$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c5f3c7e-2120-3115-ab26-93d47582e7dc.roa File: 1c5f3c7e-2120-3115-ab26-93d47582e7dc.roa (raw, json) Hash identifier: AZc0tv1nNvE4BxM1wdSeJ3UEfSyDHgEAByWMDZU3joM= Subject key identifier: F9:01:84:E4:B8:A4:5D:45:30:49:1B:DC:D2:7C:7D:D8:50:D1:2A:85 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF91A45B40FB801D0B5E70 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c5f3c7e-2120-3115-ab26-93d47582e7dc.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.28.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:91:a4:5b:40:fb:80:1d:0b:5e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a1f966ec-c8b9-41b7-8337-1d3fcfd47707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:85:29:07:24:02:d6:fc:59:96:64:71:6b:21: 98:19:60:bb:a1:3c:59:e6:91:27:51:b7:91:9d:9d: 67:11:2b:ed:dc:21:81:e4:21:a8:35:56:f8:74:93: d8:85:ec:9f:73:1c:be:9d:a7:02:11:5d:d0:73:3d: 9c:74:e4:de:eb:46:80:36:7a:4c:6d:d4:ed:72:d1: 31:9e:1e:c7:9d:c3:4f:d4:ca:56:e6:49:d1:d0:5d: 39:59:2a:30:0e:e2:d2:70:38:25:83:25:33:37:ba: eb:9b:62:53:04:32:36:1b:b5:c7:89:57:ae:e0:65: 98:fa:5e:54:e0:89:20:ad:88:a8:c7:59:82:78:c1: 81:42:2c:34:18:f5:87:8d:37:70:d3:57:e0:ba:57: 33:8b:17:ec:50:c6:ba:cf:79:2d:d1:32:20:88:6d: b5:0e:f1:c8:b1:64:6f:8e:ef:8b:3a:02:56:8d:1e: 0f:51:b1:a5:e6:7d:d9:94:fe:6c:8e:63:de:bf:99: 10:cd:73:a1:a2:69:fb:f0:08:b0:b4:09:b3:12:95: b7:90:f5:b3:ee:3c:3c:83:b5:3f:e9:db:9f:33:b8: 5e:47:91:80:40:22:c1:e0:80:fe:f2:6e:60:77:54: 51:7b:99:a2:9d:42:5c:85:ae:8e:2b:6d:6f:6b:3d: 74:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:01:84:E4:B8:A4:5D:45:30:49:1B:DC:D2:7C:7D:D8:50:D1:2A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1c5f3c7e-2120-3115-ab26-93d47582e7dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e6:27:3c:f2:80:26:06:11:e6:d4:43:54:0e:0a:96:0c:5d: 1e:81:e1:25:0a:11:f8:3e:84:2e:c7:bd:22:6c:f1:ae:22:85: ee:55:5d:a0:1b:97:dc:f1:46:19:77:56:ce:e8:eb:8f:3a:fc: 65:0a:fa:88:00:c9:5e:43:83:ea:a6:e6:18:46:03:c2:55:c4: cd:21:14:d9:54:7a:44:e7:6f:17:76:d8:cd:96:44:33:f8:a3: 02:b1:33:57:a6:0c:d0:b9:fb:95:48:12:f5:47:56:d5:23:b1: 7d:78:84:db:f3:9c:c3:58:eb:47:ac:8a:09:6f:fe:73:ef:50: 56:b3:2b:f1:69:89:a2:6d:a0:80:fd:0e:57:ee:67:9f:50:60: 69:92:b2:6f:8e:7c:d4:8f:91:bc:35:68:62:c5:28:cf:ba:ec: 5e:d4:d0:5f:26:83:8f:41:d2:5c:0b:b1:d9:b9:90:15:7c:c9: 0f:c4:12:a8:08:18:3c:18:99:77:8e:53:a6:6a:d5:a0:53:74: af:f1:7f:01:54:dc:94:de:b0:4c:d1:2f:51:3e:32:0a:b3:0c: 01:3f:8a:a6:22:c1:e5:9b:4f:f5:f9:6c:ea:3e:3a:92:e4:57: 05:6f:61:fd:79:38:bb:c4:75:46:f2:70:ca:02:cf:8e:1b:af: 90:cb:58:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35GkW0D7gB0LXnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTFmOTY2ZWMtYzhiOS00MWI3LTgzMzctMWQzZmNmZDQ3NzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYUpByQC1vxZlmRxayGYGWC7oTxZ5pEnUbeR nZ1nESvt3CGB5CGoNVb4dJPYheyfcxy+nacCEV3Qcz2cdOTe60aANnpMbdTtctEx nh7HncNP1MpW5knR0F05WSowDuLScDglgyUzN7rrm2JTBDI2G7XHiVeu4GWY+l5U 4IkgrYiox1mCeMGBQiw0GPWHjTdw01fgulczixfsUMa6z3kt0TIgiG21DvHIsWRv ju+LOgJWjR4PUbGl5n3ZlP5sjmPev5kQzXOhomn78AiwtAmzEpW3kPWz7jw8g7U/ 6dufM7heR5GAQCLB4ID+8m5gd1RRe5minUJcha6OK21vaz104wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkBhOS4pF1FMEkb3NJ8fdhQ0SqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWM1ZjNjN2UtMjEyMC0z MTE1LWFiMjYtOTNkNDc1ODJlN2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRw1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErmJzzygCYGEebUQ1QOCpYMXR6B4SUKEfg+hC7HvSJs8a4ihe5VXaAb l9zxRhl3Vs7o6486/GUK+ogAyV5Dg+qm5hhGA8JVxM0hFNlUekTnbxd22M2WRDP4 owKxM1emDNC5+5VIEvVHVtUjsX14hNvznMNY60esiglv/nPvUFazK/FpiaJtoID9 DlfuZ59QYGmSsm+OfNSPkbw1aGLFKM+67F7U0F8mg49B0lwLsdm5kBV8yQ/EEqgI GDwYmXeOU6Zq1aBTdK/xfwFU3JTesEzRL1E+MgqzDAE/iqYiweWbT/X5bOo+OpLk VwVvYf15OLvEdUbycMoCz44br5DLWLo= -----END CERTIFICATE-----Generated at Thu Mar 26 08:04:02 2026 by rpki-client