$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/30eda228-7236-3666-806e-f710ee82789f.roa File: 30eda228-7236-3666-806e-f710ee82789f.roa (raw, json) Hash identifier: Hgrygo9uSNTETXUpl7/LYc/NR1hdGU116C6ki7gL7/k= Subject key identifier: 49:AA:40:27:D7:D1:A6:9E:DD:66:E2:50:9C:BB:79:91:49:E4:28:C0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E119D65C0F1E4BEFB1ADB0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/30eda228-7236-3666-806e-f710ee82789f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.29.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:19:d6:5c:0f:1e:4b:ef:b1:ad:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=09daee7a-34f6-40bd-9125-4785a0ccd2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:80:4d:63:81:46:d8:19:0a:62:0a:2b:1e:b4: 84:71:72:31:2e:44:c3:7d:ba:0b:6c:27:59:67:10: 72:4a:4e:67:88:6f:61:66:ba:86:79:a2:aa:65:98: 89:16:12:dc:37:c2:19:5d:0f:64:7e:bf:64:4b:3b: ce:de:b8:1e:3b:db:af:84:f7:1f:94:71:31:4c:bc: 9a:12:fb:2e:47:f3:4c:41:fc:be:ed:94:27:2f:bc: 5f:33:02:c7:6e:01:f0:b8:89:ab:89:df:bb:b5:34: 88:00:7b:40:b3:a0:04:b8:91:b6:a6:0a:99:21:88: d5:13:0a:99:f8:ab:ea:cc:1f:c1:d8:fd:e0:49:2b: 43:0a:1b:49:12:6d:01:35:f2:bc:a3:00:0c:a6:ee: 67:c7:df:3b:25:7d:22:ea:25:9c:99:f8:56:f5:03: 79:dd:e3:c4:f1:5f:1f:81:9b:59:31:ca:1e:ec:a8: 21:1d:dc:55:e5:53:af:51:62:8d:c7:9b:f8:8c:9d: 5c:0a:b2:a5:f4:cb:00:9d:8a:cd:ae:60:2e:dc:c7: ee:c2:d9:d4:eb:b9:bf:ad:98:9c:14:d4:0f:5e:cd: e4:50:ab:40:c4:11:1a:ed:5e:25:94:60:09:e8:5a: 88:70:b2:a9:aa:83:8b:13:56:78:84:27:61:23:4f: 00:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AA:40:27:D7:D1:A6:9E:DD:66:E2:50:9C:BB:79:91:49:E4:28:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/30eda228-7236-3666-806e-f710ee82789f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:8c:ec:d5:10:e2:ac:01:67:03:5f:6f:5c:f9:6a:fa:f6:fa: 0a:bc:fd:36:ca:75:dc:8a:47:f3:25:c8:6c:6f:87:88:8e:7c: 50:dc:25:07:0e:39:04:d5:34:fd:4a:3f:8f:5b:25:fd:5f:60: 2b:50:75:ba:8e:0b:e5:c9:0e:70:70:64:76:bb:83:82:ac:54: 28:a7:38:ad:9f:79:1f:ca:e8:10:dd:1f:68:34:8e:5d:b6:51: 4f:11:50:94:af:f9:35:fd:ad:b5:28:0a:8e:ca:b2:38:4f:62: b8:04:1e:72:8b:1e:04:b3:42:29:8a:ae:a6:07:84:b8:c5:90: cf:d3:6d:d4:7c:47:b8:47:ed:ab:f8:41:2e:0d:e6:ff:53:15: c1:4c:72:16:6b:7b:30:57:78:2e:96:d2:c3:da:ca:fa:44:e5: f8:98:de:11:22:18:f5:7e:37:c3:d8:ae:67:6a:df:5c:eb:22: eb:00:b9:d0:8a:2f:b4:a8:cc:98:3e:56:5d:cf:b6:2b:d8:4f: d9:16:6e:3d:85:9b:ba:db:e1:17:2c:8b:cd:f7:b4:4a:1b:0f: 56:bd:87:36:98:63:b7:d0:14:60:3c:34:32:27:2e:75:a2:9d: 4a:02:19:7f:1d:a4:38:fd:82:30:83:cd:08:f3:8a:38:8f:7d: 84:fb:99:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RnWXA8eS++xrbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDlkYWVlN2EtMzRmNi00MGJkLTkxMjUtNDc4NWEwY2NkMmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYBNY4FG2BkKYgorHrSEcXIxLkTDfboLbCdZ ZxBySk5niG9hZrqGeaKqZZiJFhLcN8IZXQ9kfr9kSzvO3rgeO9uvhPcflHExTLya EvsuR/NMQfy+7ZQnL7xfMwLHbgHwuImrid+7tTSIAHtAs6AEuJG2pgqZIYjVEwqZ +KvqzB/B2P3gSStDChtJEm0BNfK8owAMpu5nx987JX0i6iWcmfhW9QN53ePE8V8f gZtZMcoe7KghHdxV5VOvUWKNx5v4jJ1cCrKl9MsAnYrNrmAu3MfuwtnU67m/rZic FNQPXs3kUKtAxBEa7V4llGAJ6FqIcLKpqoOLE1Z4hCdhI08AtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmqQCfX0aae3WbiUJy7eZFJ5CjAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzBlZGEyMjgtNzIzNi0z NjY2LTgwNmUtZjcxMGVlODI3ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR2sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+M7NUQ4qwBZwNfb1z5avr2+gq8/TbKddyKR/MlyGxvh4iOfFDcJQcO OQTVNP1KP49bJf1fYCtQdbqOC+XJDnBwZHa7g4KsVCinOK2feR/K6BDdH2g0jl22 UU8RUJSv+TX9rbUoCo7KsjhPYrgEHnKLHgSzQimKrqYHhLjFkM/TbdR8R7hH7av4 QS4N5v9TFcFMchZrezBXeC6W0sPayvpE5fiY3hEiGPV+N8PYrmdq31zrIusAudCK L7SozJg+Vl3PtivYT9kWbj2Fm7rb4Rcsi833tEobD1a9hzaYY7fQFGA8NDInLnWi nUoCGX8dpDj9gjCDzQjzijiPfYT7me4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:08:08 2026 by rpki-client