$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b1d8b76-171d-3fd6-bc57-727c44a9e495.roa File: 4b1d8b76-171d-3fd6-bc57-727c44a9e495.roa (raw, json) Hash identifier: P3F93gnZLf/4Jn8Qqxwf8y+/YbUXR1XuMDFlnlDWLx0= Subject key identifier: 25:27:30:87:43:F2:F4:E8:92:91:F7:26:D0:12:1C:D5:F5:C5:D4:7A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2644BFE034CE746621983500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b1d8b76-171d-3fd6-bc57-727c44a9e495.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 30036 IP address blocks: 173.22.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:bf:e0:34:ce:74:66:21:98:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=eba32872-d316-46b1-b334-0b6a5029f072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:83:4f:d7:72:6e:09:38:ec:e5:d0:99:dd:4e: ed:54:e3:dd:ac:66:2a:eb:d7:27:31:5e:ba:11:0a: 24:af:e4:40:9c:e8:08:be:c0:16:ad:2e:be:d7:54: 73:0f:fb:36:29:99:c4:e6:f9:bd:81:a6:a4:ea:d8: 30:bf:5a:7f:8e:f2:9e:75:59:32:cc:0e:57:1c:26: 5f:80:f2:5b:c0:7e:06:56:6f:1a:cc:a7:1b:a1:2e: 5e:dc:a3:55:66:c8:f6:75:04:ad:0a:dc:22:54:78: 32:ba:1b:95:b2:1b:18:2a:4b:16:1f:43:23:08:99: d9:71:75:d9:e1:dc:ac:4d:2e:35:44:ac:60:fd:27: e9:4a:28:15:f0:0b:33:18:84:b9:8e:32:6d:f9:69: 3f:e8:b1:b3:e4:0a:f3:b2:33:e6:e3:ab:af:a8:46: e6:0f:42:ae:cc:d7:a4:35:4c:04:75:30:a6:ee:5f: de:2c:33:10:a5:e9:6f:54:f3:ca:8b:54:bf:be:f2: 82:3c:c3:25:fc:c2:be:8e:15:ec:c6:72:11:d2:00: ef:ef:fa:01:a8:27:77:02:10:3a:87:be:b4:fd:e6: 5c:2f:00:0a:04:2e:5f:59:ac:29:13:41:06:05:ca: 91:f2:1c:c1:91:73:0c:db:93:08:41:af:53:63:c3: 6e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:27:30:87:43:F2:F4:E8:92:91:F7:26:D0:12:1C:D5:F5:C5:D4:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4b1d8b76-171d-3fd6-bc57-727c44a9e495.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:06:b6:2e:9e:fb:83:02:c4:71:74:65:57:6e:f4:34:e0:cc: 26:2a:24:39:f0:b0:cd:12:14:7d:22:d1:c5:57:1e:db:74:ce: 7f:08:43:34:f8:07:cf:96:fe:4d:f1:69:dd:81:42:f6:c8:e0: cb:94:c1:68:28:56:63:f9:b5:db:25:65:19:5f:88:98:fc:32: 19:fc:10:23:38:ad:d1:05:2f:d5:92:52:1a:4f:2a:38:69:97: b9:51:30:f6:9d:78:36:e3:30:a4:8b:2f:7c:a3:68:06:c5:ec: d2:3c:79:52:c4:84:e1:48:48:a2:6a:7c:79:4c:b7:08:41:51: 9f:fd:86:ca:ce:7f:6e:5e:fc:82:71:9a:a4:48:86:d9:dc:45: 4f:d9:13:73:de:aa:1e:26:95:25:fd:95:9f:e2:ef:95:8c:d5: 81:ee:92:03:99:73:a6:b1:41:f1:5c:05:08:57:64:31:34:2c: e9:b8:27:12:d1:a3:91:1b:99:a9:58:59:a0:ab:c7:44:ab:bf: 3f:21:bc:eb:75:2b:55:9b:57:9c:24:be:75:44:e0:50:dd:a9: ad:9e:65:bd:45:10:47:5c:5d:01:68:11:c6:72:60:34:88:36: a9:66:07:1d:96:b6:44:42:90:1a:ef:c3:5b:62:21:4e:dc:16: 9e:c3:ef:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRL/gNM50ZiGYNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk ZWJhMzI4NzItZDMxNi00NmIxLWIzMzQtMGI2YTUwMjlmMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgINP13JuCTjs5dCZ3U7tVOPdrGYq69cnMV66 EQokr+RAnOgIvsAWrS6+11RzD/s2KZnE5vm9gaak6tgwv1p/jvKedVkyzA5XHCZf gPJbwH4GVm8azKcboS5e3KNVZsj2dQStCtwiVHgyuhuVshsYKksWH0MjCJnZcXXZ 4dysTS41RKxg/SfpSigV8AszGIS5jjJt+Wk/6LGz5ArzsjPm46uvqEbmD0KuzNek NUwEdTCm7l/eLDMQpelvVPPKi1S/vvKCPMMl/MK+jhXsxnIR0gDv7/oBqCd3AhA6 h760/eZcLwAKBC5fWawpE0EGBcqR8hzBkXMM25MIQa9TY8Nu2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUnMIdD8vTokpH3JtASHNX1xdR6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGIxZDhiNzYtMTcxZC0z ZmQ2LWJjNTctNzI3YzQ0YTllNDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRZEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIGti6e+4MCxHF0ZVdu9DTgzCYqJDnwsM0SFH0i0cVXHtt0zn8IQzT4 B8+W/k3xad2BQvbI4MuUwWgoVmP5tdslZRlfiJj8Mhn8ECM4rdEFL9WSUhpPKjhp l7lRMPadeDbjMKSLL3yjaAbF7NI8eVLEhOFISKJqfHlMtwhBUZ/9hsrOf25e/IJx mqRIhtncRU/ZE3Peqh4mlSX9lZ/i75WM1YHukgOZc6axQfFcBQhXZDE0LOm4JxLR o5EbmalYWaCrx0Srvz8hvOt1K1WbV5wkvnVE4FDdqa2eZb1FEEdcXQFoEcZyYDSI NqlmBx2WtkRCkBrvw1tiIU7cFp7D7xY= -----END CERTIFICATE-----Generated at Thu Mar 26 12:27:11 2026 by rpki-client