$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d90f432-9610-3c02-96e8-89b9f2511ca9.roa File: 5d90f432-9610-3c02-96e8-89b9f2511ca9.roa (raw, json) Hash identifier: TIVJudh/JIU37PpivOOjCF8ZpG4Uq3lwLmGSDbkjDqI= Subject key identifier: 17:9E:4E:16:49:EE:52:D1:30:84:15:1D:D7:FB:91:85:35:DB:EB:A4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D386A2D40B091CF463D9C1D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d90f432-9610-3c02-96e8-89b9f2511ca9.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 30036 IP address blocks: 173.29.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:2d:40:b0:91:cf:46:3d:9c:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=423b0577-88d2-4db7-b171-74ce901dfb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e9:73:68:ea:a2:4a:2f:0c:a0:ce:4b:c1:a4: 21:66:96:97:f5:4a:3d:ad:81:ee:71:5c:ac:ba:83: 39:4a:b6:4e:b7:48:b9:b4:2e:79:1c:f9:d2:e1:d6: 9f:7b:ee:fc:ca:ae:3a:58:4c:d2:a1:e0:ca:27:8d: 50:d5:18:f4:b8:b8:07:b5:47:70:61:98:b3:ec:b5: f0:08:e6:0e:e4:59:33:52:3c:bd:ac:e3:3d:94:50: c8:30:e2:f5:75:48:59:92:62:c2:f4:59:bc:6f:af: 96:b2:ef:02:42:43:d6:58:42:28:3f:24:62:75:24: 65:61:e1:7d:b4:8a:50:b8:b6:ca:2b:85:05:6b:1b: 31:ba:9c:e1:35:68:84:33:57:12:ab:98:9b:b7:4a: da:53:f5:e7:37:91:94:c8:c9:86:05:08:22:b0:3d: 39:f9:43:fa:d8:f8:82:25:f0:d8:0b:99:71:7c:91: af:2c:19:af:fe:d5:b8:68:45:ad:bb:19:4d:23:4d: 5e:91:a6:16:9e:de:b5:76:77:ac:bc:00:5f:5d:1d: df:c1:04:57:cc:5f:07:a5:4e:2c:a9:25:44:af:af: 15:d6:43:a0:87:b6:5c:ce:55:aa:25:47:bb:47:f0: f2:67:0d:c0:79:d2:36:61:74:f3:78:ba:a0:44:10: 84:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9E:4E:16:49:EE:52:D1:30:84:15:1D:D7:FB:91:85:35:DB:EB:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5d90f432-9610-3c02-96e8-89b9f2511ca9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:02:34:e5:46:10:40:80:5d:6e:81:b3:4c:8c:10:2b:59:2d: c7:a6:e2:ab:e0:5a:66:2a:45:80:57:cd:7f:ef:f5:d0:c0:cb: 2e:2e:06:a7:44:7e:f6:90:1b:28:d3:ef:06:68:b8:58:8b:a1: 47:30:75:ae:40:81:11:c7:56:35:e6:82:7e:94:32:9a:f1:9e: fd:db:39:8d:89:d3:0e:38:0d:86:6f:05:12:42:14:be:08:cd: 70:83:4c:95:4b:6e:29:ed:88:d5:69:7c:fb:bf:82:dd:cc:36: cb:6d:36:a6:6b:3d:24:b0:52:55:d0:6d:fc:11:f4:1c:c3:cc: ad:a1:b8:45:8f:da:f9:86:99:cf:c5:ba:11:21:1c:0a:bf:8d: b8:b1:88:d1:a1:2f:51:d5:13:bc:7a:7b:85:db:08:42:a1:f8: 56:cd:ae:83:36:33:4f:25:3e:26:c5:d8:9c:c2:b6:bc:df:b7: 90:53:38:a8:7d:3f:19:17:6a:f0:de:1e:11:6f:40:2b:1d:e5: 8d:d8:37:19:dd:53:62:f8:6d:54:f9:23:e2:2b:90:5a:16:7c: ac:1d:fd:e9:9d:1f:24:35:d8:ca:30:82:da:83:f1:92:a6:9e: 0f:02:ec:0c:0d:63:0b:83:40:cb:f8:5f:2c:d1:15:3e:c2:3c: 48:83:7b:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ai1AsJHPRj2cHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NDIzYjA1NzctODhkMi00ZGI3LWIxNzEtNzRjZTkwMWRmYjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjelzaOqiSi8MoM5LwaQhZpaX9Uo9rYHucVys uoM5SrZOt0i5tC55HPnS4dafe+78yq46WEzSoeDKJ41Q1Rj0uLgHtUdwYZiz7LXw COYO5FkzUjy9rOM9lFDIMOL1dUhZkmLC9Fm8b6+Wsu8CQkPWWEIoPyRidSRlYeF9 tIpQuLbKK4UFaxsxupzhNWiEM1cSq5ibt0raU/XnN5GUyMmGBQgisD05+UP62PiC JfDYC5lxfJGvLBmv/tW4aEWtuxlNI01ekaYWnt61dnesvABfXR3fwQRXzF8HpU4s qSVEr68V1kOgh7ZczlWqJUe7R/DyZw3AedI2YXTzeLqgRBCEbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeeThZJ7lLRMIQVHdf7kYU12+ukMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWQ5MGY0MzItOTYxMC0z YzAyLTk2ZTgtODliOWYyNTExY2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEACNOVGEECAXW6Bs0yMECtZLcem4qvgWmYqRYBXzX/v9dDAyy4uBqdE fvaQGyjT7wZouFiLoUcwda5AgRHHVjXmgn6UMprxnv3bOY2J0w44DYZvBRJCFL4I zXCDTJVLbintiNVpfPu/gt3MNsttNqZrPSSwUlXQbfwR9BzDzK2huEWP2vmGmc/F uhEhHAq/jbixiNGhL1HVE7x6e4XbCEKh+FbNroM2M08lPibF2JzCtrzft5BTOKh9 PxkXavDeHhFvQCsd5Y3YNxndU2L4bVT5I+IrkFoWfKwd/emdHyQ12MowgtqD8ZKm ng8C7AwNYwuDQMv4XyzRFT7CPEiDexk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:20:24 2026 by rpki-client