$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a66e457-9702-3b54-b4dd-dc18e3258958.roa File: 3a66e457-9702-3b54-b4dd-dc18e3258958.roa (raw, json) Hash identifier: dryXuCK4eFvPxdxttM/nmjBN3Z/9nLfESqBG5MgVfaM= Subject key identifier: EC:24:58:F8:8E:A5:94:01:93:8D:4F:E3:39:67:0E:50:B7:D2:1A:DE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF8358A7E3BE889590EE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a66e457-9702-3b54-b4dd-dc18e3258958.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.28.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:83:58:a7:e3:be:88:95:90:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=fae3834c-e0aa-4cba-aed8-7484573aea5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:51:3c:4f:5f:db:f7:ae:e8:6c:8f:c1:f5:5a: b8:5b:cd:aa:be:95:49:33:4b:cb:f9:f8:77:fe:21: 13:ac:f6:3e:e5:44:8e:cb:ff:a4:b9:60:d6:ca:f1: 24:d9:6b:7f:66:be:dc:11:95:27:1c:a0:c4:d2:87: 6f:8e:34:cd:a8:70:a2:1a:22:08:de:cb:c4:7c:75: 05:e5:e0:16:b0:90:e9:58:b8:b3:04:da:92:ef:29: a8:e9:08:d9:50:55:e6:08:1c:41:81:a6:99:bb:cc: 58:a3:29:49:0b:17:a0:5e:46:29:34:3e:fb:18:c4: db:4e:29:de:c0:ef:de:10:bd:cd:42:72:e8:ae:cc: 8a:52:41:91:95:bf:3e:c1:99:92:ab:3c:4c:bc:c2: 46:ff:bf:ee:2e:9c:d2:7b:ba:70:0a:33:12:1d:32: 2c:4b:9f:a1:63:05:65:ea:0d:e0:d0:8c:fd:da:39: a3:8a:33:48:6c:e0:ee:06:38:b3:03:96:2f:64:f7: 44:aa:43:bf:e9:28:dd:43:7a:77:de:5f:f8:b7:82: 70:91:b2:87:2c:a1:14:1b:10:79:93:c9:56:ac:3e: 8d:5b:fd:0d:6b:6b:4f:b1:ca:76:b5:02:0b:72:15: b0:da:e0:01:a0:e3:08:65:e1:4f:ae:64:3b:1d:82: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:24:58:F8:8E:A5:94:01:93:8D:4F:E3:39:67:0E:50:B7:D2:1A:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a66e457-9702-3b54-b4dd-dc18e3258958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:1e:9c:f4:18:06:22:1d:0e:e0:31:3c:5b:56:72:76:40:97: 54:66:34:0c:2f:80:06:43:d4:91:90:d9:1e:8e:5a:9e:9e:00: 2a:a1:64:84:24:5e:76:83:d5:32:ee:e4:87:92:5c:79:c9:a9: de:98:35:b1:68:40:75:e7:d0:4b:e4:8b:2c:3b:6c:19:fe:51: 9a:9c:48:b5:36:5d:af:16:7d:00:81:13:c6:90:55:82:25:2d: 86:1a:c2:47:96:39:79:22:58:cb:32:7f:54:76:a5:80:a9:96: c6:b0:5b:1a:87:87:08:af:8b:6e:b0:cd:bb:90:c0:3d:57:20: 51:2b:2c:d7:83:e1:49:22:a0:c7:2e:e0:21:5a:42:57:82:d8: 23:d7:77:10:3c:79:92:29:4f:d2:97:af:a5:a9:30:43:86:e2: 50:20:a0:09:86:8d:6b:61:77:43:81:d0:15:b0:88:ce:1c:de: d2:d9:85:16:8d:f0:f6:88:71:0b:d7:aa:96:6b:6c:3f:e8:0d: 47:08:be:3c:a9:2e:3f:14:6c:dc:64:66:db:07:fc:aa:a3:c8: 19:b5:46:fd:73:8f:16:b1:a4:45:d3:21:b9:5d:71:6f:a7:a1: a0:ca:be:b4:3b:6d:43:6e:13:9b:59:28:37:4d:55:36:7c:04: 82:ba:ef:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k34NYp+O+iJWQ7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZmFlMzgzNGMtZTBhYS00Y2JhLWFlZDgtNzQ4NDU3M2FlYTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFE8T1/b967obI/B9Vq4W82qvpVJM0vL+fh3 /iETrPY+5USOy/+kuWDWyvEk2Wt/Zr7cEZUnHKDE0odvjjTNqHCiGiII3svEfHUF 5eAWsJDpWLizBNqS7ymo6QjZUFXmCBxBgaaZu8xYoylJCxegXkYpND77GMTbTine wO/eEL3NQnLorsyKUkGRlb8+wZmSqzxMvMJG/7/uLpzSe7pwCjMSHTIsS5+hYwVl 6g3g0Iz92jmjijNIbODuBjizA5YvZPdEqkO/6SjdQ3p33l/4t4JwkbKHLKEUGxB5 k8lWrD6NW/0Na2tPscp2tQILchWw2uABoOMIZeFPrmQ7HYL+8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwkWPiOpZQBk41P4zlnDlC30hreMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2E2NmU0NTctOTcwMi0z YjU0LWI0ZGQtZGMxOGUzMjU4OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcenPQYBiIdDuAxPFtWcnZAl1RmNAwvgAZD1JGQ2R6OWp6eACqhZIQk XnaD1TLu5IeSXHnJqd6YNbFoQHXn0Evkiyw7bBn+UZqcSLU2Xa8WfQCBE8aQVYIl LYYawkeWOXkiWMsyf1R2pYCplsawWxqHhwivi26wzbuQwD1XIFErLNeD4UkioMcu 4CFaQleC2CPXdxA8eZIpT9KXr6WpMEOG4lAgoAmGjWthd0OB0BWwiM4c3tLZhRaN 8PaIcQvXqpZrbD/oDUcIvjypLj8UbNxkZtsH/KqjyBm1Rv1zjxaxpEXTIbldcW+n oaDKvrQ7bUNuE5tZKDdNVTZ8BIK673k= -----END CERTIFICATE-----Generated at Thu Mar 26 20:07:25 2026 by rpki-client