$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3de5534a-75b8-33c8-b248-1f421d36a669.roa File: 3de5534a-75b8-33c8-b248-1f421d36a669.roa (raw, json) Hash identifier: Ks2AFzjjjEXyV/anMY37xbd+lrYLexrpuFT563Pov4Q= Subject key identifier: 28:49:82:CA:EB:C5:48:4F:8C:04:60:AD:F9:9A:C0:BE:8C:4B:82:6E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AAC9EA18F766214AB172C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3de5534a-75b8-33c8-b248-1f421d36a669.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.16.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:c9:ea:18:f7:66:21:4a:b1:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=1de81b9b-e174-4d16-bf35-d0c08c4f8787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8b:52:2c:a8:6c:38:3f:28:73:b0:1b:21:ea: 76:96:0c:0c:85:db:c4:21:57:e5:56:fa:82:31:a1: 9c:e2:fb:55:b5:0a:e8:45:d1:e9:bd:ab:03:eb:2f: 5c:cf:0f:18:2c:5f:47:e5:05:cd:85:f1:49:8e:eb: 11:f2:e9:87:3c:f7:b4:7d:c6:f6:a3:82:42:35:5b: 7e:e1:5b:14:8d:2f:aa:bb:1f:ee:ff:de:15:f2:55: 05:8f:0f:01:c0:0d:d4:ab:63:dc:e0:a7:fe:42:e7: ed:98:28:5d:3c:a8:2a:29:9d:76:f9:35:43:34:99: 9d:18:d8:c5:56:e8:25:8f:e1:04:a4:9c:9c:d5:99: 96:93:62:9f:3d:5f:b7:7d:15:58:da:73:fd:30:f5: 8e:14:0f:eb:5e:a1:d7:60:27:93:52:1b:68:c5:bf: 01:6e:2c:00:f2:da:c0:f5:cd:b5:eb:db:e5:d7:e0: de:e8:79:f7:eb:e6:61:9f:69:43:3c:4f:2d:7e:81: 90:a1:5d:94:bb:b8:92:43:37:89:6a:7a:97:7a:50: 26:cc:05:27:fe:eb:85:4a:16:b5:bd:84:90:52:a4: 10:53:4f:fe:10:b7:31:70:37:2a:6b:db:70:61:ce: d1:0b:9e:a8:64:8b:e6:67:5e:80:76:b1:22:88:3f: 47:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:49:82:CA:EB:C5:48:4F:8C:04:60:AD:F9:9A:C0:BE:8C:4B:82:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3de5534a-75b8-33c8-b248-1f421d36a669.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c4:39:b5:0b:f3:48:2d:10:ff:1c:85:b1:b3:6a:cf:a5:3f: e1:f1:cb:c1:ca:7a:31:01:11:a9:d7:02:c9:b9:28:e7:24:51: 89:58:6a:27:2d:7f:ba:b2:ab:82:51:cd:d2:4a:32:9c:86:d3: 31:3e:02:30:36:03:2e:6c:d5:27:21:1a:c9:dc:84:4d:f4:f8: a8:59:b9:50:38:ab:bc:0d:5b:aa:f9:8a:60:6f:1d:5e:6b:13: 1e:1b:bc:7c:a1:fb:ba:d1:d6:a8:9f:c4:26:e9:f4:45:18:c3: 1e:58:5a:c5:fd:d6:d0:d0:9b:74:fb:d8:00:d0:0e:04:cf:6e: 7f:6a:b0:39:e9:73:fe:0d:46:d7:82:1d:ed:33:b1:4b:d5:f9: 3a:f0:3d:4e:56:72:db:c7:3d:5d:7c:06:90:c5:5b:38:6e:91: dd:12:40:38:c3:de:48:19:18:41:ae:ef:f8:70:ef:12:1f:4f: 0c:5a:cd:73:11:b2:cf:d9:46:e6:8c:9c:63:e6:7d:55:da:81: ce:49:e6:7b:17:42:c9:d8:23:a7:1b:ea:43:f8:6c:22:17:c6: 7e:db:93:b0:14:21:3e:45:0d:c8:9c:a7:84:e4:7d:9f:5d:7a: 67:c7:85:f6:55:9b:03:cb:09:a8:e4:67:99:b4:f0:70:c2:c2: 9a:f0:51:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqsnqGPdmIUqxcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MWRlODFiOWItZTE3NC00ZDE2LWJmMzUtZDBjMDhjNGY4Nzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4tSLKhsOD8oc7AbIep2lgwMhdvEIVflVvqC MaGc4vtVtQroRdHpvasD6y9czw8YLF9H5QXNhfFJjusR8umHPPe0fcb2o4JCNVt+ 4VsUjS+qux/u/94V8lUFjw8BwA3Uq2Pc4Kf+QuftmChdPKgqKZ12+TVDNJmdGNjF Vuglj+EEpJyc1ZmWk2KfPV+3fRVY2nP9MPWOFA/rXqHXYCeTUhtoxb8BbiwA8trA 9c2169vl1+De6Hn36+Zhn2lDPE8tfoGQoV2Uu7iSQzeJanqXelAmzAUn/uuFSha1 vYSQUqQQU0/+ELcxcDcqa9twYc7RC56oZIvmZ16AdrEiiD9HowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChJgsrrxUhPjARgrfmawL6MS4JuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2RlNTUzNGEtNzViOC0z M2M4LWIyNDgtMWY0MjFkMzZhNjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRDLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPEObUL80gtEP8chbGzas+lP+Hxy8HKejEBEanXAsm5KOckUYlYaict f7qyq4JRzdJKMpyG0zE+AjA2Ay5s1SchGsnchE30+KhZuVA4q7wNW6r5imBvHV5r Ex4bvHyh+7rR1qifxCbp9EUYwx5YWsX91tDQm3T72ADQDgTPbn9qsDnpc/4NRteC He0zsUvV+TrwPU5WctvHPV18BpDFWzhukd0SQDjD3kgZGEGu7/hw7xIfTwxazXMR ss/ZRuaMnGPmfVXagc5J5nsXQsnYI6cb6kP4bCIXxn7bk7AUIT5FDcicp4TkfZ9d emfHhfZVmwPLCajkZ5m08HDCwprwUSM= -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:42 2026 by rpki-client