$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fb98ccb-7a4b-381b-bc22-a8a97d4eeb03.roa File: 2fb98ccb-7a4b-381b-bc22-a8a97d4eeb03.roa (raw, json) Hash identifier: zS3dUAk5M0bVxW4e4o4/QzpLdofYZgl+oFg0mV+XoxY= Subject key identifier: 01:AB:E8:30:B1:23:F6:47:FA:45:8E:B1:F0:EC:F5:8C:9B:C5:95:05 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DCDC5CBD4DC025E1CFD054DC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fb98ccb-7a4b-381b-bc22-a8a97d4eeb03.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 19905 IP address blocks: 173.28.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:cb:d4:dc:02:5e:1c:fd:05:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=5f724a50-4b8a-40ad-b51f-ac7f685aa8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:fc:10:7d:aa:99:73:69:15:e8:77:22:a2:5b: ba:02:e2:04:98:51:44:1c:93:13:b7:b5:2d:a1:76: 59:c1:a5:71:63:19:1e:c3:3d:8d:e6:9e:78:54:fc: 06:ca:b9:06:00:ac:19:92:e8:3c:70:aa:37:31:5d: 9f:08:ac:e8:15:e6:43:34:5b:e1:22:62:3a:1e:40: d5:c1:4c:f2:9f:3f:15:a8:72:62:07:06:1c:70:82: ff:59:4b:9d:79:7e:ed:88:4b:06:a1:11:20:ce:11: 78:b6:6a:4f:08:4c:b2:0d:db:2d:68:44:52:55:0e: ed:9e:e6:d6:3f:06:d5:32:4f:61:fb:23:7f:46:de: d1:7c:b1:02:87:81:88:6a:e2:75:9b:2f:91:db:68: a0:0e:ab:48:3d:f7:f1:7b:37:1c:1a:9a:83:f7:96: 61:51:51:07:1e:79:51:be:c9:1b:57:a8:ac:ec:e1: 95:4a:2b:1a:28:8a:8f:56:22:be:ea:0e:21:f5:86: c8:27:46:bc:38:a0:70:60:fb:6e:26:34:0a:1c:4e: 80:f6:ea:f2:4f:0f:fa:fc:e0:4c:29:4e:31:a1:49: 99:77:a2:e8:f9:47:b4:40:88:45:f2:7c:2a:40:0d: 54:bb:0b:f7:b8:fc:b1:1c:3a:3d:59:b6:73:42:71: bf:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AB:E8:30:B1:23:F6:47:FA:45:8E:B1:F0:EC:F5:8C:9B:C5:95:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fb98ccb-7a4b-381b-bc22-a8a97d4eeb03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ef:af:e9:f3:55:31:e2:d8:57:6d:95:8b:a3:ab:ca:0b:87: da:d1:c9:a9:10:87:56:a4:c0:9a:77:04:3e:08:b7:d5:28:24: 76:77:4f:0d:c1:61:5a:35:6d:1e:8f:c2:f9:3c:dc:ed:96:fa: 2e:49:a5:00:25:05:35:6c:74:d3:8a:a1:62:80:c1:d9:aa:9f: 08:fd:ce:fe:6f:e4:2e:30:40:42:66:d8:4e:32:d5:76:26:91: ad:bd:97:0b:23:32:e1:a4:71:46:14:07:09:f5:c1:b8:b2:d9: 28:7a:38:96:68:c8:3f:f9:8e:ef:31:98:19:b1:b0:e0:92:54: 2c:0e:c0:1e:dc:10:46:40:ef:6b:ac:a5:46:8d:6e:84:50:ac: 90:0a:1c:6f:1a:d0:e5:38:f8:7b:92:cd:30:47:9c:8a:75:33: 80:5c:f0:7a:d7:c0:ab:b5:3a:1a:ff:e0:3d:6c:e7:e5:c0:d1: 28:8f:11:f8:26:b2:1f:0c:4f:7f:22:33:bf:61:de:22:bb:89: 7a:e2:4b:f7:bf:61:9d:2d:cc:db:31:65:2b:07:d9:6a:e0:7e: 89:cd:48:21:85:cf:79:44:3d:16:f1:d5:20:a4:17:c1:54:7f: 0c:e9:77:ce:28:29:cd:5b:45:20:4b:71:cd:ec:56:b0:99:96: 28:f2:62:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxcvU3AJeHP0FTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk NWY3MjRhNTAtNGI4YS00MGFkLWI1MWYtYWM3ZjY4NWFhOGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvwQfaqZc2kV6Hciolu6AuIEmFFEHJMTt7Ut oXZZwaVxYxkewz2N5p54VPwGyrkGAKwZkug8cKo3MV2fCKzoFeZDNFvhImI6HkDV wUzynz8VqHJiBwYccIL/WUudeX7tiEsGoREgzhF4tmpPCEyyDdstaERSVQ7tnubW PwbVMk9h+yN/Rt7RfLECh4GIauJ1my+R22igDqtIPffxezccGpqD95ZhUVEHHnlR vskbV6is7OGVSisaKIqPViK+6g4h9YbIJ0a8OKBwYPtuJjQKHE6A9uryTw/6/OBM KU4xoUmZd6Lo+Ue0QIhF8nwqQA1Uuwv3uPyxHDo9WbZzQnG/yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGr6DCxI/ZH+kWOsfDs9YybxZUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmZiOThjY2ItN2E0Yi0z ODFiLWJjMjItYThhOTdkNGVlYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHvr+nzVTHi2FdtlYujq8oLh9rRyakQh1akwJp3BD4It9UoJHZ3Tw3B YVo1bR6Pwvk83O2W+i5JpQAlBTVsdNOKoWKAwdmqnwj9zv5v5C4wQEJm2E4y1XYm ka29lwsjMuGkcUYUBwn1wbiy2Sh6OJZoyD/5ju8xmBmxsOCSVCwOwB7cEEZA72us pUaNboRQrJAKHG8a0OU4+HuSzTBHnIp1M4Bc8HrXwKu1Ohr/4D1s5+XA0SiPEfgm sh8MT38iM79h3iK7iXriS/e/YZ0tzNsxZSsH2WrgfonNSCGFz3lEPRbx1SCkF8FU fwzpd84oKc1bRSBLcc3sVrCZlijyYgc= -----END CERTIFICATE-----Generated at Wed May 13 03:37:45 2026 by rpki-client