$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/63ccb013-c7db-3cad-b94b-e530462c4bb4.roa File: 63ccb013-c7db-3cad-b94b-e530462c4bb4.roa (raw, json) Hash identifier: SJaSa07atIX3OdT0kVHOLwgW1QbV3YB9kno2WKtPbWc= Subject key identifier: DB:C3:33:52:E7:D8:66:C7:39:65:C1:61:EB:0F:1E:13:6E:FC:62:14 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF843067C7898F6E817240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/63ccb013-c7db-3cad-b94b-e530462c4bb4.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.17.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:84:30:67:c7:89:8f:6e:81:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=09ed77ea-ec56-4678-b2a1-430a3e3c6871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:d0:5e:5c:56:72:01:12:ae:01:03:8e:5a: 3d:cd:e8:ec:5e:1e:34:13:08:a9:a6:7a:40:23:21: 52:5c:fc:40:4a:93:fb:19:50:08:65:5b:29:aa:6c: a1:5e:5c:13:3f:5e:43:cf:09:fa:b9:40:84:cf:98: e3:69:f8:72:e5:65:1b:23:ed:2b:45:dd:d0:f6:5b: 97:18:30:81:8a:09:22:7f:4e:c2:9d:8a:c0:ea:65: cd:db:b5:15:56:32:47:1d:43:cd:48:cb:ea:b1:14: fc:36:73:88:ec:cf:dd:34:72:be:b7:ad:d6:7d:53: 75:17:17:d2:82:26:05:25:7c:bb:4a:1a:3b:7c:6c: bb:94:36:ef:34:55:2d:c4:f9:f0:2f:5c:ff:e5:f7: e4:3a:51:4c:13:b4:8d:22:77:95:9a:98:00:9f:50: 0b:37:36:97:4f:37:ed:dd:db:fa:27:38:c0:31:34: 5f:bb:41:c5:c8:9a:4d:be:25:09:a7:d8:e7:c3:41: a0:cb:57:60:ec:49:b4:da:7a:e6:81:ff:78:1b:e1: df:9a:6c:22:88:ee:8e:51:5d:51:9a:d7:7c:71:68: 34:f5:f2:74:74:73:ce:0f:19:be:b9:74:f6:4c:d8: 6b:37:a3:54:f1:5b:50:e8:0d:7e:88:29:2e:c8:fd: 09:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C3:33:52:E7:D8:66:C7:39:65:C1:61:EB:0F:1E:13:6E:FC:62:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/63ccb013-c7db-3cad-b94b-e530462c4bb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:79:ca:50:eb:eb:2f:9b:e2:38:49:5c:9f:ff:6f:ad:de:fa: 77:4d:00:1e:e1:15:09:10:06:8a:98:be:2a:66:7d:1e:86:b4: 73:4c:a3:1f:98:88:ce:ca:c6:ba:d2:ca:c4:67:fa:ff:3e:d1: fa:90:b0:0e:3e:8c:e3:c4:b5:4b:74:a1:3e:ef:20:d5:bb:9a: 5c:38:f8:06:ea:16:39:46:bf:99:a0:51:6f:05:a4:4d:8d:a7: 82:e7:6a:8f:02:ec:2b:73:5b:b5:70:7b:da:d7:f2:d2:16:e1: 3e:6d:01:cc:91:50:df:e0:6f:32:71:b7:81:8a:ec:e4:83:bc: 01:7e:cc:77:e7:5d:a8:b6:ed:07:90:b5:34:70:1d:d6:b0:a1: 94:81:f9:b7:37:5c:54:0c:9b:7e:b0:74:10:5e:63:85:bb:3a: c7:4a:79:b8:6a:5a:66:fa:cb:ec:4a:48:47:93:ff:b1:a9:39: b5:c9:55:43:bb:c6:a6:a2:00:72:f5:78:f0:9c:48:93:14:8d: 83:85:6b:47:5d:f3:cf:e4:f1:75:80:a4:4c:48:f0:ef:60:c1: a8:e9:f6:cd:a4:8e:c3:47:ce:a8:5c:fb:ca:83:ca:38:d4:d0: 6e:c3:0f:c3:21:f0:ad:24:5c:e0:e9:15:e2:60:16:ea:e6:18: d4:ac:6e:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k34QwZ8eJj26BckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDllZDc3ZWEtZWM1Ni00Njc4LWIyYTEtNDMwYTNlM2M2ODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniXQXlxWcgESrgEDjlo9zejsXh40EwippnpA IyFSXPxASpP7GVAIZVspqmyhXlwTP15Dzwn6uUCEz5jjafhy5WUbI+0rRd3Q9luX GDCBigkif07CnYrA6mXN27UVVjJHHUPNSMvqsRT8NnOI7M/dNHK+t63WfVN1FxfS giYFJXy7Sho7fGy7lDbvNFUtxPnwL1z/5ffkOlFME7SNIneVmpgAn1ALNzaXTzft 3dv6JzjAMTRfu0HFyJpNviUJp9jnw0Ggy1dg7Em02nrmgf94G+HfmmwiiO6OUV1R mtd8cWg09fJ0dHPODxm+uXT2TNhrN6NU8VtQ6A1+iCkuyP0JMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvDM1Ln2GbHOWXBYesPHhNu/GIUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjNjY2IwMTMtYzdkYi0z Y2FkLWI5NGItZTUzMDQ2MmM0YmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF5ylDr6y+b4jhJXJ//b63e+ndNAB7hFQkQBoqYvipmfR6GtHNMox+Y iM7KxrrSysRn+v8+0fqQsA4+jOPEtUt0oT7vINW7mlw4+AbqFjlGv5mgUW8FpE2N p4Lnao8C7CtzW7Vwe9rX8tIW4T5tAcyRUN/gbzJxt4GK7OSDvAF+zHfnXai27QeQ tTRwHdawoZSB+bc3XFQMm36wdBBeY4W7OsdKebhqWmb6y+xKSEeT/7GpObXJVUO7 xqaiAHL1ePCcSJMUjYOFa0dd88/k8XWApExI8O9gwajp9s2kjsNHzqhc+8qDyjjU 0G7DD8Mh8K0kXODpFeJgFurmGNSsboY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:55 2026 by rpki-client