$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa File: 85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa (raw, json) Hash identifier: IzJSZnAKxpD0o4x1josU+fxyHFihvcPwhjBQyBIwmys= Subject key identifier: 7E:1A:12:EF:0F:A6:98:3E:EF:BA:28:10:BC:18:69:DB:25:FF:49:61 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E10DED0F72818500B5AF40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.28.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:0d:ed:0f:72:81:85:00:b5:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=11b07cf9-46ca-49f4-9df7-eb284532dd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c7:d5:bc:ef:db:1d:7f:3d:42:65:15:13:03: 10:01:aa:94:14:d3:52:75:8e:72:63:2e:e5:c6:91: d3:61:c7:66:df:03:20:48:3b:a0:ec:5a:b5:8b:c7: 23:2e:51:b0:cb:8b:b2:84:2f:00:70:12:b6:20:5e: ee:c1:cc:8a:59:0c:ce:a1:c2:a5:10:5c:a6:d9:fb: c4:35:68:50:22:7c:2d:83:55:3d:ba:d7:e1:fc:17: 98:d5:48:c2:16:f3:25:fa:7d:41:cc:e9:63:c1:bb: d1:44:32:7d:3e:64:89:7b:8e:a1:33:45:78:9d:eb: 85:03:32:ca:cc:a2:11:84:62:af:b4:2b:30:0c:0a: 6a:e4:33:fb:3a:03:d4:6b:30:43:78:39:c7:26:10: 4d:ff:9c:a3:bd:f4:8a:c8:fe:23:a5:68:a0:96:ff: f3:9a:4c:d0:ed:67:6c:bf:28:ec:1e:c0:6e:d8:eb: 54:f0:16:50:92:fc:6b:d9:cc:90:21:36:97:39:5c: 19:b0:0f:ed:3f:1d:80:b4:a3:ad:f2:17:d0:f3:98: 35:3e:dc:e8:0d:75:ac:c1:c6:66:41:c8:71:d0:ff: 36:61:54:c8:a0:f8:65:94:44:ee:49:ba:88:29:e4: 5c:ef:30:ea:97:94:36:e7:60:fc:07:ba:51:3d:41: 1f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1A:12:EF:0F:A6:98:3E:EF:BA:28:10:BC:18:69:DB:25:FF:49:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:0f:2b:8c:9d:15:95:3b:21:91:94:36:72:45:d2:da:d7:36: 52:3a:69:6c:ac:b6:67:eb:f2:5b:ab:25:2c:51:38:94:64:67: 52:a3:57:03:3e:50:6c:13:5b:a8:2b:6b:c8:e7:f9:e1:c2:aa: 80:5f:57:e2:ef:88:42:f8:da:bb:0e:54:16:81:80:e9:fe:10: f4:9e:37:73:56:a6:10:17:7b:2e:e4:ae:95:8c:05:33:7d:cb: b4:00:c9:2d:e9:38:e1:5c:af:14:99:4b:68:26:49:46:7f:19: 8d:c6:a4:01:48:39:ed:a2:84:01:f2:d1:6a:24:0a:c4:34:50: a7:80:df:a0:9d:c2:0f:54:1d:fd:36:34:de:55:bb:7c:58:0d: 77:19:18:53:e7:d4:63:60:5f:4f:9d:7d:6b:0e:90:59:62:b1: d7:f5:68:8a:ab:30:fe:ec:ce:61:36:8a:13:27:45:3d:9d:33: 98:2c:9b:89:48:70:93:f2:93:44:98:f2:6f:b0:88:dd:51:01: de:aa:25:0b:41:ce:1d:85:4a:71:a1:a5:b9:bf:48:3b:29:b4: 47:2d:63:1b:98:fa:92:1d:bb:4d:ef:e1:fd:01:95:1d:89:43: 31:38:7a:74:86:dd:c3:30:2b:87:b7:92:3e:b4:ce:ce:a1:2a: b8:41:36:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Q3tD3KBhQC1r0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTFiMDdjZjktNDZjYS00OWY0LTlkZjctZWIyODQ1MzJkZDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcfVvO/bHX89QmUVEwMQAaqUFNNSdY5yYy7l xpHTYcdm3wMgSDug7Fq1i8cjLlGwy4uyhC8AcBK2IF7uwcyKWQzOocKlEFym2fvE NWhQInwtg1U9utfh/BeY1UjCFvMl+n1BzOljwbvRRDJ9PmSJe46hM0V4neuFAzLK zKIRhGKvtCswDApq5DP7OgPUazBDeDnHJhBN/5yjvfSKyP4jpWiglv/zmkzQ7Wds vyjsHsBu2OtU8BZQkvxr2cyQITaXOVwZsA/tPx2AtKOt8hfQ85g1PtzoDXWswcZm Qchx0P82YVTIoPhllETuSbqIKeRc7zDql5Q252D8B7pRPUEfowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4aEu8Pppg+77ooELwYadsl/0lhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVlNmRiMjItZmM1MC0z ZjAxLWIxMDAtZGY4YWUxZThmNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwPK4ydFZU7IZGUNnJF0trXNlI6aWystmfr8lurJSxROJRkZ1KjVwM+ UGwTW6gra8jn+eHCqoBfV+LviEL42rsOVBaBgOn+EPSeN3NWphAXey7krpWMBTN9 y7QAyS3pOOFcrxSZS2gmSUZ/GY3GpAFIOe2ihAHy0WokCsQ0UKeA36Cdwg9UHf02 NN5Vu3xYDXcZGFPn1GNgX0+dfWsOkFlisdf1aIqrMP7szmE2ihMnRT2dM5gsm4lI cJPyk0SY8m+wiN1RAd6qJQtBzh2FSnGhpbm/SDsptEctYxuY+pIdu03v4f0BlR2J QzE4enSG3cMwK4e3kj60zs6hKrhBNp4= -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:01 2026 by rpki-client