$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7586905b-1c99-3971-83ca-b8a715e63a14.roa File: 7586905b-1c99-3971-83ca-b8a715e63a14.roa (raw, json) Hash identifier: eRybwXfycC8mDusCNikkmrrItagoWL+oSLwMuKtz0rA= Subject key identifier: 73:DB:63:76:69:24:5D:6A:CB:3D:0A:74:BC:37:77:CD:A7:76:AF:C7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E10E1300F3DBEF6CA4D900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7586905b-1c99-3971-83ca-b8a715e63a14.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.29.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:0e:13:00:f3:db:ef:6c:a4:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4631a5e6-1322-40aa-b0c8-bcbd26b36e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f4:b5:38:87:2d:25:00:d5:ee:35:e6:ff:0c: ae:e9:2b:12:2b:c8:3e:58:e7:34:58:45:64:46:ac: 64:7c:1d:10:05:00:d9:69:0e:de:9c:76:26:92:f5: 1b:c3:da:7d:b1:a5:c4:cd:d1:7e:16:82:13:0e:6f: a7:f4:c0:dc:e7:95:84:ee:84:6b:e2:23:f5:26:66: 8e:0e:42:21:e8:c7:ec:1e:a8:9c:40:54:2e:ff:ff: 5e:30:6d:6c:2e:be:90:72:82:2c:b4:42:ed:93:b7: 7a:cc:1d:1c:6e:93:70:a7:6b:31:47:17:64:54:9b: c1:35:8a:01:0f:b8:64:04:51:cb:32:f6:c8:ba:01: 35:a0:31:e6:97:4f:d8:71:4c:1f:e1:36:b0:3a:4e: 5c:cd:e8:26:dd:ea:2d:a0:9d:b0:39:62:d3:f7:8e: cc:4e:d5:16:2d:a7:64:c7:92:91:c3:82:b9:97:60: e7:f9:bf:3b:2f:e4:42:33:6b:c8:b6:06:49:f4:02: 14:81:17:db:bf:70:67:6b:c5:0b:84:7e:60:20:d1: 74:f6:6b:c2:09:23:5f:a0:f0:e3:f7:1c:85:85:30: cc:c4:03:a0:24:80:01:1a:89:0d:ae:50:8f:97:55: 73:b1:43:4e:5a:72:aa:a1:77:22:4e:f7:ef:63:82: d6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DB:63:76:69:24:5D:6A:CB:3D:0A:74:BC:37:77:CD:A7:76:AF:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7586905b-1c99-3971-83ca-b8a715e63a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:89:7f:51:50:f2:3d:04:53:8e:3e:0e:7e:2f:ac:f8:0f:c2: 49:aa:d8:3f:34:f6:07:3a:c6:fc:72:7f:59:d2:d1:de:cd:99: 5d:b3:56:10:86:41:e5:a3:fd:2d:d7:34:c8:ca:29:50:81:1d: da:2c:73:0c:a0:ef:8d:81:e9:35:ed:44:d2:8b:f8:64:9d:b2: 3a:77:19:30:b4:4b:53:3b:8d:bc:4b:82:e9:9e:d1:20:6e:1c: 6f:55:43:00:48:aa:d8:9a:59:2c:8f:6c:88:b9:33:bf:9a:7c: 30:2c:2a:6c:06:80:76:d5:7b:b4:24:cf:d4:32:75:f3:f1:2c: 23:38:8e:ab:f5:a7:f4:9f:98:53:c9:9c:c3:58:e2:61:ab:69: 75:7f:f1:34:ec:13:fe:28:2a:72:f7:a9:ed:fb:67:a9:74:97: 9e:16:9d:af:d7:99:3b:40:3d:97:aa:ca:91:bf:6b:f5:33:a9: 32:08:f9:17:26:d4:43:74:01:31:75:8f:31:28:f3:99:ef:e0: 69:2e:42:91:fd:c7:e1:73:4d:c8:a8:38:dc:77:ec:ac:f5:0c: 8e:a3:1d:02:e7:15:37:88:a0:4f:8a:94:d9:44:1b:9d:e5:98: a9:05:1a:86:94:1a:98:88:3e:1e:09:af:7f:d3:80:74:70:b0: 99:23:a0:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Q4TAPPb72yk2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDYzMWE1ZTYtMTMyMi00MGFhLWIwYzgtYmNiZDI2YjM2ZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfS1OIctJQDV7jXm/wyu6SsSK8g+WOc0WEVk RqxkfB0QBQDZaQ7enHYmkvUbw9p9saXEzdF+FoITDm+n9MDc55WE7oRr4iP1JmaO DkIh6MfsHqicQFQu//9eMG1sLr6QcoIstELtk7d6zB0cbpNwp2sxRxdkVJvBNYoB D7hkBFHLMvbIugE1oDHml0/YcUwf4TawOk5czegm3eotoJ2wOWLT947MTtUWLadk x5KRw4K5l2Dn+b87L+RCM2vItgZJ9AIUgRfbv3Bna8ULhH5gINF09mvCCSNfoPDj 9xyFhTDMxAOgJIABGokNrlCPl1VzsUNOWnKqoXciTvfvY4LWKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPbY3ZpJF1qyz0KdLw3d82ndq/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzU4NjkwNWItMWM5OS0z OTcxLTgzY2EtYjhhNzE1ZTYzYTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR3CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaJf1FQ8j0EU44+Dn4vrPgPwkmq2D809gc6xvxyf1nS0d7NmV2zVhCG QeWj/S3XNMjKKVCBHdoscwyg742B6TXtRNKL+GSdsjp3GTC0S1M7jbxLgume0SBu HG9VQwBIqtiaWSyPbIi5M7+afDAsKmwGgHbVe7Qkz9QydfPxLCM4jqv1p/SfmFPJ nMNY4mGraXV/8TTsE/4oKnL3qe37Z6l0l54Wna/XmTtAPZeqypG/a/UzqTII+Rcm 1EN0ATF1jzEo85nv4GkuQpH9x+FzTcioONx37Kz1DI6jHQLnFTeIoE+KlNlEG53l mKkFGoaUGpiIPh4Jr3/TgHRwsJkjoKU= -----END CERTIFICATE-----Generated at Thu Mar 26 16:56:26 2026 by rpki-client