$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d0d2355-bffc-37d9-bf87-3cfb6761d289.roa File: 2d0d2355-bffc-37d9-bf87-3cfb6761d289.roa (raw, json) Hash identifier: byFbzH7DlAuE3EwCipo2EQUl13WNKQbwGt22HAV42RA= Subject key identifier: 1C:68:6A:E9:B0:3E:F1:4C:47:FD:98:6E:CD:FE:B8:E9:18:AA:8B:94 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E11493428C21BB60C56740 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d0d2355-bffc-37d9-bf87-3cfb6761d289.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.27.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:14:93:42:8c:21:bb:60:c5:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5dda526a-dfef-4da7-b29b-92aa75590105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a3:f0:04:dc:d3:9d:0e:c7:67:fb:91:b1:76: b8:5f:95:65:b4:2c:11:c2:e1:22:e2:a6:ff:59:1e: 0c:33:cb:ae:39:b8:50:d7:48:7a:92:d8:d3:58:69: 00:17:44:5b:f4:0d:d9:64:ed:5a:f0:23:a6:7f:1c: fc:51:d9:cb:3f:0b:c2:e5:ba:ca:b2:3f:a4:88:27: 0d:21:78:93:d3:93:40:2e:a9:17:7a:db:a9:0e:4c: bb:ee:9f:3e:af:e5:52:45:53:f0:e9:a2:fe:e1:25: 67:90:0f:da:d5:8b:f4:05:ff:ef:2f:a3:3c:ad:d6: c5:1d:3d:c1:86:84:53:46:ff:57:69:95:e0:1b:39: ee:bb:b9:c0:f9:11:22:96:3d:d8:50:ef:1c:d4:01: 0a:ae:2e:c7:20:26:8a:4c:db:44:e7:e2:59:5c:a1: 23:4c:2b:61:13:89:8b:51:76:ed:22:1e:57:d2:45: 3e:d7:57:16:aa:9e:58:b6:7c:fc:9c:44:0f:49:62: 11:cc:cc:27:f6:c9:e4:9a:f1:bf:38:7d:a8:ad:22: e3:f4:80:ac:06:5a:7b:04:f6:e9:7e:bc:64:d9:9e: 97:b2:dd:2d:f4:a3:e5:9d:c4:e5:aa:d5:c9:8e:66: a2:bc:2b:82:11:55:e5:f7:97:d0:8c:e5:6c:92:7a: f0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:68:6A:E9:B0:3E:F1:4C:47:FD:98:6E:CD:FE:B8:E9:18:AA:8B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d0d2355-bffc-37d9-bf87-3cfb6761d289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:59:3d:f3:77:25:13:6d:d5:f5:01:3e:a1:99:d0:99:5b:c8: 34:56:a2:d3:d2:b8:ed:dc:b9:52:09:5a:56:ee:3d:31:58:aa: a3:11:85:4f:c1:49:a5:df:e0:ed:67:49:f9:5d:c3:6a:ac:5c: 80:f3:f4:b8:e4:84:5a:10:f8:8c:8a:85:bd:e4:a4:ed:19:c3: bf:f1:3f:93:8e:27:79:e1:80:68:b1:16:d5:ef:f6:85:e0:d5: 50:80:c2:96:cf:2c:25:8b:16:84:34:38:8e:f3:23:83:5d:5e: 40:f6:e6:d6:2d:18:6e:08:55:d5:39:83:8b:61:14:61:e2:a4: 28:09:9e:1a:a5:25:39:b2:56:c1:bf:06:bf:64:72:87:fb:43: b9:a9:ea:66:b4:0e:32:b4:f1:97:d3:2e:b9:bb:13:bc:7c:c2: 76:a9:df:28:ae:7a:02:7d:9d:b2:6a:fb:e6:74:4e:63:91:c6: 2c:e7:8f:3a:2e:b2:c3:07:1f:ea:0e:02:bd:0a:f5:06:d4:b0: 01:51:76:cd:bb:a5:cd:39:17:e1:43:c6:47:a4:1e:d5:72:d9: 46:90:9e:77:20:36:67:45:4b:de:b2:14:c2:d0:72:29:4a:d7: 5c:38:81:1b:cc:e9:a9:52:47:69:bf:d7:eb:f0:9a:20:c0:a4: dc:71:0c:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RSTQowhu2DFZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NWRkYTUyNmEtZGZlZi00ZGE3LWIyOWItOTJhYTc1NTkwMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KPwBNzTnQ7HZ/uRsXa4X5VltCwRwuEi4qb/ WR4MM8uuObhQ10h6ktjTWGkAF0Rb9A3ZZO1a8COmfxz8UdnLPwvC5brKsj+kiCcN IXiT05NALqkXetupDky77p8+r+VSRVPw6aL+4SVnkA/a1Yv0Bf/vL6M8rdbFHT3B hoRTRv9XaZXgGznuu7nA+REilj3YUO8c1AEKri7HICaKTNtE5+JZXKEjTCthE4mL UXbtIh5X0kU+11cWqp5Ytnz8nEQPSWIRzMwn9snkmvG/OH2orSLj9ICsBlp7BPbp frxk2Z6Xst0t9KPlncTlqtXJjmaivCuCEVXl95fQjOVsknrwHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxoaumwPvFMR/2Ybs3+uOkYqouUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmQwZDIzNTUtYmZmYy0z N2Q5LWJmODctM2NmYjY3NjFkMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9ZPfN3JRNt1fUBPqGZ0JlbyDRWotPSuO3cuVIJWlbuPTFYqqMRhU/B SaXf4O1nSfldw2qsXIDz9LjkhFoQ+IyKhb3kpO0Zw7/xP5OOJ3nhgGixFtXv9oXg 1VCAwpbPLCWLFoQ0OI7zI4NdXkD25tYtGG4IVdU5g4thFGHipCgJnhqlJTmyVsG/ Br9kcof7Q7mp6ma0DjK08ZfTLrm7E7x8wnap3yiuegJ9nbJq++Z0TmORxiznjzou ssMHH+oOAr0K9QbUsAFRds27pc05F+FDxkekHtVy2UaQnncgNmdFS96yFMLQcilK 11w4gRvM6alSR2m/1+vwmiDApNxxDNg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:21:22 2026 by rpki-client