$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2397791e-acab-301c-9289-ae5d17c50dc2.roa File: 2397791e-acab-301c-9289-ae5d17c50dc2.roa (raw, json) Hash identifier: 3sqce/YPqcYfB5oTi4fTJbLRgBR3TZSzsRiWl3sUVco= Subject key identifier: 9F:5A:68:F4:01:3B:2B:EA:DE:78:76:80:A3:60:CF:12:A2:44:40:84 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF93F1A8E99B71DFD35000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2397791e-acab-301c-9289-ae5d17c50dc2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 150.195.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:93:f1:a8:e9:9b:71:df:d3:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=cbf70b90-de0c-4239-b70d-a56cc75c9652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0d:5f:20:84:8d:5f:f0:34:d4:dd:cf:9b:c7: 24:e8:9e:ef:e5:b9:d1:4a:03:58:2b:57:50:e1:d2: 91:2f:2f:87:e0:b7:43:c4:24:e7:85:76:d5:43:94: b8:38:f4:69:3a:5f:26:1e:e0:7a:bd:8d:c4:28:ee: 44:f3:cf:9b:82:7f:48:54:bd:81:e2:dd:3c:05:10: e7:28:2c:a6:f2:8b:50:b5:d3:2a:bc:51:64:2c:fd: 42:58:b8:c8:47:6b:e4:70:85:30:44:82:e7:e9:24: b2:a8:ac:76:dd:00:27:79:08:c0:58:c4:d9:42:67: f0:fb:6f:2d:68:6c:d2:0b:5c:a4:d8:b3:9f:49:14: 0a:eb:bf:d3:51:76:a3:5c:fd:6f:5f:00:7f:8a:30: 59:ab:59:04:45:b4:b4:e0:92:e1:ad:bd:2e:27:ba: 99:0b:46:87:54:df:72:ff:eb:3d:0a:17:a2:a8:d2: d3:d3:89:b4:ee:e5:b5:87:42:a5:4f:44:db:45:31: 99:73:73:6d:e4:21:0f:37:2a:ee:6b:4b:4b:cf:82: 9c:ca:6f:a6:99:5f:ef:dd:c3:ca:c7:f0:bc:52:9d: ce:3a:04:9a:d7:45:87:02:9b:8a:de:b6:f1:6e:ce: 62:95:60:b1:62:fc:9b:33:35:33:59:cd:7d:db:04: bd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5A:68:F4:01:3B:2B:EA:DE:78:76:80:A3:60:CF:12:A2:44:40:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2397791e-acab-301c-9289-ae5d17c50dc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fa:eb:d7:ac:f3:80:ce:cd:f9:45:37:4b:1e:81:54:7a:ee: 1a:39:ab:32:b5:f6:ee:1a:7f:19:c5:9e:4f:0f:df:a4:dc:4e: 0b:79:f0:1b:60:ef:cd:3d:04:91:92:32:ae:89:6c:9d:a7:c0: 5c:06:93:a4:0f:73:06:ca:43:ee:92:0f:f3:a3:83:f6:8a:e1: d7:9e:66:70:70:4b:86:6e:01:92:a5:c5:93:d2:a1:62:82:91: 03:45:37:e7:a9:60:05:04:d5:cd:d3:68:83:36:b4:8d:90:98: 64:cf:74:be:cf:32:02:8a:c3:3b:d6:1b:5d:93:30:31:4d:62: ef:19:8c:b5:79:ce:65:b3:ee:6f:9a:e3:b1:f2:78:80:cd:cb: 6d:1a:79:0e:ee:f1:dc:83:10:7f:16:7b:ef:36:8b:e7:cb:69: 46:9e:e0:a7:f8:8d:d2:28:50:fa:9b:78:72:2f:5b:e1:45:bd: fa:a3:ec:1d:85:13:58:95:9e:a2:3f:1a:eb:79:2a:43:2b:3b: 58:c3:03:25:ad:f8:05:b9:ec:7e:2c:a9:5b:d6:20:a0:a3:f5: f6:40:cb:b9:62:d5:33:b5:27:6d:4a:43:9e:7a:6f:99:72:02: 17:88:ad:71:fe:7c:39:61:ce:ef:f2:de:fd:4f:0a:33:10:32: b3:8c:81:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35PxqOmbcd/TUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2JmNzBiOTAtZGUwYy00MjM5LWI3MGQtYTU2Y2M3NWM5NjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA1fIISNX/A01N3Pm8ck6J7v5bnRSgNYK1dQ 4dKRLy+H4LdDxCTnhXbVQ5S4OPRpOl8mHuB6vY3EKO5E88+bgn9IVL2B4t08BRDn KCym8otQtdMqvFFkLP1CWLjIR2vkcIUwRILn6SSyqKx23QAneQjAWMTZQmfw+28t aGzSC1yk2LOfSRQK67/TUXajXP1vXwB/ijBZq1kERbS04JLhrb0uJ7qZC0aHVN9y /+s9CheiqNLT04m07uW1h0KlT0TbRTGZc3Nt5CEPNyrua0tLz4Kcym+mmV/v3cPK x/C8Up3OOgSa10WHApuK3rbxbs5ilWCxYvybMzUzWc192wS95QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9aaPQBOyvq3nh2gKNgzxKiRECEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjM5Nzc5MWUtYWNhYi0z MDFjLTkyODktYWU1ZDE3YzUwZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClsMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH669es84DOzflFN0segVR67ho5qzK19u4afxnFnk8P36TcTgt58Btg 7809BJGSMq6JbJ2nwFwGk6QPcwbKQ+6SD/Ojg/aK4deeZnBwS4ZuAZKlxZPSoWKC kQNFN+epYAUE1c3TaIM2tI2QmGTPdL7PMgKKwzvWG12TMDFNYu8ZjLV5zmWz7m+a 47HyeIDNy20aeQ7u8dyDEH8We+82i+fLaUae4Kf4jdIoUPqbeHIvW+FFvfqj7B2F E1iVnqI/Gut5KkMrO1jDAyWt+AW57H4sqVvWIKCj9fZAy7li1TO1J21KQ556b5ly AheIrXH+fDlhzu/y3v1PCjMQMrOMgS4= -----END CERTIFICATE-----Generated at Thu Mar 26 08:02:45 2026 by rpki-client