$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89014442-49fb-37f7-8025-f1b2ce9c7d37.roa File: 89014442-49fb-37f7-8025-f1b2ce9c7d37.roa (raw, json) Hash identifier: iasr+yQcKMY2E305Y3/JkaBcP4PVQ9SOGrv8dvknVnw= Subject key identifier: 8A:57:34:FA:64:2A:4A:DB:47:1A:F3:DF:78:02:6F:11:60:26:07:C8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF9F3037C8DAF1628FFB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89014442-49fb-37f7-8025-f1b2ce9c7d37.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.28.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:9f:30:37:c8:da:f1:62:8f:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5195d8ec-01c8-43d1-8b50-76fa23bd66e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e7:be:e3:4e:c1:cf:f6:4c:17:74:48:ae:1a: 59:a6:41:e6:4d:cd:6b:08:07:25:72:6a:a1:0b:b2: 21:79:0b:6c:69:02:05:b2:bb:47:5b:d1:14:17:72: 42:c5:16:02:9c:5a:69:c7:b1:9d:2b:16:da:41:20: c0:09:cf:8d:c5:dc:47:5f:02:b7:d0:ff:46:c1:75: 06:36:c4:2e:e7:b3:96:44:40:91:2e:85:64:d6:d9: 07:be:e5:e5:b5:eb:64:77:46:f8:d1:65:2d:1f:ca: c4:40:30:a5:cd:95:1e:3b:72:6f:87:c6:91:f7:b0: 4b:43:44:43:96:b0:4f:44:45:57:8a:94:9f:d3:c5: bb:30:e4:9f:97:a0:a2:f7:99:5a:49:3b:2d:15:58: 2d:00:55:fe:c9:9c:b7:ea:6d:b3:0a:ee:43:d3:57: 4f:b8:e3:28:31:ef:19:c5:54:de:22:2c:18:e6:13: 97:54:af:00:dc:be:46:8e:fd:6b:96:b7:ec:2d:b5: 20:7a:e0:94:c4:e8:ff:26:93:68:65:2c:fa:66:77: d8:96:e5:8e:65:9e:6a:26:25:13:89:95:9f:c6:b2: 22:a6:5c:f5:34:68:7b:82:50:79:e8:a5:ea:4e:3d: 07:b2:b3:02:35:70:89:88:35:dc:67:8b:37:95:7b: f3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:57:34:FA:64:2A:4A:DB:47:1A:F3:DF:78:02:6F:11:60:26:07:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89014442-49fb-37f7-8025-f1b2ce9c7d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:82:64:a9:c3:ea:8e:88:6e:fd:dd:e3:59:02:87:61:7a:c5: 13:60:13:b9:88:4b:42:e8:a6:64:e7:fd:52:78:26:8f:76:45: 86:17:90:01:d7:3e:3d:94:22:b7:ed:e6:77:1e:7d:30:57:30: ac:cb:9e:a8:5b:df:ee:f1:a8:da:34:c2:f0:5b:ac:eb:39:48: c9:47:de:f0:b5:dc:8a:03:d3:d6:31:2a:89:15:86:44:62:06: 6d:6a:f1:05:63:7b:09:60:aa:7f:58:b4:9c:da:13:d5:7e:22: 92:c6:0b:a1:f5:53:c0:14:90:07:45:3c:40:1c:84:af:07:7c: f5:5d:fd:45:41:7d:d4:cb:a3:87:45:f6:ef:9b:66:d3:88:8b: 9e:38:91:3d:30:77:c7:b3:14:04:e4:bc:a3:7d:02:d7:cb:1f: 3c:a9:d5:dd:bf:d2:86:f6:e5:15:c4:32:06:5b:ba:b5:26:2a: 6a:c9:68:a8:2b:b3:be:2e:ba:62:e4:f9:51:64:bf:96:0b:0a: 89:18:9b:eb:b1:04:95:6a:8f:0a:19:19:de:f7:57:10:d7:98: e3:e9:83:7e:89:d9:28:b9:79:5a:93:04:71:d6:42:cb:2f:f2: ca:db:96:14:62:62:57:a1:2c:54:c8:ab:97:1e:e8:1c:8d:fe: 18:22:a8:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k358wN8ja8WKP+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTE5NWQ4ZWMtMDFjOC00M2QxLThiNTAtNzZmYTIzYmQ2NmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOe+407Bz/ZMF3RIrhpZpkHmTc1rCAclcmqh C7IheQtsaQIFsrtHW9EUF3JCxRYCnFppx7GdKxbaQSDACc+NxdxHXwK30P9GwXUG NsQu57OWRECRLoVk1tkHvuXltetkd0b40WUtH8rEQDClzZUeO3Jvh8aR97BLQ0RD lrBPREVXipSf08W7MOSfl6Ci95laSTstFVgtAFX+yZy36m2zCu5D01dPuOMoMe8Z xVTeIiwY5hOXVK8A3L5Gjv1rlrfsLbUgeuCUxOj/JpNoZSz6ZnfYluWOZZ5qJiUT iZWfxrIiplz1NGh7glB56KXqTj0HsrMCNXCJiDXcZ4s3lXvzTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpXNPpkKkrbRxrz33gCbxFgJgfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODkwMTQ0NDItNDlmYi0z N2Y3LTgwMjUtZjFiMmNlOWM3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGCZKnD6o6Ibv3d41kCh2F6xRNgE7mIS0LopmTn/VJ4Jo92RYYXkAHX Pj2UIrft5ncefTBXMKzLnqhb3+7xqNo0wvBbrOs5SMlH3vC13IoD09YxKokVhkRi Bm1q8QVjewlgqn9YtJzaE9V+IpLGC6H1U8AUkAdFPEAchK8HfPVd/UVBfdTLo4dF 9u+bZtOIi544kT0wd8ezFATkvKN9AtfLHzyp1d2/0ob25RXEMgZburUmKmrJaKgr s74uumLk+VFkv5YLCokYm+uxBJVqjwoZGd73VxDXmOPpg36J2Si5eVqTBHHWQssv 8srblhRiYlehLFTIq5ce6ByN/hgiqBA= -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:00 2026 by rpki-client