOf Ja52cEXxHR79gIYE22B4CYba8pNKoxc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:57:51 2026 by rpki-client