$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a130408-6050-35c1-a9fe-9f645a014bae.roa File: 3a130408-6050-35c1-a9fe-9f645a014bae.roa (raw, json) Hash identifier: VV6pJ8LhL2/4ZgD/jP75iQ77Y9ny0JqVgfESty4sV7U= Subject key identifier: 97:A3:BB:94:BE:82:AA:82:5A:87:7D:DA:8B:3A:E2:51:18:82:59:0B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E129FD843DB20116B84940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a130408-6050-35c1-a9fe-9f645a014bae.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 150.195.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:29:fd:84:3d:b2:01:16:b8:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=1e4d8a08-0758-4f6e-8d32-b5446179ec26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:cd:cb:e6:85:43:68:05:fe:1e:83:75:65: cc:f9:4b:23:75:fe:70:ab:23:38:d2:f6:85:b0:c8: b1:17:06:8f:16:53:9a:65:2e:38:39:ba:3a:01:b1: fb:50:9d:d4:ef:7d:12:c5:7f:b8:a1:6e:9d:23:22: 3a:cc:55:f2:9c:0e:c8:f7:c5:41:da:5f:c6:7e:99: 11:73:27:ed:1b:46:e4:eb:f3:5b:7b:30:56:c7:13: 2f:11:d3:4d:13:d5:10:a9:0d:bc:b6:eb:15:6c:ff: f9:23:bf:68:54:47:72:db:80:56:44:e1:86:09:74: 39:08:0e:d6:09:63:aa:41:76:83:80:2b:1f:43:3e: bc:2c:bb:1e:38:0a:ec:34:31:c3:ab:8f:df:3c:29: d4:fe:fa:31:fe:ad:b2:10:54:ec:37:4a:55:29:bc: 02:74:07:3e:20:71:20:f4:11:48:4e:9e:4f:6f:f6: 87:b3:c5:4d:e6:22:2a:d4:71:a7:a3:1d:52:c2:ed: d3:11:fb:01:ea:5a:2c:0e:f4:5c:17:8b:8d:1e:44: 1e:72:f0:66:3a:a5:63:aa:a3:50:88:77:f3:b0:33: 56:d8:80:2d:7c:2d:38:c5:39:93:16:88:e8:9f:d1: 7d:ea:60:b8:f2:1e:fc:3b:ca:f2:52:fd:d5:d2:1e: af:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A3:BB:94:BE:82:AA:82:5A:87:7D:DA:8B:3A:E2:51:18:82:59:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a130408-6050-35c1-a9fe-9f645a014bae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:48:d4:96:d9:71:09:1b:22:21:21:19:d9:2a:8d:13:77:cd: 63:ba:89:e6:ef:e7:fe:dc:80:6e:e8:4a:0e:af:fe:e1:d3:6c: b4:67:f3:41:c5:7b:83:9f:8e:62:16:91:b4:7e:c0:8a:aa:66: 13:49:36:93:37:17:ab:04:a2:2a:46:b3:3f:80:a4:ab:a8:5f: bd:37:93:13:f5:22:d3:95:e1:41:a6:7d:93:85:8d:87:25:38: e5:af:1b:c3:33:5e:83:12:83:55:bb:e2:f0:08:fe:db:12:be: 36:3f:05:fd:49:2f:cd:28:cc:f3:7d:2d:2f:80:72:b9:46:50: 14:2a:80:f8:20:6d:c8:95:da:60:75:e6:dd:00:26:c8:b7:92: 8b:55:0f:52:65:f9:5e:d1:ae:99:ae:d4:fb:ba:b3:e1:96:58: a0:bc:d6:1f:8f:39:ef:85:de:af:31:a9:92:0d:40:90:08:63: 2d:3c:66:e2:41:6f:ea:f2:6c:2a:e5:da:9a:6f:55:2e:a1:a8: bd:ed:69:28:32:96:3f:30:f4:83:54:73:d6:07:2d:57:d1:da: be:0c:b2:a6:5b:c6:45:0b:cb:a8:6e:69:23:b1:5d:80:a0:93: 73:b9:ba:b8:3a:17:27:51:0d:7c:f9:00:dd:bd:09:6b:b9:c4: ca:77:de:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Sn9hD2yARa4SUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MWU0ZDhhMDgtMDc1OC00ZjZlLThkMzItYjU0NDYxNzllYzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdzNy+aFQ2gF/h6DdWXM+Usjdf5wqyM40vaF sMixFwaPFlOaZS44Obo6AbH7UJ3U730SxX+4oW6dIyI6zFXynA7I98VB2l/GfpkR cyftG0bk6/NbezBWxxMvEdNNE9UQqQ28tusVbP/5I79oVEdy24BWROGGCXQ5CA7W CWOqQXaDgCsfQz68LLseOArsNDHDq4/fPCnU/vox/q2yEFTsN0pVKbwCdAc+IHEg 9BFITp5Pb/aHs8VN5iIq1HGnox1Swu3TEfsB6losDvRcF4uNHkQecvBmOqVjqqNQ iHfzsDNW2IAtfC04xTmTFojon9F96mC48h78O8ryUv3V0h6v8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeju5S+gqqCWod92os64lEYglkLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2ExMzA0MDgtNjA1MC0z NWMxLWE5ZmUtOWY2NDVhMDE0YmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhI1JbZcQkbIiEhGdkqjRN3zWO6iebv5/7cgG7oSg6v/uHTbLRn80HF e4OfjmIWkbR+wIqqZhNJNpM3F6sEoipGsz+ApKuoX703kxP1ItOV4UGmfZOFjYcl OOWvG8MzXoMSg1W74vAI/tsSvjY/Bf1JL80ozPN9LS+AcrlGUBQqgPggbciV2mB1 5t0AJsi3kotVD1Jl+V7Rrpmu1Pu6s+GWWKC81h+POe+F3q8xqZINQJAIYy08ZuJB b+rybCrl2ppvVS6hqL3taSgylj8w9INUc9YHLVfR2r4MsqZbxkULy6huaSOxXYCg k3O5urg6FydRDXz5AN29CWu5xMp33qk= -----END CERTIFICATE-----Generated at Thu Mar 26 08:09:36 2026 by rpki-client