$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa File: 2d526aab-3817-3369-8704-f5e3258bccd6.roa (raw, json) Hash identifier: 2Q21VEis/3SXp9tS4P1qLDbWo0NZJVuXgyhqKSLTEqM= Subject key identifier: B0:09:DE:BC:EC:69:4A:9C:8B:D5:43:81:D6:83:2B:54:BE:EB:43:C0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AA154B107D9944955B3E40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.28.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:15:4b:10:7d:99:44:95:5b:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=3c821e45-9579-47ca-a9b4-d1b8021f45cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5e:89:43:3c:4b:65:1c:fa:e8:ee:91:5f:e5: 77:f4:f4:35:85:7d:b4:aa:9c:cf:fc:3d:f5:78:5c: fa:b1:29:68:b3:a0:3f:bf:d9:d0:dc:87:9f:f9:21: 19:3d:ab:30:10:19:dd:75:44:df:61:74:53:49:28: b2:18:93:da:51:62:a0:83:66:d3:e9:df:1e:37:27: 61:53:30:d0:a7:bb:fe:f8:f4:55:42:3b:45:17:30: b7:bb:e0:14:67:78:f7:d5:9c:15:6e:99:c8:4a:20: 9a:bb:1d:74:73:ed:79:3c:f5:da:a5:d8:9a:28:e2: 8d:e3:0d:73:c4:7f:41:dd:7a:62:a9:51:21:65:a9: 7c:cf:16:61:8c:32:7f:18:84:94:32:18:b4:24:00: eb:30:31:41:34:fa:1b:82:a8:14:dc:f2:23:03:7f: 36:20:06:ec:5e:77:41:95:71:cf:c3:a0:f8:32:22: b3:ee:34:f4:95:d1:a9:81:43:dc:0b:d5:4b:bc:4b: 07:75:49:9d:76:14:74:3f:a6:df:ee:d9:20:8f:6b: d8:82:94:e5:8a:37:13:8b:28:60:9d:a3:d6:91:f8: b5:d0:44:bb:82:96:bb:59:65:00:19:87:92:c0:02: f2:0a:92:c5:27:11:47:82:68:9a:64:db:f6:2f:08: 7b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:09:DE:BC:EC:69:4A:9C:8B:D5:43:81:D6:83:2B:54:BE:EB:43:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7c:e0:a3:d5:f3:92:87:d8:f0:52:ac:ee:32:db:db:6a:fc: 75:25:49:3d:79:7c:fa:b6:89:11:45:56:11:b5:bc:ef:80:90: 6d:ff:05:15:34:d8:15:34:36:44:cd:5e:44:e4:1c:85:ba:38: c5:84:e0:b8:59:22:9a:cb:87:a9:15:3d:37:0c:7d:a4:83:28: cc:6c:3d:c9:57:31:43:9c:c5:24:b3:59:59:3b:33:b8:ba:ce: be:d4:9d:bc:10:55:91:60:84:2f:65:e8:92:88:d5:46:60:f1: ce:70:fe:70:a5:71:66:40:f5:33:2c:bb:7d:f9:17:59:41:df: cc:d7:71:2b:76:32:fc:9f:fd:92:e5:73:c3:f4:18:38:0b:8c: 50:e5:3c:f3:e3:35:c4:ba:e9:6e:d3:95:23:1c:61:70:43:b0: 20:40:54:9d:2b:93:87:7d:3e:1f:73:63:3e:b7:7a:e3:85:5e: c8:e6:08:70:e6:0e:7d:17:85:de:e7:4d:9f:9b:93:c3:bc:c6: 86:89:4a:da:f5:06:0e:20:bf:7c:7f:49:01:4f:53:ff:13:3e: 25:8a:b7:83:b8:8f:00:80:cd:19:f6:dc:6f:8c:8a:11:f0:ef: d4:7c:f9:a7:dc:52:d7:3d:40:3b:96:5e:5f:58:b3:eb:b1:b6: d3:a2:6b:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqhVLEH2ZRJVbPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk M2M4MjFlNDUtOTU3OS00N2NhLWE5YjQtZDFiODAyMWY0NWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll6JQzxLZRz66O6RX+V39PQ1hX20qpzP/D31 eFz6sSlos6A/v9nQ3Ief+SEZPaswEBnddUTfYXRTSSiyGJPaUWKgg2bT6d8eNydh UzDQp7v++PRVQjtFFzC3u+AUZ3j31ZwVbpnISiCaux10c+15PPXapdiaKOKN4w1z xH9B3XpiqVEhZal8zxZhjDJ/GISUMhi0JADrMDFBNPobgqgU3PIjA382IAbsXndB lXHPw6D4MiKz7jT0ldGpgUPcC9VLvEsHdUmddhR0P6bf7tkgj2vYgpTlijcTiyhg naPWkfi10ES7gpa7WWUAGYeSwALyCpLFJxFHgmiaZNv2Lwh7PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAJ3rzsaUqci9VDgdaDK1S+60PAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmQ1MjZhYWItMzgxNy0z MzY5LTg3MDQtZjVlMzI1OGJjY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB584KPV85KH2PBSrO4y29tq/HUlST15fPq2iRFFVhG1vO+AkG3/BRU0 2BU0NkTNXkTkHIW6OMWE4LhZIprLh6kVPTcMfaSDKMxsPclXMUOcxSSzWVk7M7i6 zr7UnbwQVZFghC9l6JKI1UZg8c5w/nClcWZA9TMsu335F1lB38zXcSt2Mvyf/ZLl c8P0GDgLjFDlPPPjNcS66W7TlSMcYXBDsCBAVJ0rk4d9Ph9zYz63euOFXsjmCHDm Dn0Xhd7nTZ+bk8O8xoaJStr1Bg4gv3x/SQFPU/8TPiWKt4O4jwCAzRn23G+MihHw 79R8+afcUtc9QDuWXl9Ys+uxttOia/c= -----END CERTIFICATE-----Generated at Thu Mar 26 17:36:33 2026 by rpki-client