$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27f4800a-abb8-3101-a8ab-4334bf97d119.roa File: 27f4800a-abb8-3101-a8ab-4334bf97d119.roa (raw, json) Hash identifier: XkXbdvPMxShLZQiT1jdKomtKgIOXBfX34CG87+wiWeM= Subject key identifier: 0A:80:EF:15:AC:9B:9B:D6:23:61:CD:D8:95:06:AE:05:98:61:7E:C6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AACE64194EEDB15D305010 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27f4800a-abb8-3101-a8ab-4334bf97d119.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.17.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:ce:64:19:4e:ed:b1:5d:30:50:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=f5abb373-5edf-4f0e-a359-8c38df8ebade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:49:24:00:9e:89:2d:37:20:d5:c9:8f:2e: e4:82:03:e7:4d:32:d4:06:8f:6e:3b:72:12:81:d4: 43:ec:b1:f0:14:9b:52:8c:6e:5b:52:77:67:80:c2: 2a:fe:5f:dd:9d:60:9c:9d:6b:04:3c:54:3f:91:31: c2:07:10:5c:46:33:b0:a9:17:97:3f:e0:52:a0:1c: 32:eb:b7:d3:74:40:85:b7:3d:d1:d4:73:d3:68:c3: 30:cd:b2:dc:77:f8:c4:f2:a4:77:10:6b:92:60:23: f6:39:63:15:61:f1:9e:f7:c5:12:86:c0:5c:5a:d0: bd:01:6d:1e:90:d4:b7:dc:66:35:65:05:c9:17:10: 83:32:6c:08:b5:60:21:c1:16:ac:83:94:b2:d6:b9: d6:f6:9e:b3:4e:19:12:3d:3b:77:f2:e1:1a:68:9b: b5:1e:ee:bf:39:92:7b:56:1a:47:d9:fb:1e:b7:ae: 43:ca:c4:8a:52:a0:e0:cc:de:26:f0:07:2f:a8:29: 8c:fa:98:0c:8a:3f:ac:ff:f8:4d:8c:d3:57:f8:f8: 9f:a3:d6:e5:d0:6a:36:90:27:21:c2:73:72:6b:6b: 20:ba:45:05:af:3f:99:a4:6b:7b:6e:0a:21:09:5e: 84:f8:dd:35:51:82:bb:67:98:36:3a:58:4d:4c:0f: f0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:80:EF:15:AC:9B:9B:D6:23:61:CD:D8:95:06:AE:05:98:61:7E:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27f4800a-abb8-3101-a8ab-4334bf97d119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:98:b0:ae:8d:39:cd:2b:55:53:c8:47:01:2c:63:86:10:84: bf:62:2b:a2:80:4b:f2:eb:b8:59:e8:16:f1:b1:b8:8d:3c:5c: 51:62:5e:1b:0b:f8:59:f8:b8:69:00:98:57:72:c8:17:bf:ba: ad:db:90:f2:f6:57:62:d9:b3:cd:78:7d:f3:b3:51:54:4f:f2: 2b:69:1e:8e:0e:18:de:d6:9d:db:a4:02:20:e4:24:a1:38:2f: 39:eb:58:ea:5f:9a:84:da:7e:f2:62:d5:e2:db:fb:b4:a1:e9: 3e:f8:5a:86:76:81:60:b2:2b:e2:f9:c0:3a:e0:9c:0c:de:c5: 00:ba:2f:7b:49:49:fd:4a:43:4d:50:71:e0:93:dd:55:05:f9: 16:66:cd:a6:9e:4f:e4:1a:2b:7e:22:f4:54:fc:d2:3c:4c:fb: 69:b9:49:86:91:00:7a:7e:0f:3f:1d:83:2a:83:9c:f9:90:86: 7a:a0:0f:28:c3:2a:cc:02:1f:dd:ab:1d:47:77:8c:2d:90:24: b4:e7:ac:48:99:97:07:c5:0b:8c:ae:52:20:ce:3a:03:59:b5: f0:84:9a:aa:31:b9:7f:19:19:ec:f7:6d:d3:1d:6a:d2:f2:e9: 05:25:ef:e3:f2:69:89:cc:26:1a:8e:34:0f:05:d4:1e:a3:3b: 49:f9:89:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqs5kGU7tsV0wUBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZjVhYmIzNzMtNWVkZi00ZjBlLWEzNTktOGMzOGRmOGViYWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5NJJACeiS03INXJjy7kggPnTTLUBo9uO3IS gdRD7LHwFJtSjG5bUndngMIq/l/dnWCcnWsEPFQ/kTHCBxBcRjOwqReXP+BSoBwy 67fTdECFtz3R1HPTaMMwzbLcd/jE8qR3EGuSYCP2OWMVYfGe98UShsBcWtC9AW0e kNS33GY1ZQXJFxCDMmwItWAhwRasg5Sy1rnW9p6zThkSPTt38uEaaJu1Hu6/OZJ7 VhpH2fset65DysSKUqDgzN4m8AcvqCmM+pgMij+s//hNjNNX+Pifo9bl0Go2kCch wnNya2sgukUFrz+ZpGt7bgohCV6E+N01UYK7Z5g2OlhNTA/wPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqA7xWsm5vWI2HN2JUGrgWYYX7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjdmNDgwMGEtYWJiOC0z MTAxLWE4YWItNDMzNGJmOTdkMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuYsK6NOc0rVVPIRwEsY4YQhL9iK6KAS/LruFnoFvGxuI08XFFiXhsL +Fn4uGkAmFdyyBe/uq3bkPL2V2LZs814ffOzUVRP8itpHo4OGN7WndukAiDkJKE4 LznrWOpfmoTafvJi1eLb+7Sh6T74WoZ2gWCyK+L5wDrgnAzexQC6L3tJSf1KQ01Q ceCT3VUF+RZmzaaeT+QaK34i9FT80jxM+2m5SYaRAHp+Dz8dgyqDnPmQhnqgDyjD KswCH92rHUd3jC2QJLTnrEiZlwfFC4yuUiDOOgNZtfCEmqoxuX8ZGez3bdMdatLy 6QUl7+PyaYnMJhqONA8F1B6jO0n5iWQ= -----END CERTIFICATE-----Generated at Thu Mar 26 09:04:05 2026 by rpki-client