$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/845840f8-a3ed-3d67-ace3-10b13e9c47ea.roa File: 845840f8-a3ed-3d67-ace3-10b13e9c47ea.roa (raw, json) Hash identifier: I6W9UEnaJ4IR3MOlBvf+kUCLrhrDYfnA6DpRivf41+I= Subject key identifier: 33:63:B7:FB:DA:CB:2A:0A:5F:2F:A5:94:48:AA:83:27:84:26:F2:74 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF7215F8B8D7D592F489E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/845840f8-a3ed-3d67-ace3-10b13e9c47ea.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.21.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:72:15:f8:b8:d7:d5:92:f4:89:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=aa64285a-1512-44cb-8506-6a15c70b8ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:23:31:4f:71:b1:10:17:29:30:48:4b:e7: a7:d1:ca:c1:1b:ff:d5:14:db:1e:39:bc:31:37:e2: c0:59:6c:da:5a:09:54:49:05:1c:c7:da:e7:56:b4: 69:cf:13:08:f0:d4:92:8f:44:39:17:b5:fc:7c:64: 8e:43:da:44:09:1c:7d:be:44:86:3d:d0:c1:b3:45: bb:82:7b:c7:72:c8:26:95:db:97:c5:df:d0:17:55: e3:ff:d9:2d:87:92:a0:3b:eb:4e:ac:34:99:d5:d0: ca:2e:22:fe:03:27:74:41:e5:be:4e:05:fe:b2:01: 3b:f9:9c:25:bb:a7:47:7d:d8:14:a9:5a:32:e0:9c: ce:6d:c9:ab:09:6b:0d:5c:9f:69:02:d2:74:4c:75: 40:c0:9a:7b:76:3e:52:3d:16:80:9e:95:98:b9:b5: 0d:5c:b5:ed:97:42:21:7a:9e:8c:4d:e7:3e:01:9a: 47:b0:78:e6:40:a9:cc:01:d3:cd:43:1f:80:8e:f1: 68:0b:56:e0:20:f7:e3:29:b1:d3:bd:94:41:ee:49: cc:ff:c2:21:fa:5e:cc:59:57:2b:53:0c:a5:bb:40: d5:5e:6e:70:95:f7:aa:c6:77:5e:a4:f1:9c:4c:e3: 16:78:d1:2b:38:a2:7e:61:73:21:ae:05:80:a8:15: d5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:63:B7:FB:DA:CB:2A:0A:5F:2F:A5:94:48:AA:83:27:84:26:F2:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/845840f8-a3ed-3d67-ace3-10b13e9c47ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:76:96:79:b2:dd:2e:37:16:2a:4d:c1:12:22:da:34:b0:5b: 03:68:c6:9e:6c:8b:dd:1a:ef:67:03:47:3d:7f:cb:96:f2:72: a0:98:18:c7:98:d5:db:12:85:c3:c7:7e:ab:b0:b4:6f:18:1f: 88:b7:7c:0d:74:d7:7a:74:aa:a6:92:74:3f:9c:f6:17:ee:78: 87:1f:ae:09:d1:76:87:6c:d5:a9:bf:0e:03:44:23:5c:28:64: 52:15:60:40:fe:e7:cd:ed:d8:cd:cd:47:c2:52:d6:f9:10:bf: 21:bd:63:15:c6:41:4b:2a:ea:27:bd:ca:8e:7d:e3:31:8d:f5: 63:32:c3:fb:65:8f:10:4c:ad:79:fa:40:7e:aa:ba:1e:80:dd: a0:3a:37:eb:fe:f3:3f:e3:29:cf:1e:72:9c:55:a3:24:d1:a7: 9f:09:25:83:3a:9c:70:ea:e2:2b:96:60:38:e7:c3:41:a0:30: 46:c9:2f:14:28:e3:ca:0b:8f:85:5f:c9:43:48:ee:bf:65:55: 8a:44:6b:c2:f3:12:c4:ce:a8:b0:8a:24:11:3a:d2:4e:c6:25: 92:12:95:b9:4e:40:c3:60:fb:8a:80:c3:e0:79:b6:5a:9f:cb: af:4e:fc:79:d4:65:3a:a6:9e:95:2c:ea:3e:cc:f3:fe:88:b6: 63:1f:37:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k33IV+LjX1ZL0ieAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YWE2NDI4NWEtMTUxMi00NGNiLTg1MDYtNmExNWM3MGI4Y2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+IjMU9xsRAXKTBIS+en0crBG//VFNseObwx N+LAWWzaWglUSQUcx9rnVrRpzxMI8NSSj0Q5F7X8fGSOQ9pECRx9vkSGPdDBs0W7 gnvHcsgmlduXxd/QF1Xj/9kth5KgO+tOrDSZ1dDKLiL+Ayd0QeW+TgX+sgE7+Zwl u6dHfdgUqVoy4JzObcmrCWsNXJ9pAtJ0THVAwJp7dj5SPRaAnpWYubUNXLXtl0Ih ep6MTec+AZpHsHjmQKnMAdPNQx+AjvFoC1bgIPfjKbHTvZRB7knM/8Ih+l7MWVcr Uwylu0DVXm5wlfeqxndepPGcTOMWeNErOKJ+YXMhrgWAqBXVbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNjt/vayyoKXy+llEiqgyeEJvJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODQ1ODQwZjgtYTNlZC0z ZDY3LWFjZTMtMTBiMTNlOWM0N2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl2lnmy3S43FipNwRIi2jSwWwNoxp5si90a72cDRz1/y5bycqCYGMeY 1dsShcPHfquwtG8YH4i3fA1013p0qqaSdD+c9hfueIcfrgnRdods1am/DgNEI1wo ZFIVYED+583t2M3NR8JS1vkQvyG9YxXGQUsq6ie9yo594zGN9WMyw/tljxBMrXn6 QH6quh6A3aA6N+v+8z/jKc8ecpxVoyTRp58JJYM6nHDq4iuWYDjnw0GgMEbJLxQo 48oLj4VfyUNI7r9lVYpEa8LzEsTOqLCKJBE60k7GJZISlblOQMNg+4qAw+B5tlqf y69O/HnUZTqmnpUs6j7M8/6ItmMfN4E= -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:23 2026 by rpki-client