$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f53d40b-e3cf-3c18-8ef5-c6754eb53392.roa File: 3f53d40b-e3cf-3c18-8ef5-c6754eb53392.roa (raw, json) Hash identifier: rQUB79JYG2JqwoXkBYDtmWhk/yzRD+Q86T6fhL4BFVA= Subject key identifier: 4A:29:74:8F:F9:1D:8A:8E:E7:98:63:EA:41:D3:D1:EF:70:02:6A:36 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E1244294A18F1E4D6959D0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f53d40b-e3cf-3c18-8ef5-c6754eb53392.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.19.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:24:42:94:a1:8f:1e:4d:69:59:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b41c304a-f3b2-4b61-81c1-3b728f4b4f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6a:49:87:ef:71:78:1f:1f:f0:ba:b6:61:8e: 4e:f0:b9:0c:e2:8f:fc:32:f1:a5:9d:12:54:0c:4d: 66:73:68:19:89:66:5d:f7:7d:f4:7d:53:a1:90:92: 5d:9a:9c:de:e6:c2:90:c3:bd:96:ec:ae:53:db:d1: fa:d2:26:c6:3a:5e:29:6c:ca:26:a5:30:f8:2d:36: ef:c3:3f:5b:00:dc:f7:a0:c5:b4:bf:0f:4b:01:06: f9:4b:86:91:1b:08:0e:d1:8a:9c:4c:15:c5:35:c2: d3:a3:7f:01:0f:65:82:bb:3e:92:1f:cc:c9:e1:77: 4f:76:f9:f4:e8:86:b9:ee:a2:06:b3:b1:2a:68:2d: fc:34:72:a2:89:73:57:55:0a:a6:80:1c:dd:99:f8: 99:dd:c8:44:ec:ab:57:68:d0:4c:75:00:17:7a:be: 80:9f:ea:c5:bf:f7:60:2c:63:2a:e6:36:8b:0b:ca: a7:f0:fe:36:0e:4a:7e:c7:17:c2:f5:74:22:70:e6: 54:79:7b:ff:9f:a8:fe:60:60:88:40:c9:0e:30:8e: bd:d8:bd:34:83:28:e9:66:77:c3:b8:be:ec:13:51: 8d:63:e6:28:63:cf:5c:25:69:e4:a1:16:aa:b6:9d: e9:e3:91:cf:bb:49:8c:57:95:85:8d:23:75:13:80: 7b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:29:74:8F:F9:1D:8A:8E:E7:98:63:EA:41:D3:D1:EF:70:02:6A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f53d40b-e3cf-3c18-8ef5-c6754eb53392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a1:c1:b8:06:70:54:b6:3b:4b:04:f3:d0:b1:62:9c:b8:ff: bb:82:d9:2c:9f:60:5c:66:b3:78:6e:03:19:a1:53:32:8e:83: 6b:ab:30:76:ff:b9:ee:6c:5f:a8:03:f4:de:b0:5a:29:f8:70: d6:1b:cf:49:76:a6:ff:f0:71:1e:0c:3a:82:f3:24:eb:35:4f: 43:d1:65:9a:b0:4d:5d:7d:c8:fb:50:9e:f8:0b:41:97:cc:48: 45:0e:96:91:89:a3:8c:e6:2b:bd:dc:d2:e9:f9:07:ff:e4:93: f6:50:6c:86:5f:d5:45:0d:d5:33:d2:53:b2:5d:16:92:08:b4: 19:5b:39:2f:a3:77:72:6d:e8:8b:cf:e6:0c:3f:2e:ba:15:a0: bf:a1:81:77:9d:34:77:14:50:1b:4c:ed:e7:dc:ce:30:5b:dd: 93:88:83:1f:00:ba:11:a7:91:84:12:75:1c:e6:95:4a:e1:0b: 1e:16:8f:78:83:b0:9c:20:02:69:f1:a2:61:82:45:67:6b:65: ee:f0:6f:bf:1a:82:10:49:e0:ff:6e:47:fb:32:ce:43:ba:c9: 28:dc:95:60:e3:19:fe:2f:d7:86:c4:ca:8f:49:ca:96:05:b2: 79:06:e8:0a:89:3d:bd:11:fc:cc:10:8a:a0:a3:56:32:fa:87: 66:2c:f1:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4SRClKGPHk1pWdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjQxYzMwNGEtZjNiMi00YjYxLTgxYzEtM2I3MjhmNGI0ZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2pJh+9xeB8f8Lq2YY5O8LkM4o/8MvGlnRJU DE1mc2gZiWZd9330fVOhkJJdmpze5sKQw72W7K5T29H60ibGOl4pbMompTD4LTbv wz9bANz3oMW0vw9LAQb5S4aRGwgO0YqcTBXFNcLTo38BD2WCuz6SH8zJ4XdPdvn0 6Ia57qIGs7EqaC38NHKiiXNXVQqmgBzdmfiZ3chE7KtXaNBMdQAXer6An+rFv/dg LGMq5jaLC8qn8P42Dkp+xxfC9XQicOZUeXv/n6j+YGCIQMkOMI692L00gyjpZnfD uL7sE1GNY+YoY89cJWnkoRaqtp3p45HPu0mMV5WFjSN1E4B7GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEopdI/5HYqO55hj6kHT0e9wAmo2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Y1M2Q0MGItZTNjZi0z YzE4LThlZjUtYzY3NTRlYjUzMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRNXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFahwbgGcFS2O0sE89CxYpy4/7uC2SyfYFxms3huAxmhUzKOg2urMHb/ ue5sX6gD9N6wWin4cNYbz0l2pv/wcR4MOoLzJOs1T0PRZZqwTV19yPtQnvgLQZfM SEUOlpGJo4zmK73c0un5B//kk/ZQbIZf1UUN1TPSU7JdFpIItBlbOS+jd3Jt6IvP 5gw/LroVoL+hgXedNHcUUBtM7efczjBb3ZOIgx8AuhGnkYQSdRzmlUrhCx4Wj3iD sJwgAmnxomGCRWdrZe7wb78aghBJ4P9uR/syzkO6ySjclWDjGf4v14bEyo9JypYF snkG6AqJPb0R/MwQiqCjVjL6h2Ys8e0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:06:14 2026 by rpki-client