$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4390aa88-8392-3e92-b96a-694f6067d383.roa File: 4390aa88-8392-3e92-b96a-694f6067d383.roa (raw, json) Hash identifier: gr0BVvltXY++z76jlgiQik2lPXrsIA4cH1Rsm+u9gZM= Subject key identifier: 84:2B:DF:62:2D:53:CA:7E:ED:85:94:A8:15:13:74:79:9C:E4:F9:3C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AAC4A190CE040EBE7196C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4390aa88-8392-3e92-b96a-694f6067d383.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.21.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:c4:a1:90:ce:04:0e:be:71:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=e88e70f5-2aa4-439f-86f3-f273d7e4c7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:42:90:69:57:98:77:88:c2:48:2b:e8:1d:7a: a9:7c:2b:99:6c:06:cf:ce:d4:fe:8f:f5:98:98:d1: 0f:7d:91:89:50:af:41:58:75:79:a0:44:32:8a:a6: ac:61:e7:09:f4:a9:50:4b:33:71:ca:a6:40:d2:89: 92:27:22:96:02:60:1f:0f:21:7e:6c:80:1c:be:ec: d4:b3:ee:e7:51:fb:ac:ba:05:8a:0a:39:06:ce:2a: 9b:a9:64:78:26:77:3f:87:51:60:25:b9:04:e3:fd: 4a:dc:56:d6:60:95:e2:39:d4:19:fd:58:f6:77:2a: 76:7f:19:b8:72:04:cc:74:7f:1e:bd:d3:bf:7f:f0: 35:57:be:9f:89:78:1a:20:f9:88:4a:79:99:7b:28: c1:b1:20:75:a9:ed:51:3e:ef:17:43:80:80:d0:81: 78:58:55:06:21:93:a7:a7:2b:39:3d:a5:dc:cd:e5: 0f:d2:02:38:7b:dc:82:47:00:ad:fa:9d:5e:2e:8d: 5f:d7:34:f1:8d:bd:45:d6:b9:78:24:00:6f:18:6e: f1:df:b2:39:dd:05:81:27:eb:be:ef:b1:58:e1:e3: ea:e7:45:11:35:4e:1c:21:c3:6c:4c:c7:e8:f6:30: ca:68:22:7e:93:05:7d:53:07:ed:4b:28:49:d0:a4: 93:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2B:DF:62:2D:53:CA:7E:ED:85:94:A8:15:13:74:79:9C:E4:F9:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4390aa88-8392-3e92-b96a-694f6067d383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a1:dd:69:ff:1b:61:32:bb:48:fc:ba:d3:8a:e5:06:64:08: fc:9b:60:44:8b:1e:f1:c5:68:8c:70:97:4e:6f:79:71:4e:f0: ed:b2:f1:32:17:31:91:f0:73:1e:24:95:e3:10:77:a1:8a:e7: 40:9f:bc:27:d5:6e:4a:40:21:c6:83:69:80:99:42:4f:75:38: 1a:07:39:9a:f0:3e:75:c4:c7:b4:c6:79:59:e0:40:9e:23:55: 9b:f9:a6:8e:ea:90:fe:c1:8f:e2:74:50:ec:cd:fa:97:e3:37: 27:26:35:bb:81:cc:0e:bc:9a:ba:45:d4:20:f3:eb:42:a3:04: 26:42:dd:40:98:c6:ba:a8:db:8b:dc:b2:35:8b:4b:63:43:2d: ba:d7:2d:91:95:50:76:f6:46:70:a0:3d:7d:3f:35:ef:36:3f: 08:c7:bb:3e:c9:ba:73:c6:e8:1c:2a:36:ed:f6:c9:dc:28:15: 00:a1:08:b6:2f:8f:c4:15:85:1e:1e:ef:38:c1:7b:20:32:d7: 9e:c0:23:f4:bd:f1:35:e9:f3:60:14:4a:5e:fd:b3:be:26:05: d0:f5:cb:88:4b:98:3a:70:63:f7:67:d2:6e:ec:44:97:dd:57: ff:bf:06:7b:94:a1:b4:3e:fc:31:10:4c:36:f6:84:20:f3:a5: bc:ed:bd:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqsShkM4EDr5xlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZTg4ZTcwZjUtMmFhNC00MzlmLTg2ZjMtZjI3M2Q3ZTRjN2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10KQaVeYd4jCSCvoHXqpfCuZbAbPztT+j/WY mNEPfZGJUK9BWHV5oEQyiqasYecJ9KlQSzNxyqZA0omSJyKWAmAfDyF+bIAcvuzU s+7nUfusugWKCjkGziqbqWR4Jnc/h1FgJbkE4/1K3FbWYJXiOdQZ/Vj2dyp2fxm4 cgTMdH8evdO/f/A1V76fiXgaIPmISnmZeyjBsSB1qe1RPu8XQ4CA0IF4WFUGIZOn pys5PaXczeUP0gI4e9yCRwCt+p1eLo1f1zTxjb1F1rl4JABvGG7x37I53QWBJ+u+ 77FY4ePq50URNU4cIcNsTMfo9jDKaCJ+kwV9UwftSyhJ0KSTmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQr32ItU8p+7YWUqBUTdHmc5Pk8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDM5MGFhODgtODM5Mi0z ZTkyLWI5NmEtNjk0ZjYwNjdkMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGh3Wn/G2Eyu0j8utOK5QZkCPybYESLHvHFaIxwl05veXFO8O2y8TIX MZHwcx4kleMQd6GK50CfvCfVbkpAIcaDaYCZQk91OBoHOZrwPnXEx7TGeVngQJ4j VZv5po7qkP7Bj+J0UOzN+pfjNycmNbuBzA68mrpF1CDz60KjBCZC3UCYxrqo24vc sjWLS2NDLbrXLZGVUHb2RnCgPX0/Ne82PwjHuz7JunPG6BwqNu32ydwoFQChCLYv j8QVhR4e7zjBeyAy157AI/S98TXp82AUSl79s74mBdD1y4hLmDpwY/dn0m7sRJfd V/+/BnuUobQ+/DEQTDb2hCDzpbztvZc= -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:05 2026 by rpki-client