$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7dcf371f-23da-32ba-95bf-4f9d8917038b.roa File: 7dcf371f-23da-32ba-95bf-4f9d8917038b.roa (raw, json) Hash identifier: X5xO/WNO9oYJkHR4CjNUUIxi6+otekljgV/cf3ePmn4= Subject key identifier: 37:64:93:EA:9B:97:B5:9B:D5:20:66:33:8A:92:8B:32:74:7F:C3:6B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF5EFBB63764D555688100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7dcf371f-23da-32ba-95bf-4f9d8917038b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.28.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:5e:fb:b6:37:64:d5:55:68:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=dc84e6ec-0aa8-4d12-9f61-e7b838558c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f3:1d:4c:87:65:8c:38:04:5d:27:1f:c8:61: db:1d:2c:9a:b1:fd:39:bd:af:9a:55:d5:33:12:af: c0:47:00:9b:a0:ac:2b:d8:b0:bf:4b:b5:b4:4e:21: 0a:0e:b5:fd:88:cf:e4:b3:91:11:47:8a:b1:dc:a6: 6f:1d:10:15:4f:90:95:0a:1a:5e:6a:59:f2:4c:6b: 77:23:96:3a:75:fc:73:34:41:9d:f3:31:ac:fb:cf: 79:c9:71:be:23:11:7e:11:dd:f5:87:ab:3e:cb:6f: c6:14:43:da:b5:13:c4:aa:da:c9:7a:ed:41:9f:bd: e5:cb:d2:0b:46:4e:99:1a:b8:d1:5c:8d:9f:5e:5b: f9:a4:76:4b:e2:31:eb:c7:79:9c:6c:91:ae:65:7d: 1b:12:43:88:36:03:81:1e:83:12:68:cc:b2:a5:5d: a6:24:ca:70:5a:bc:ad:29:8d:19:c2:89:f7:e0:ad: 88:52:5d:ed:49:96:f3:06:f3:c5:85:1b:b5:ac:07: f7:e0:8e:5f:0e:44:bc:28:bf:ca:1a:c2:e7:b0:bb: e2:69:fd:29:49:d3:de:0e:ed:74:91:1d:ad:8a:b0: d9:40:0d:91:2c:90:58:64:23:ff:8a:35:67:05:c2: cb:29:1f:65:c1:17:00:e7:8d:79:7d:73:d4:7f:46: d1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:64:93:EA:9B:97:B5:9B:D5:20:66:33:8A:92:8B:32:74:7F:C3:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7dcf371f-23da-32ba-95bf-4f9d8917038b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:eb:f2:c7:f2:40:75:54:e7:4d:86:76:37:81:40:dd:09:7c: d8:b4:cc:4f:d0:37:95:f8:91:24:52:dd:13:c0:50:32:a6:19: dd:46:2a:b7:6f:a4:8f:99:e6:59:17:4e:0b:a2:47:3f:0a:e6: 84:e8:e7:f1:f2:cd:d0:c9:70:9a:e6:ff:eb:5b:13:bb:1e:6a: 22:20:b1:5a:3c:76:6d:0a:f2:b6:c4:70:6b:1f:58:08:81:ac: 02:05:cf:ad:3f:10:22:32:f4:37:2a:33:78:f4:40:8e:f0:e2: 87:69:44:46:a2:15:d7:79:77:45:89:c3:dc:0d:d8:78:20:9a: 35:f8:61:fe:35:22:4f:64:86:ab:ed:9d:bd:3b:8c:a1:7e:6e: da:e7:93:1b:59:46:79:95:e8:5b:f2:cb:b8:90:8e:60:a2:4d: 47:23:6d:f6:73:dd:57:43:01:9d:69:32:ed:ab:f6:07:6a:ec: 93:1e:33:b9:33:91:7d:d4:4d:44:fb:35:90:bf:57:9c:cd:fb: 90:bb:71:53:09:3a:28:e4:bf:e8:57:f4:e0:38:b0:24:f5:a0: bf:8a:d9:ec:aa:a9:40:43:76:e5:a8:51:6e:ab:96:c1:ac:d5: 0d:1c:a7:dc:b6:f2:17:13:21:e3:11:12:10:aa:4e:99:40:25: 60:cf:57:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k3177tjdk1VVogQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGM4NGU2ZWMtMGFhOC00ZDEyLTlmNjEtZTdiODM4NTU4YzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfMdTIdljDgEXScfyGHbHSyasf05va+aVdUz Eq/ARwCboKwr2LC/S7W0TiEKDrX9iM/ks5ERR4qx3KZvHRAVT5CVChpealnyTGt3 I5Y6dfxzNEGd8zGs+895yXG+IxF+Ed31h6s+y2/GFEPatRPEqtrJeu1Bn73ly9IL Rk6ZGrjRXI2fXlv5pHZL4jHrx3mcbJGuZX0bEkOINgOBHoMSaMyypV2mJMpwWryt KY0Zwon34K2IUl3tSZbzBvPFhRu1rAf34I5fDkS8KL/KGsLnsLviaf0pSdPeDu10 kR2tirDZQA2RLJBYZCP/ijVnBcLLKR9lwRcA5415fXPUf0bRDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdkk+qbl7Wb1SBmM4qSizJ0f8NrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2RjZjM3MWYtMjNkYS0z MmJhLTk1YmYtNGY5ZDg5MTcwMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTr8sfyQHVU502GdjeBQN0JfNi0zE/QN5X4kSRS3RPAUDKmGd1GKrdv pI+Z5lkXTguiRz8K5oTo5/HyzdDJcJrm/+tbE7seaiIgsVo8dm0K8rbEcGsfWAiB rAIFz60/ECIy9DcqM3j0QI7w4odpREaiFdd5d0WJw9wN2HggmjX4Yf41Ik9khqvt nb07jKF+btrnkxtZRnmV6Fvyy7iQjmCiTUcjbfZz3VdDAZ1pMu2r9gdq7JMeM7kz kX3UTUT7NZC/V5zN+5C7cVMJOijkv+hX9OA4sCT1oL+K2eyqqUBDduWoUW6rlsGs 1Q0cp9y28hcTIeMREhCqTplAJWDPVzs= -----END CERTIFICATE-----Generated at Thu Mar 26 09:23:46 2026 by rpki-client