$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/75feb2b8-7c22-30f8-8b0b-38844211bc31.roa File: 75feb2b8-7c22-30f8-8b0b-38844211bc31.roa (raw, json) Hash identifier: QkvN0rcTO9AKFCRz2VdvxZUnRyOUM2fO7fi2fre27j8= Subject key identifier: D1:C3:25:74:49:DF:76:93:E5:EA:6D:07:38:2D:1B:2F:88:0D:44:71 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E1212DDE36A4F7F3F02D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/75feb2b8-7c22-30f8-8b0b-38844211bc31.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.19.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:21:2d:de:36:a4:f7:f3:f0:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ea7b1771-3998-4afb-ae68-6481f47f21f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a9:df:35:c3:7b:0a:f1:55:3f:bc:44:e7:51: 97:ce:59:cd:44:86:08:c0:23:b2:37:fa:42:d9:f1: 92:a7:eb:09:75:52:37:0f:40:aa:35:8c:a2:ac:fe: ee:ea:22:32:ea:18:40:8a:45:ef:bb:d7:f8:f0:32: 53:c0:94:94:87:56:c6:24:a6:7b:36:89:fc:c4:48: a8:bf:e2:00:ee:0c:d0:c0:0f:1d:9b:29:b1:2e:66: e9:f1:54:ac:0d:3a:eb:91:07:70:09:ad:ba:8b:02: 7c:48:6b:0a:c3:80:30:21:f1:89:6c:ea:5d:6c:84: 00:3a:4f:e4:3f:44:4d:84:5c:19:2e:b6:64:e1:fb: 25:e4:71:c3:95:6c:95:fa:1c:89:ed:e3:07:c6:d6: 54:40:54:b2:77:bd:8d:e4:54:bd:40:de:17:86:87: 85:e6:8a:4c:14:8e:5b:bd:32:df:2b:25:9c:ee:28: ff:84:9b:9d:b5:a6:aa:36:79:6a:ea:6d:3d:9f:3a: 08:cf:5c:dd:c0:f8:a3:ce:71:5e:ea:77:c2:c4:ec: 4a:ff:da:0f:26:30:36:61:b3:dd:b9:e8:3e:c9:33: c2:fa:88:ae:cc:3c:64:52:d2:ed:79:b7:f3:17:d0: 14:72:04:e8:2a:c4:f6:23:af:b9:44:46:df:46:72: ab:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C3:25:74:49:DF:76:93:E5:EA:6D:07:38:2D:1B:2F:88:0D:44:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/75feb2b8-7c22-30f8-8b0b-38844211bc31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ea:b7:88:40:36:07:60:71:56:8f:4f:71:31:b2:44:e2:4e: 16:52:37:cb:93:99:3b:15:fa:e5:09:a5:44:2c:5a:c0:38:1c: 98:84:79:15:65:d5:86:1a:89:f5:52:d2:79:ec:0c:1d:eb:a6: e6:48:52:60:ae:e6:24:35:c4:e7:90:91:a8:9f:8c:68:fb:13: 4a:12:8b:b6:55:62:09:0c:93:7e:99:26:e1:56:0a:ff:64:9a: 6a:a5:4b:d6:1a:04:2c:f5:6c:cc:48:e8:3c:48:0a:be:13:cf: 2c:e4:a4:1b:a9:75:f7:90:cc:12:a1:18:ec:f3:bc:05:90:57: e1:e0:39:89:44:c8:c9:4c:d4:90:9d:9d:9d:0c:cd:b8:bc:c3: 06:72:39:59:3d:99:b7:66:8f:7e:09:a0:cf:c5:7a:06:1c:48: 99:23:4f:1c:61:df:fb:79:24:32:47:4b:04:09:51:bb:72:7b: 22:95:1c:b8:68:a0:85:d3:45:90:0c:2b:51:36:55:b2:17:3b: f4:c8:d1:c1:a3:b3:3f:f1:56:61:a4:78:9e:e5:46:4b:07:1e: a3:47:04:19:11:d4:a2:d7:f5:e2:58:be:b8:c6:b7:0a:38:6a: 46:42:5f:da:93:bb:8d:cb:24:1a:3d:71:24:4d:5e:22:39:c0: 4b:27:3b:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4SEt3jak9/PwLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZWE3YjE3NzEtMzk5OC00YWZiLWFlNjgtNjQ4MWY0N2YyMWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6nfNcN7CvFVP7xE51GXzlnNRIYIwCOyN/pC 2fGSp+sJdVI3D0CqNYyirP7u6iIy6hhAikXvu9f48DJTwJSUh1bGJKZ7Non8xEio v+IA7gzQwA8dmymxLmbp8VSsDTrrkQdwCa26iwJ8SGsKw4AwIfGJbOpdbIQAOk/k P0RNhFwZLrZk4fsl5HHDlWyV+hyJ7eMHxtZUQFSyd72N5FS9QN4XhoeF5opMFI5b vTLfKyWc7ij/hJudtaaqNnlq6m09nzoIz1zdwPijznFe6nfCxOxK/9oPJjA2YbPd ueg+yTPC+oiuzDxkUtLtebfzF9AUcgToKsT2I6+5REbfRnKrSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHDJXRJ33aT5eptBzgtGy+IDURxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzVmZWIyYjgtN2MyMi0z MGY4LThiMGItMzg4NDQyMTFiYzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArROhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnqt4hANgdgcVaPT3ExskTiThZSN8uTmTsV+uUJpUQsWsA4HJiEeRVl 1YYaifVS0nnsDB3rpuZIUmCu5iQ1xOeQkaifjGj7E0oSi7ZVYgkMk36ZJuFWCv9k mmqlS9YaBCz1bMxI6DxICr4TzyzkpBupdfeQzBKhGOzzvAWQV+HgOYlEyMlM1JCd nZ0Mzbi8wwZyOVk9mbdmj34JoM/FegYcSJkjTxxh3/t5JDJHSwQJUbtyeyKVHLho oIXTRZAMK1E2VbIXO/TI0cGjsz/xVmGkeJ7lRksHHqNHBBkR1KLX9eJYvrjGtwo4 akZCX9qTu43LJBo9cSRNXiI5wEsnO9o= -----END CERTIFICATE-----Generated at Thu Mar 26 14:38:04 2026 by rpki-client