$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3567bc3f-98c6-34f6-9200-80fe14e390e0.roa File: 3567bc3f-98c6-34f6-9200-80fe14e390e0.roa (raw, json) Hash identifier: oL0U5ERJen1i2uTYMzKajfjsvyI5Gm/cK/1Tz9PvTeo= Subject key identifier: EE:83:21:2B:86:34:90:F0:C7:BC:37:FA:58:14:1E:F2:0E:77:46:E7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF741C3E112689BB298F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3567bc3f-98c6-34f6-9200-80fe14e390e0.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.29.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:74:1c:3e:11:26:89:bb:29:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=bf4b9c13-d169-4f35-a9f9-31929965545a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f4:5a:37:bd:e6:18:bd:7a:fa:09:3a:1e:b0: 3f:51:a8:7e:5a:24:0d:97:ec:a7:e7:45:07:7d:43: 0c:85:cc:47:dc:9d:75:0b:b6:e4:22:b7:64:b8:3f: ac:12:81:b0:be:a8:93:46:23:1e:d0:d6:ec:14:b2: cd:34:ff:66:f5:85:f6:27:fe:bb:b7:27:38:84:d3: 4a:78:09:a0:1e:b1:7d:be:f7:bd:bd:c4:43:69:77: 85:db:75:3b:54:ce:25:fa:42:0f:74:29:83:f3:af: c1:41:53:42:ff:7d:1e:6c:a5:da:3c:fc:38:60:60: 74:0b:7e:84:de:cd:60:07:00:b8:a0:19:ed:ce:0f: 94:5e:88:38:1d:09:66:58:d1:24:1c:cd:7f:76:ba: 55:fb:1c:22:86:8a:22:f6:2f:93:55:74:7d:6d:e8: 4c:72:0c:cc:c7:c9:d0:eb:d7:33:c6:ba:42:33:02: 9f:1e:ec:13:be:5a:be:d6:75:c8:f9:50:ba:ae:a3: e9:8f:ea:fb:f4:40:0c:ae:ab:ac:b0:9b:9e:6f:f0: e2:59:6b:7d:d4:aa:b8:55:d7:15:92:31:95:f2:51: 14:49:bb:07:c9:95:ed:54:01:ba:5e:25:5d:44:7c: b5:25:cf:fe:1d:dd:e0:4c:9e:60:54:73:c1:67:3f: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:83:21:2B:86:34:90:F0:C7:BC:37:FA:58:14:1E:F2:0E:77:46:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3567bc3f-98c6-34f6-9200-80fe14e390e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:17:7a:25:7b:1d:04:0d:e4:98:d4:df:f8:e0:de:65:c8:62: be:81:1c:ad:6c:af:a4:c2:eb:f0:7a:b9:da:af:81:78:85:b5: 7a:5a:02:8d:93:1d:a3:d3:5b:10:b8:56:8b:ed:07:94:ea:6a: b4:59:08:77:5d:57:1e:81:62:48:e5:0b:44:02:2f:b0:4f:6f: 96:a3:b5:c1:6c:0d:5c:47:1c:ca:2e:1c:25:e6:83:9d:06:7e: df:16:43:19:b4:db:16:5c:7b:d7:be:d3:50:6a:c3:ec:b0:88: 68:cc:33:88:1f:93:aa:97:a9:9c:dd:1d:43:6b:13:29:a0:b7: 2f:bd:e9:15:ef:4f:c3:f0:a4:84:37:69:9f:f2:54:66:9a:77: fc:6f:60:16:9f:47:3c:48:be:78:64:42:b9:e2:ef:e5:98:e2: fb:4f:ef:ff:f4:45:0d:5e:94:2b:d8:b2:ac:73:ea:30:72:a4: 2e:16:c8:9e:02:ff:f6:cf:5f:a7:3e:cf:3b:51:5b:94:56:65: d2:c3:33:e8:c0:e0:bc:95:c7:86:03:a3:87:2e:32:5b:83:a8: 95:eb:39:c8:db:2f:21:b0:42:26:1e:0e:3d:5b:82:64:ac:6d: 19:5b:db:f2:3c:65:49:f5:12:91:a9:e2:d1:06:97:62:66:8e: 0f:5a:9e:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k33QcPhEmibspjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YmY0YjljMTMtZDE2OS00ZjM1LWE5ZjktMzE5Mjk5NjU1NDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvRaN73mGL16+gk6HrA/Uah+WiQNl+yn50UH fUMMhcxH3J11C7bkIrdkuD+sEoGwvqiTRiMe0NbsFLLNNP9m9YX2J/67tyc4hNNK eAmgHrF9vve9vcRDaXeF23U7VM4l+kIPdCmD86/BQVNC/30ebKXaPPw4YGB0C36E 3s1gBwC4oBntzg+UXog4HQlmWNEkHM1/drpV+xwihooi9i+TVXR9behMcgzMx8nQ 69czxrpCMwKfHuwTvlq+1nXI+VC6rqPpj+r79EAMrqussJueb/DiWWt91Kq4VdcV kjGV8lEUSbsHyZXtVAG6XiVdRHy1Jc/+Hd3gTJ5gVHPBZz/nEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6DISuGNJDwx7w3+lgUHvIOd0bnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzU2N2JjM2YtOThjNi0z NGY2LTkyMDAtODBmZTE0ZTM5MGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcXeiV7HQQN5JjU3/jg3mXIYr6BHK1sr6TC6/B6udqvgXiFtXpaAo2T HaPTWxC4VovtB5TqarRZCHddVx6BYkjlC0QCL7BPb5ajtcFsDVxHHMouHCXmg50G ft8WQxm02xZce9e+01Bqw+ywiGjMM4gfk6qXqZzdHUNrEymgty+96RXvT8PwpIQ3 aZ/yVGaad/xvYBafRzxIvnhkQrni7+WY4vtP7//0RQ1elCvYsqxz6jBypC4WyJ4C //bPX6c+zztRW5RWZdLDM+jA4LyVx4YDo4cuMluDqJXrOcjbLyGwQiYeDj1bgmSs bRlb2/I8ZUn1EpGp4tEGl2Jmjg9anus= -----END CERTIFICATE-----Generated at Thu Mar 26 15:06:27 2026 by rpki-client