$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35557100-ce0f-3351-a353-c96557e04c2c.roa File: 35557100-ce0f-3351-a353-c96557e04c2c.roa (raw, json) Hash identifier: blv4nG8bovhBHaJ8gIaOD0jBjQg6/K5Y83nt9z181FE= Subject key identifier: 9A:2F:ED:94:50:13:5C:A7:67:3E:98:2E:BB:34:15:BB:76:5F:7F:F8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF9BC9996357D2F07ADC00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35557100-ce0f-3351-a353-c96557e04c2c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.16.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:9b:c9:99:63:57:d2:f0:7a:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1fe755ab-c9a8-4309-a035-a9d5206ce0e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e9:7f:7b:45:3f:05:f2:da:16:46:e7:bf:06: e7:a9:dc:43:6c:f3:bf:9f:fe:00:de:ce:c5:15:98: bd:17:2a:b5:53:ed:e4:b9:62:9d:cb:4b:2f:df:b9: 2f:36:2b:ec:da:b9:6f:a5:59:d7:fd:c6:0a:bf:d4: 04:1b:f7:cb:24:b3:07:ad:e8:65:29:90:00:4b:a8: cd:e0:e7:c3:a1:31:70:45:de:e0:0c:77:39:e2:b2: ac:3e:54:83:01:f3:7a:58:a5:93:9e:b2:ab:a3:ef: ac:85:84:84:17:b7:70:37:3a:e1:e4:8f:74:86:d9: 8a:15:47:9f:6b:7c:e5:b8:30:df:0b:2f:ac:07:47: fc:cb:45:fd:8c:e3:37:52:f4:93:01:a3:2e:16:3f: 62:d2:f5:47:1e:d5:6e:a9:32:34:f1:13:13:8f:62: 5a:ce:b0:a3:f1:71:fc:df:2f:df:3a:3d:d3:d7:d3: a9:13:86:94:c3:55:e4:dd:89:26:1b:08:63:21:96: 1b:98:cd:80:f5:b4:1c:35:ec:78:69:c2:57:56:a1: 17:9d:fd:66:3c:f8:3d:96:8e:42:8a:3f:13:55:b7: ab:66:89:53:e3:0e:62:fe:b3:e9:2b:67:e1:86:87: 03:46:4b:fc:ea:3a:03:82:5c:77:d2:c0:50:ce:69: 7b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2F:ED:94:50:13:5C:A7:67:3E:98:2E:BB:34:15:BB:76:5F:7F:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35557100-ce0f-3351-a353-c96557e04c2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4d:27:0e:f3:d8:52:4d:e8:b8:d2:d2:40:35:e4:01:03:05: 7b:8e:4e:9e:b6:a1:17:29:1e:b1:d8:91:00:6d:6c:de:73:41: 09:04:3a:e5:fe:8f:4a:8b:d0:91:26:9b:8a:00:b7:91:4c:e8: 5d:c4:ee:95:1e:66:0d:0e:24:38:0a:4e:a2:2f:08:5d:d5:5c: 31:2f:a4:99:f0:f5:b2:15:06:c0:d7:a0:0b:79:a3:ec:fd:92: 45:1e:f2:d6:ea:74:d0:db:5a:f5:e5:f7:2f:1b:92:73:35:1b: 37:70:8b:eb:e3:4b:50:33:db:a6:20:79:4b:5a:c6:0d:32:50: 49:59:b3:79:45:47:27:bb:f8:c4:0b:2d:af:97:2d:8e:1c:02: 28:3c:34:5f:9d:94:66:a0:9a:57:51:ad:62:26:44:1c:a1:b2: b2:b2:9c:d0:58:50:88:cb:a8:85:82:14:3b:a0:78:f1:10:99: 7a:11:c7:3d:0c:10:8d:dc:c8:cd:bf:e4:27:8f:d8:70:79:77: 8e:4e:8c:5b:12:54:63:6e:de:9c:57:c0:ca:37:03:4e:bc:ed: dd:a2:7a:4c:c0:b3:29:9a:23:f9:f7:78:15:dd:ff:42:b3:c4: f3:2f:ed:57:a9:5b:7f:f3:bf:b3:f4:be:23:29:d4:f5:f5:d2: 12:eb:91:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35vJmWNX0vB63AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWZlNzU1YWItYzlhOC00MzA5LWEwMzUtYTlkNTIwNmNlMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ol/e0U/BfLaFkbnvwbnqdxDbPO/n/4A3s7F FZi9Fyq1U+3kuWKdy0sv37kvNivs2rlvpVnX/cYKv9QEG/fLJLMHrehlKZAAS6jN 4OfDoTFwRd7gDHc54rKsPlSDAfN6WKWTnrKro++shYSEF7dwNzrh5I90htmKFUef a3zluDDfCy+sB0f8y0X9jOM3UvSTAaMuFj9i0vVHHtVuqTI08RMTj2JazrCj8XH8 3y/fOj3T19OpE4aUw1Xk3YkmGwhjIZYbmM2A9bQcNex4acJXVqEXnf1mPPg9lo5C ij8TVberZolT4w5i/rPpK2fhhocDRkv86joDglx30sBQzml7YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJov7ZRQE1ynZz6YLrs0Fbt2X3/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzU1NTcxMDAtY2UwZi0z MzUxLWEzNTMtYzk2NTU3ZTA0YzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRDaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5NJw7z2FJN6LjS0kA15AEDBXuOTp62oRcpHrHYkQBtbN5zQQkEOuX+ j0qL0JEmm4oAt5FM6F3E7pUeZg0OJDgKTqIvCF3VXDEvpJnw9bIVBsDXoAt5o+z9 kkUe8tbqdNDbWvXl9y8bknM1Gzdwi+vjS1Az26YgeUtaxg0yUElZs3lFRye7+MQL La+XLY4cAig8NF+dlGagmldRrWImRByhsrKynNBYUIjLqIWCFDugePEQmXoRxz0M EI3cyM2/5CeP2HB5d45OjFsSVGNu3pxXwMo3A0687d2iekzAsymaI/n3eBXd/0Kz xPMv7VepW3/zv7P0viMp1PX10hLrkTA= -----END CERTIFICATE-----Generated at Thu Mar 26 15:50:06 2026 by rpki-client