$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/517bda42-eedc-3ed5-9613-91a5b4f2f5b9.roa File: 517bda42-eedc-3ed5-9613-91a5b4f2f5b9.roa (raw, json) Hash identifier: nJgZIhztkt4MsuXt8hpCcRVoY5rEqlsGGlIZNttggb8= Subject key identifier: 1C:D1:BC:0F:E5:A4:76:FE:57:26:02:4F:E2:F9:43:9B:2C:91:E5:9D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D300A3D48C4E0ED443DF72A10 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/517bda42-eedc-3ed5-9613-91a5b4f2f5b9.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 19905 IP address blocks: 150.195.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:3d:48:c4:e0:ed:44:3d:f7:2a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=63bf6dbc-5a1c-42c6-8d71-f0a3dfdb2427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:f8:e5:3e:38:b0:e6:e3:8a:93:d3:c5:22: 21:b2:7e:77:65:2d:af:20:dc:d6:59:5e:7f:67:4f: 2e:4b:35:cc:c9:50:dc:43:ac:ac:0d:0c:57:3c:11: 8a:dd:c6:e5:bd:29:09:6b:60:34:92:ba:08:40:47: 7b:95:cb:c0:fd:f9:86:d6:61:41:eb:b1:02:02:46: 57:2e:9a:48:83:d4:30:f8:ef:68:d3:22:3c:cf:5b: ec:24:f2:70:2e:92:98:c2:17:07:75:a9:22:53:84: b8:23:16:47:65:c9:4e:64:f4:63:06:90:5f:d0:37: 56:05:2b:82:ce:30:71:d8:0b:23:d9:82:34:ee:5b: b9:7d:a4:05:45:b6:58:7a:17:a9:d2:da:b8:04:a3: b6:b5:a5:f4:de:34:67:c9:d5:f3:bc:74:7a:b4:0a: 48:c5:2e:d9:c0:c9:d2:95:64:dd:68:5f:35:a2:68: 17:f3:a3:4b:ac:a7:50:7f:fc:9b:e2:d9:bb:8d:76: c4:01:85:89:a0:bd:b8:92:18:b6:66:e2:72:16:dd: 26:29:a8:2e:40:a5:96:13:d3:01:98:59:41:1d:1f: 17:f8:1d:92:43:03:eb:6a:32:65:b4:e5:bf:88:a7: 5d:06:09:d9:83:af:ca:6b:6c:7f:0d:fb:17:b3:a0: a1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D1:BC:0F:E5:A4:76:FE:57:26:02:4F:E2:F9:43:9B:2C:91:E5:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/517bda42-eedc-3ed5-9613-91a5b4f2f5b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:05:8b:fd:84:a6:56:4d:f9:36:2f:a6:1b:02:f6:96:7a:d8: 6f:00:64:53:2d:1f:54:c8:36:5f:7a:bf:22:47:07:91:08:bc: 09:c9:1e:6c:ce:73:32:32:ad:e9:4c:9c:40:a7:db:48:7a:2b: cd:77:eb:00:15:eb:a7:b1:20:3d:38:91:9e:4d:7f:0c:eb:e0: 0e:d5:1b:25:22:dc:ae:24:19:76:df:b9:ee:86:35:8e:92:13: c4:8f:4b:30:f5:22:f0:5d:3c:00:cb:6c:5e:f5:3f:0b:50:bb: da:b4:b3:37:ba:cd:8a:15:dd:06:36:b1:c4:fe:b1:d4:99:a7: 00:98:d8:8a:f2:0e:22:9f:1f:cd:01:af:e3:81:13:3c:e4:93: 28:05:1b:40:ec:a9:bb:c3:dd:0d:47:4d:ea:c0:d1:db:b0:4f: 99:59:2d:7a:87:03:e8:f8:21:29:d7:23:28:0a:95:20:77:eb: 3f:e1:29:0e:35:07:81:82:52:7e:02:23:a3:fe:1f:49:62:db: 84:ad:95:0b:47:e2:14:27:d1:18:23:ca:cd:87:59:95:e4:f8: 98:20:38:35:bd:a7:a1:55:9a:64:75:c7:52:30:fa:ab:96:f7: 12:72:8b:96:15:dc:70:67:97:19:0e:9b:45:d9:9b:cb:8f:3c: 98:9e:d4:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCj1IxODtRD33KhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NjNiZjZkYmMtNWExYy00MmM2LThkNzEtZjBhM2RmZGIyNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCn45T44sObjipPTxSIhsn53ZS2vINzWWV5/ Z08uSzXMyVDcQ6ysDQxXPBGK3cblvSkJa2A0kroIQEd7lcvA/fmG1mFB67ECAkZX LppIg9Qw+O9o0yI8z1vsJPJwLpKYwhcHdakiU4S4IxZHZclOZPRjBpBf0DdWBSuC zjBx2Asj2YI07lu5faQFRbZYehep0tq4BKO2taX03jRnydXzvHR6tApIxS7ZwMnS lWTdaF81omgX86NLrKdQf/yb4tm7jXbEAYWJoL24khi2ZuJyFt0mKaguQKWWE9MB mFlBHR8X+B2SQwPrajJltOW/iKddBgnZg6/Ka2x/DfsXs6ChDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzRvA/lpHb+VyYCT+L5Q5sskeWdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTE3YmRhNDItZWVkYy0z ZWQ1LTk2MTMtOTFhNWI0ZjJmNWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHlsMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIFi/2EplZN+TYvphsC9pZ62G8AZFMtH1TINl96vyJHB5EIvAnJHmzO czIyrelMnECn20h6K8136wAV66exID04kZ5Nfwzr4A7VGyUi3K4kGXbfue6GNY6S E8SPSzD1IvBdPADLbF71PwtQu9q0sze6zYoV3QY2scT+sdSZpwCY2IryDiKfH80B r+OBEzzkkygFG0DsqbvD3Q1HTerA0duwT5lZLXqHA+j4ISnXIygKlSB36z/hKQ41 B4GCUn4CI6P+H0li24StlQtH4hQn0Rgjys2HWZXk+JggODW9p6FVmmR1x1Iw+quW 9xJyi5YV3HBnlxkOm0XZm8uPPJie1PI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:27 2026 by rpki-client