$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37a79c5b-0d91-3047-97be-167216f2c126.roa File: 37a79c5b-0d91-3047-97be-167216f2c126.roa (raw, json) Hash identifier: 8WD8JDW9w8JbmmM8jOqSTwsuWtV3XEqjrK4Q5FYxFRc= Subject key identifier: 6B:91:E7:78:0D:37:F5:F7:54:B3:C7:70:E1:FC:A0:18:B4:CD:BC:F9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E12E862A810C6B83799A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37a79c5b-0d91-3047-97be-167216f2c126.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.21.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2e:86:2a:81:0c:6b:83:79:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=579b1835-73fb-4d60-8341-e1b3a9faf025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7e:da:9b:b5:ba:9d:5d:b8:49:6b:ca:f1:8b: a4:cf:6f:cb:23:99:c0:45:27:9b:39:4e:16:d3:ba: ab:5f:c0:5c:46:9c:e9:e5:86:d0:41:c9:1e:ec:96: 84:7f:5a:29:dc:98:d3:7f:65:1f:46:e8:ca:bf:82: ca:e6:59:9e:b8:8c:6a:70:fc:b6:b8:ab:cb:fe:55: 37:e4:13:46:dc:c1:dd:9f:4f:b1:60:2a:c4:71:a4: 7e:a6:46:24:13:7e:95:1c:24:a7:23:4f:20:9b:ec: 03:40:b2:95:c7:38:4d:c8:5b:5e:1c:7e:4e:7c:9d: b7:58:28:f1:78:de:c0:ec:5c:15:3e:77:34:f8:71: 8e:fa:01:fd:6f:b3:d0:ac:c7:b7:2c:08:ab:86:c2: 24:fb:30:57:c3:51:7d:11:50:14:27:9c:48:07:2b: d8:b8:cb:e3:83:5f:05:54:ff:84:53:3d:1a:90:9d: 5b:5e:06:64:ef:f6:b5:f5:93:bb:59:30:bc:21:62: e8:9c:ea:a6:33:96:cf:82:d1:30:72:cc:78:11:10: 75:a3:85:8b:c1:bb:b3:c5:c8:84:07:f7:31:11:f7: af:72:75:84:6f:d4:2d:92:54:43:76:25:11:51:4b: 85:9a:2b:ae:7f:5e:2e:82:1b:51:df:a5:05:58:bc: 6c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:91:E7:78:0D:37:F5:F7:54:B3:C7:70:E1:FC:A0:18:B4:CD:BC:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37a79c5b-0d91-3047-97be-167216f2c126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:72:5d:e5:0f:9b:62:a1:00:9d:2f:9c:b6:f0:0d:e0:a8:76: 23:f2:ca:cf:b6:f8:db:ee:1e:0a:9f:4f:54:fb:be:84:1b:1b: b0:ea:be:7e:5c:5c:2f:52:3b:bb:dd:af:17:a1:36:71:77:85: 66:36:95:33:e6:53:31:eb:b3:61:42:3d:90:8e:bc:9b:27:78: eb:e2:1e:01:f2:c7:30:ae:eb:80:52:bf:c9:f5:14:e2:75:fc: d0:92:53:d3:a6:5f:6f:d1:63:bd:0f:1b:3a:fd:ba:0c:9f:64: fb:33:6c:a7:56:b4:59:c8:c8:d9:2c:4c:34:71:21:e2:bf:76: f0:44:f4:a3:9e:b0:89:7a:7d:1f:e9:53:2d:a7:d5:d7:1f:3d: 09:31:87:63:f5:20:9d:64:e0:14:96:a2:6d:e8:07:21:0b:04: a0:08:fb:a9:f7:1f:0a:19:e0:33:4f:54:d4:45:a0:88:e2:95: f6:0f:fd:26:14:ac:38:aa:48:13:4d:e1:45:d7:b0:03:26:41: eb:8e:60:54:fe:4c:93:68:c8:2a:e6:20:79:53:c9:b2:71:b5: 94:ad:ba:3d:cb:75:82:7e:cb:66:cd:bd:bb:ef:9a:68:47:77: 11:e6:da:55:5a:3c:a1:b5:15:6d:9d:2f:2e:15:fa:06:7d:10: ad:6e:ea:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4S6GKoEMa4N5moAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTc5YjE4MzUtNzNmYi00ZDYwLTgzNDEtZTFiM2E5ZmFmMDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX7am7W6nV24SWvK8Yukz2/LI5nARSebOU4W 07qrX8BcRpzp5YbQQcke7JaEf1op3JjTf2UfRujKv4LK5lmeuIxqcPy2uKvL/lU3 5BNG3MHdn0+xYCrEcaR+pkYkE36VHCSnI08gm+wDQLKVxzhNyFteHH5OfJ23WCjx eN7A7FwVPnc0+HGO+gH9b7PQrMe3LAirhsIk+zBXw1F9EVAUJ5xIByvYuMvjg18F VP+EUz0akJ1bXgZk7/a19ZO7WTC8IWLonOqmM5bPgtEwcsx4ERB1o4WLwbuzxciE B/cxEfevcnWEb9QtklRDdiURUUuFmiuuf14ughtR36UFWLxsYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuR53gNN/X3VLPHcOH8oBi0zbz5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzdhNzljNWItMGQ5MS0z MDQ3LTk3YmUtMTY3MjE2ZjJjMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdyXeUPm2KhAJ0vnLbwDeCodiPyys+2+NvuHgqfT1T7voQbG7Dqvn5c XC9SO7vdrxehNnF3hWY2lTPmUzHrs2FCPZCOvJsneOviHgHyxzCu64BSv8n1FOJ1 /NCSU9OmX2/RY70PGzr9ugyfZPszbKdWtFnIyNksTDRxIeK/dvBE9KOesIl6fR/p Uy2n1dcfPQkxh2P1IJ1k4BSWom3oByELBKAI+6n3HwoZ4DNPVNRFoIjilfYP/SYU rDiqSBNN4UXXsAMmQeuOYFT+TJNoyCrmIHlTybJxtZStuj3LdYJ+y2bNvbvvmmhH dxHm2lVaPKG1FW2dLy4V+gZ9EK1u6iY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:29:08 2026 by rpki-client