$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49857a90-f490-31a1-a4af-0d9678a70395.roa File: 49857a90-f490-31a1-a4af-0d9678a70395.roa (raw, json) Hash identifier: dDIjFnBRj5frlFYGOI2g2pD+snf/M4dSS5JOfH9dhz8= Subject key identifier: B3:A9:8E:AD:0D:29:F4:EE:62:04:34:C0:EB:F1:7F:69:F1:31:CF:B6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AA1486D9B996DA3EBE4600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49857a90-f490-31a1-a4af-0d9678a70395.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.29.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:14:86:d9:b9:96:da:3e:be:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=d1be229c-cadc-4e0e-a0e2-8b497414b0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:32:c2:da:f5:c2:92:c0:4e:3b:67:f9:a4:dc: f9:19:03:9f:c0:2c:d4:03:2a:dd:19:8c:c4:12:0e: 43:c0:dd:1a:93:6f:0a:75:eb:d2:6c:85:62:5b:0a: 19:90:2c:f4:80:a7:3a:a5:57:90:31:16:52:8f:55: ee:25:3e:05:08:0f:f3:53:25:0b:48:b8:55:03:05: 94:50:98:bd:2a:86:f7:f3:03:52:a3:0e:7a:74:f5: d7:fd:a9:1c:05:1a:47:4a:70:c0:d0:ad:97:05:b8: 12:55:49:50:fc:cc:19:6e:cb:b2:ea:7d:a9:5c:8d: 6c:9b:b7:fe:c1:99:32:f7:85:fe:b4:46:cd:ff:50: af:a1:f6:fc:18:0d:a7:49:6e:f7:7a:c7:4a:b1:bb: dc:cd:7d:28:95:00:42:59:24:02:7f:0d:5c:7b:b5: 5f:e9:e7:fe:90:75:d0:bb:4e:4b:6a:24:5e:92:c6: 20:66:2e:76:36:eb:68:09:e4:47:c8:37:31:4f:9a: 84:52:1b:55:44:b4:8e:69:cc:0f:27:fe:5d:ad:3e: 83:5f:10:17:42:47:1c:8b:ad:ed:aa:26:a5:02:b6: 52:6e:ed:a7:0c:cf:12:b4:8b:49:25:84:77:41:f5: 9e:92:7a:6a:b2:c5:94:c2:73:8c:c2:ef:45:47:33: 18:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A9:8E:AD:0D:29:F4:EE:62:04:34:C0:EB:F1:7F:69:F1:31:CF:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/49857a90-f490-31a1-a4af-0d9678a70395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:93:03:e7:94:19:b5:4f:7e:f8:5e:6b:d9:2c:4b:43:e8:24: da:8f:49:7d:0e:2c:54:36:5f:a8:4c:f2:48:e4:a3:fc:b3:eb: 85:1c:fa:a2:6c:d6:98:7c:26:13:0d:84:47:32:95:1a:f2:f5: 44:f2:4f:93:05:c9:ef:f2:ff:63:44:af:2b:24:66:0f:3d:db: dd:92:06:69:e1:48:92:aa:ad:54:4a:fe:a2:33:1b:9e:60:e8: d9:56:e8:a4:fd:d8:9d:84:a3:51:0e:88:30:4d:48:e6:68:25: 49:18:57:aa:40:3e:a7:d4:29:47:bd:81:63:54:1c:45:66:10: 36:e9:7f:fc:5d:a4:bd:67:41:90:42:1b:f7:2e:a4:b2:7b:17: 1d:ec:60:ea:00:fd:93:9e:37:18:57:80:86:09:31:08:50:ca: 55:03:65:70:fe:4b:8c:b4:da:2f:5c:b7:15:4b:f8:6d:47:b9: 6e:b1:9e:cd:11:84:04:ef:88:ec:2d:ea:a3:e7:d7:a3:d7:66: f7:7c:86:1b:a0:8e:ea:6d:ba:6a:e4:d9:a8:9b:7f:c1:a3:3b: 67:d0:0a:17:04:92:c3:06:8f:fe:f0:6f:59:17:0b:e7:28:05: d5:77:7d:39:6a:38:d7:d0:91:7e:22:63:ab:bb:0d:eb:21:22: 14:1f:63:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqhSG2bmW2j6+RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDFiZTIyOWMtY2FkYy00ZTBlLWEwZTItOGI0OTc0MTRiMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTLC2vXCksBOO2f5pNz5GQOfwCzUAyrdGYzE Eg5DwN0ak28KdevSbIViWwoZkCz0gKc6pVeQMRZSj1XuJT4FCA/zUyULSLhVAwWU UJi9Kob38wNSow56dPXX/akcBRpHSnDA0K2XBbgSVUlQ/MwZbsuy6n2pXI1sm7f+ wZky94X+tEbN/1Cvofb8GA2nSW73esdKsbvczX0olQBCWSQCfw1ce7Vf6ef+kHXQ u05LaiReksYgZi52NutoCeRHyDcxT5qEUhtVRLSOacwPJ/5drT6DXxAXQkcci63t qialArZSbu2nDM8StItJJYR3QfWeknpqssWUwnOMwu9FRzMYvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOpjq0NKfTuYgQ0wOvxf2nxMc+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDk4NTdhOTAtZjQ5MC0z MWExLWE0YWYtMGQ5Njc4YTcwMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGTA+eUGbVPfvhea9ksS0PoJNqPSX0OLFQ2X6hM8kjko/yz64Uc+qJs 1ph8JhMNhEcylRry9UTyT5MFye/y/2NEryskZg89292SBmnhSJKqrVRK/qIzG55g 6NlW6KT92J2Eo1EOiDBNSOZoJUkYV6pAPqfUKUe9gWNUHEVmEDbpf/xdpL1nQZBC G/cupLJ7Fx3sYOoA/ZOeNxhXgIYJMQhQylUDZXD+S4y02i9ctxVL+G1HuW6xns0R hATviOwt6qPn16PXZvd8hhugjuptumrk2aibf8GjO2fQChcEksMGj/7wb1kXC+co BdV3fTlqONfQkX4iY6u7DeshIhQfY94= -----END CERTIFICATE-----Generated at Thu Mar 26 23:48:59 2026 by rpki-client