$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/213537ac-2312-3e47-8fd5-9349e44762f2.roa File: 213537ac-2312-3e47-8fd5-9349e44762f2.roa (raw, json) Hash identifier: aXP+n1IF8EhYix++4DyAJ+AjWUkdkgTrrfKqdSOiz58= Subject key identifier: C0:8D:14:C0:FC:0D:03:BA:00:21:4C:48:91:31:86:F6:F9:B4:EF:81 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF70CE01DB28F0CAFCBA80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/213537ac-2312-3e47-8fd5-9349e44762f2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.29.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:70:ce:01:db:28:f0:ca:fc:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=20abdda6-8bf3-4f07-8fd7-8c025eac15d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4c:08:71:d0:fc:58:3e:bb:e8:0d:19:d9:10: aa:49:4a:6d:88:47:0e:d2:70:a2:f4:12:2c:25:e0: c1:a7:98:4e:ad:0b:91:a4:87:10:46:f3:01:dc:de: ea:6a:55:0b:e2:be:d5:49:4a:18:4a:57:bb:6d:3c: fa:9a:7b:b7:1f:6b:98:cf:3c:78:be:10:8c:ec:d2: 8d:71:81:77:10:84:03:7b:7d:06:62:2f:c3:b3:89: bb:2a:96:ed:6a:87:8d:15:0f:26:7a:e6:05:db:c4: fa:7d:58:a3:59:c0:17:d0:77:ba:57:35:25:f9:d2: 44:cb:26:f8:ff:1b:25:38:d5:a7:4b:86:e5:2d:21: 84:81:33:bf:8b:2d:64:4c:7d:a4:8d:20:c1:9b:cf: e7:c9:2b:7b:03:32:8e:28:f4:95:7f:74:79:fb:1f: 97:72:26:7c:cf:9d:5d:ed:fd:9c:a3:29:dc:c3:52: 58:03:f6:c4:24:10:aa:13:f4:db:77:61:fc:4a:22: 09:a3:cf:b6:1a:cd:ca:3a:99:30:ff:92:82:ef:5b: b0:59:ff:2b:3a:de:96:08:de:58:ba:ea:33:ec:a4: 35:da:93:9e:77:ff:c3:aa:be:ce:b6:d8:57:fe:79: 1b:53:eb:2d:34:b4:50:e6:a9:6a:72:b5:ca:21:3d: 49:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8D:14:C0:FC:0D:03:BA:00:21:4C:48:91:31:86:F6:F9:B4:EF:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/213537ac-2312-3e47-8fd5-9349e44762f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:5e:db:0c:b5:8f:73:08:e4:78:6b:b3:d1:de:ca:48:36:b7: 49:6a:97:73:04:a7:e4:6d:0c:d0:56:a6:63:ea:07:c0:98:0f: 7b:1f:06:73:f1:23:64:7f:ca:2b:31:34:61:05:0a:80:11:59: 96:b2:e7:3c:75:bb:18:8c:0b:79:28:65:26:77:7f:e3:08:f7: 94:91:40:14:46:09:e9:1c:e9:4f:4f:60:65:b3:aa:fe:8e:03: a8:e4:28:08:61:58:5b:74:d7:5c:47:92:70:26:ab:f1:61:df: 6a:bd:9d:c0:f3:a6:8a:00:b6:0a:ed:ca:df:f8:e2:86:b9:f6: 1d:59:a6:60:b8:64:a8:fe:a6:75:25:a6:39:ce:c3:58:e2:db: f6:cb:8c:ed:45:dc:42:9b:34:b1:09:0e:5e:7c:08:4b:de:66: a2:10:99:0f:8f:fc:5d:e0:63:d6:b3:21:14:ca:db:46:01:28: 97:8d:cb:79:ef:e6:95:a2:4f:d5:3b:f0:5c:96:61:73:38:41: 26:be:6a:c1:d3:4e:07:6f:13:d6:64:8e:19:e4:f0:7a:c0:0c: 81:7a:fb:57:bb:92:e3:5b:cf:d8:b7:af:50:54:70:f4:77:31: ee:c3:d5:c0:74:05:89:22:b6:4b:38:b5:9e:de:59:d3:13:20: 90:ae:06:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k33DOAdso8Mr8uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjBhYmRkYTYtOGJmMy00ZjA3LThmZDctOGMwMjVlYWMxNWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0wIcdD8WD676A0Z2RCqSUptiEcO0nCi9BIs JeDBp5hOrQuRpIcQRvMB3N7qalUL4r7VSUoYSle7bTz6mnu3H2uYzzx4vhCM7NKN cYF3EIQDe30GYi/Ds4m7KpbtaoeNFQ8meuYF28T6fVijWcAX0He6VzUl+dJEyyb4 /xslONWnS4blLSGEgTO/iy1kTH2kjSDBm8/nySt7AzKOKPSVf3R5+x+XciZ8z51d 7f2coyncw1JYA/bEJBCqE/Tbd2H8SiIJo8+2Gs3KOpkw/5KC71uwWf8rOt6WCN5Y uuoz7KQ12pOed//Dqr7OtthX/nkbU+stNLRQ5qlqcrXKIT1JGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCNFMD8DQO6ACFMSJExhvb5tO+BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjEzNTM3YWMtMjMxMi0z ZTQ3LThmZDUtOTM0OWU0NDc2MmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhe2wy1j3MI5Hhrs9Heykg2t0lql3MEp+RtDNBWpmPqB8CYD3sfBnPx I2R/yisxNGEFCoARWZay5zx1uxiMC3koZSZ3f+MI95SRQBRGCekc6U9PYGWzqv6O A6jkKAhhWFt011xHknAmq/Fh32q9ncDzpooAtgrtyt/44oa59h1ZpmC4ZKj+pnUl pjnOw1ji2/bLjO1F3EKbNLEJDl58CEveZqIQmQ+P/F3gY9azIRTK20YBKJeNy3nv 5pWiT9U78FyWYXM4QSa+asHTTgdvE9Zkjhnk8HrADIF6+1e7kuNbz9i3r1BUcPR3 Me7D1cB0BYkitks4tZ7eWdMTIJCuBl4= -----END CERTIFICATE-----Generated at Thu Mar 26 13:42:55 2026 by rpki-client