$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ba68b78-16a5-39ee-bfa9-0676306342f6.roa File: 5ba68b78-16a5-39ee-bfa9-0676306342f6.roa (raw, json) Hash identifier: usT+WexMP6txMQfd5nUGmOkP0sWFm1PukVsYkod3x6s= Subject key identifier: 2E:43:0C:BA:2A:B3:57:F7:09:CB:49:14:8A:74:7D:5B:FA:9A:73:41 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF7553F700DA6DDCB3A080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ba68b78-16a5-39ee-bfa9-0676306342f6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.29.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:75:53:f7:00:da:6d:dc:b3:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=25a49305-b910-4598-aaf8-d484af75d8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:76:0c:03:a1:71:f6:d6:22:d6:d6:c5:9a:75: 07:40:b9:ac:07:ec:88:cf:45:73:e0:04:b5:38:f8: 09:4f:cb:2c:0e:43:70:76:ef:30:30:75:4e:3c:63: bf:30:f8:43:ee:1a:f0:29:64:29:c8:1b:de:57:98: e7:08:b0:8a:d9:ee:3a:ef:67:ab:d6:f4:38:33:13: 88:70:b9:29:57:e1:5a:8a:0f:dd:04:b2:0c:89:49: cb:6a:cf:9a:77:d9:31:37:df:b1:bd:1a:d5:61:3b: 34:c7:21:c8:62:30:db:45:3c:e8:ac:59:e2:9f:7f: 77:90:2d:60:78:3b:67:13:fd:84:99:b1:fc:11:26: b0:12:a6:72:1b:76:5a:8e:bd:7d:b8:75:86:da:20: f9:65:14:7d:d3:f3:19:60:25:40:48:ae:15:b8:fd: 62:2a:9f:9a:38:26:48:22:b7:bc:4d:45:bc:9c:f1: 76:f5:08:28:67:51:de:3c:2b:eb:01:bc:d6:0d:16: ef:3b:9a:98:de:1f:7c:15:b4:3f:bb:21:86:7a:fa: 44:a5:81:f1:33:0c:a2:a0:c0:b7:ca:06:79:92:f5: c5:30:89:77:47:b5:5e:81:72:dc:0a:4b:1e:e1:c7: 4f:1d:b5:5b:c4:1e:0d:a1:b9:14:b0:09:c0:26:95: 5d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:43:0C:BA:2A:B3:57:F7:09:CB:49:14:8A:74:7D:5B:FA:9A:73:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ba68b78-16a5-39ee-bfa9-0676306342f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:61:be:46:d3:40:c2:33:ef:69:19:fa:6f:32:41:8a:28:26: 4e:64:6b:53:5b:ec:4d:e0:0a:c2:96:5f:6d:fa:58:97:b2:e1: bf:07:83:75:9f:e9:be:a5:d1:d4:57:aa:e3:6b:3f:ee:85:6a: 41:29:67:b6:85:e2:4c:0a:f4:e4:fe:5d:c6:ba:d1:d5:db:83: 56:04:8d:23:aa:b7:94:38:61:55:82:59:b9:b9:9f:1d:62:c3: e9:e8:4d:e0:f3:7c:f5:85:e1:3c:7b:26:cd:d4:70:48:15:95: 47:9d:7f:c2:f9:55:69:94:2c:b3:27:3a:f7:ae:6b:7b:18:4a: a8:3d:05:e3:f2:8e:47:bc:cb:af:13:84:35:7a:01:2f:71:a9: 39:b9:f4:b7:1a:a7:8d:d7:42:5b:ce:a8:6f:44:24:af:0f:b0: f5:ea:5e:5e:4e:59:4d:6b:bf:6c:ce:da:50:14:5a:7e:71:7f: de:07:4a:c4:c3:61:3c:ec:2d:52:97:e4:c6:d1:02:05:87:62: fb:3a:ef:22:3c:e9:c4:b7:44:1d:f2:5c:05:84:8a:0b:18:75: 1d:9d:fe:6d:6c:cf:f8:89:a1:7c:ac:11:3d:e3:31:14:05:4b: fc:4b:2d:30:93:a1:4f:26:03:0d:2d:e7:ed:dd:cb:9a:a6:48: 0f:b3:12:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k33VT9wDabdyzoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjVhNDkzMDUtYjkxMC00NTk4LWFhZjgtZDQ4NGFmNzVkOGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHYMA6Fx9tYi1tbFmnUHQLmsB+yIz0Vz4AS1 OPgJT8ssDkNwdu8wMHVOPGO/MPhD7hrwKWQpyBveV5jnCLCK2e4672er1vQ4MxOI cLkpV+Faig/dBLIMiUnLas+ad9kxN9+xvRrVYTs0xyHIYjDbRTzorFnin393kC1g eDtnE/2EmbH8ESawEqZyG3Zajr19uHWG2iD5ZRR90/MZYCVASK4VuP1iKp+aOCZI Ire8TUW8nPF29QgoZ1HePCvrAbzWDRbvO5qY3h98FbQ/uyGGevpEpYHxMwyioMC3 ygZ5kvXFMIl3R7VegXLcCkse4cdPHbVbxB4NobkUsAnAJpVd5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5DDLoqs1f3CctJFIp0fVv6mnNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWJhNjhiNzgtMTZhNS0z OWVlLWJmYTktMDY3NjMwNjM0MmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACphvkbTQMIz72kZ+m8yQYooJk5ka1Nb7E3gCsKWX236WJey4b8Hg3Wf 6b6l0dRXquNrP+6FakEpZ7aF4kwK9OT+Xca60dXbg1YEjSOqt5Q4YVWCWbm5nx1i w+noTeDzfPWF4Tx7Js3UcEgVlUedf8L5VWmULLMnOveua3sYSqg9BePyjke8y68T hDV6AS9xqTm59Lcap43XQlvOqG9EJK8PsPXqXl5OWU1rv2zO2lAUWn5xf94HSsTD YTzsLVKX5MbRAgWHYvs67yI86cS3RB3yXAWEigsYdR2d/m1sz/iJoXysET3jMRQF S/xLLTCToU8mAw0t5+3dy5qmSA+zEs8= -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:43 2026 by rpki-client