$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e721fe5-4c34-3ddd-a53e-09283376c288.roa File: 5e721fe5-4c34-3ddd-a53e-09283376c288.roa (raw, json) Hash identifier: DunJS5U4DGq89lWnEJ9qAF3x3RspPxn/1rFhdbzqf10= Subject key identifier: 71:70:42:B3:75:BE:D2:C8:49:73:55:20:81:A9:68:04:F6:4A:69:D7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AA176BDCDB268088B5FAC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e721fe5-4c34-3ddd-a53e-09283376c288.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.19.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:17:6b:dc:db:26:80:88:b5:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=0444608e-89c1-4230-807f-86a05e9d7612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d6:91:b6:2b:e9:09:fc:bb:ff:7b:a9:53:70: 8d:ba:47:3c:ec:3c:d6:6c:60:89:57:48:bd:91:69: 13:ce:9f:1f:cb:92:1a:27:7b:66:69:8b:c9:b2:22: f4:28:a2:78:5d:10:b4:d4:47:fe:dd:0d:ec:0c:94: 0c:f6:5e:9c:2c:e7:7f:d8:d7:ba:72:26:46:87:15: e0:76:bd:d6:8a:50:ca:89:32:32:0f:21:59:99:36: 18:5f:e5:d8:5a:20:e7:e8:34:2e:a7:80:c2:c8:f9: 74:c1:d0:93:58:c1:f5:96:3e:da:6b:02:fd:d4:b4: a0:5f:ed:e0:9b:c2:97:c8:1c:c1:01:16:32:e1:b9: 7d:44:08:00:cb:bc:d1:b2:06:d4:75:46:31:a2:08: 11:8d:7a:02:23:bb:cf:f3:0f:0e:31:c0:e0:89:04: 1d:19:75:d6:e0:f0:f5:86:1f:8a:27:23:97:51:0b: c4:5f:ff:47:fd:38:9a:da:18:9a:96:5e:2f:2b:41: 3c:e6:a7:4b:7d:b3:e9:cb:a1:49:25:ae:19:8a:94: 27:1b:3d:46:3b:d1:8e:e3:98:7e:09:18:67:e5:51: 64:cd:51:0b:ab:ec:7d:94:65:16:94:c2:e1:ef:cf: e9:76:00:61:67:83:0a:c9:b2:94:0b:30:48:66:c3: 81:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:70:42:B3:75:BE:D2:C8:49:73:55:20:81:A9:68:04:F6:4A:69:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5e721fe5-4c34-3ddd-a53e-09283376c288.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:e9:31:dd:6c:fc:13:8c:36:fe:30:10:fd:6b:f1:56:b5:39: b3:e0:74:7e:5d:0b:03:21:f7:05:15:a6:0c:d0:60:c3:8f:63: 05:2e:f2:96:a9:77:dd:38:f4:94:80:d0:45:3c:88:7f:7d:a9: 68:1c:21:8b:1c:98:b2:c2:2d:24:9f:1e:bb:bd:9c:94:58:d2: c9:69:25:e2:50:18:24:42:af:e1:e4:ad:0e:fc:07:20:e7:13: da:b4:b0:5f:44:33:a0:ac:f9:23:5c:86:08:69:22:fd:57:fe: 91:0a:61:d8:fa:26:54:36:2d:78:b1:bc:ff:77:c3:2f:95:be: 7e:2b:12:b4:11:c6:63:6b:53:da:df:e2:aa:ed:ac:96:ef:1f: ae:59:ff:5c:28:de:63:24:aa:6f:61:72:e2:da:af:bc:92:59: f6:c6:c0:e6:bd:fb:44:4a:fa:de:01:51:7a:ed:64:fd:85:20: 01:57:d7:bd:15:69:77:83:4c:bd:64:bb:89:65:51:d4:33:4b: 05:8d:16:bf:63:37:fe:1c:25:3f:34:23:bc:a6:5d:44:43:5d: be:90:0e:80:10:34:14:17:2d:41:48:4c:5f:28:4d:61:a0:c8: 47:47:81:ab:01:2f:63:33:55:c0:76:71:d8:37:ec:1a:4e:13: 65:7c:d3:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqhdr3NsmgIi1+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MDQ0NDYwOGUtODljMS00MjMwLTgwN2YtODZhMDVlOWQ3NjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNaRtivpCfy7/3upU3CNukc87DzWbGCJV0i9 kWkTzp8fy5IaJ3tmaYvJsiL0KKJ4XRC01Ef+3Q3sDJQM9l6cLOd/2Ne6ciZGhxXg dr3WilDKiTIyDyFZmTYYX+XYWiDn6DQup4DCyPl0wdCTWMH1lj7aawL91LSgX+3g m8KXyBzBARYy4bl9RAgAy7zRsgbUdUYxoggRjXoCI7vP8w8OMcDgiQQdGXXW4PD1 hh+KJyOXUQvEX/9H/Tia2hiall4vK0E85qdLfbPpy6FJJa4ZipQnGz1GO9GO45h+ CRhn5VFkzVELq+x9lGUWlMLh78/pdgBhZ4MKybKUCzBIZsOBbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFwQrN1vtLISXNVIIGpaAT2SmnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWU3MjFmZTUtNGMzNC0z ZGRkLWE1M2UtMDkyODMzNzZjMjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArROEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7pMd1s/BOMNv4wEP1r8Va1ObPgdH5dCwMh9wUVpgzQYMOPYwUu8pap d9049JSA0EU8iH99qWgcIYscmLLCLSSfHru9nJRY0slpJeJQGCRCr+HkrQ78ByDn E9q0sF9EM6Cs+SNchghpIv1X/pEKYdj6JlQ2LXixvP93wy+Vvn4rErQRxmNrU9rf 4qrtrJbvH65Z/1wo3mMkqm9hcuLar7ySWfbGwOa9+0RK+t4BUXrtZP2FIAFX170V aXeDTL1ku4llUdQzSwWNFr9jN/4cJT80I7ymXURDXb6QDoAQNBQXLUFITF8oTWGg yEdHgasBL2MzVcB2cdg37BpOE2V80+Q= -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:55 2026 by rpki-client