$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b660f3d-8f45-3198-8d25-602451d12900.roa File: 8b660f3d-8f45-3198-8d25-602451d12900.roa (raw, json) Hash identifier: 0J0OkeUYZpyDJRVILrdl0H3g1gNFgvyZD719aYx1Nq0= Subject key identifier: 98:D4:11:8D:AE:10:C1:37:27:BB:D0:43:94:01:66:00:E2:33:04:47 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AABDC388B5900AA46B7080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b660f3d-8f45-3198-8d25-602451d12900.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.28.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:bd:c3:88:b5:90:0a:a4:6b:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=34f97e48-6ec7-44b5-b218-6da644bc7572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:20:ce:dc:01:67:b8:69:2b:15:6d:4d:69:71: 0e:c3:3c:89:4b:00:25:3f:61:26:03:f0:cc:0a:2d: b2:89:d4:bb:ab:62:62:55:50:e0:df:ac:5c:77:a4: 3b:8f:dc:2a:fe:98:e7:e0:55:e1:78:1f:e8:89:5c: 9e:55:d8:dd:bd:f2:67:72:d2:55:87:86:ab:bf:4b: fa:20:b0:f6:50:26:ac:98:27:30:9b:80:83:18:e7: 06:b6:70:f7:72:3d:96:6c:ce:be:9f:04:17:28:86: 06:81:de:dc:51:4d:f0:39:3f:39:1e:ac:da:23:e8: 67:ee:04:f3:f4:8f:5f:80:4c:64:38:42:d9:09:f8: 5e:41:57:8f:25:d7:44:61:1d:e6:97:65:35:4f:44: ef:54:98:47:6f:7d:31:a7:52:33:54:82:f1:15:3e: ac:85:4f:7d:98:d8:88:89:fc:cd:3b:fa:26:d8:a7: be:b3:03:e4:f8:3c:aa:6f:5e:92:38:5a:7d:9e:d5: 42:15:fc:06:8e:66:6e:22:f1:ae:8f:a9:86:12:02: 7b:0c:f6:61:62:a7:03:4b:54:79:2f:d8:6f:12:2f: 1e:03:74:74:25:5a:db:9d:33:77:80:cd:19:eb:ec: c3:c2:c3:3d:5d:4a:f3:5e:63:65:81:46:0c:7f:36: 0d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D4:11:8D:AE:10:C1:37:27:BB:D0:43:94:01:66:00:E2:33:04:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b660f3d-8f45-3198-8d25-602451d12900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:7b:39:5d:f3:8d:4e:04:d4:f6:8c:d4:5e:ab:36:f0:54:ea: 1a:ef:79:49:58:4c:b2:94:e9:2f:ff:7f:71:f4:94:06:9e:92: 9c:8a:bd:62:8a:f7:43:3c:ee:ee:c3:69:1e:ad:49:c0:85:9c: ac:79:fc:93:bd:01:79:88:e5:02:fb:0c:b7:2d:42:03:59:a0: 6d:a1:56:22:4c:7e:6e:63:a3:04:38:76:62:b0:7d:4d:ee:43: 0a:2c:49:0e:bc:d3:d1:f8:2b:4f:51:c2:d2:f4:07:42:75:ad: 20:d1:02:6e:3d:31:7d:04:8c:1c:f0:d4:d8:2f:39:a0:72:30: 93:e5:2c:bf:28:72:9e:27:cc:51:f3:4c:a7:57:43:57:7e:a7: 4d:c3:cb:8b:d9:94:11:20:26:46:78:f4:1d:32:23:1e:b7:41: 6e:7f:fd:2f:b2:65:9c:2c:c1:dd:31:b4:22:c1:c7:cc:09:06: 52:46:7b:d3:5d:40:08:59:1b:08:bb:48:2b:85:1b:05:12:f8: 43:e2:88:52:f2:6e:be:35:6b:2c:39:cb:c4:7a:31:33:56:ae: da:3e:90:f2:a4:63:8d:fa:34:80:99:d2:2c:6e:22:74:83:c9: 80:60:16:0b:19:ad:66:d0:01:2e:35:40:47:cd:41:89:27:ab: 81:d9:de:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqr3DiLWQCqRrcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MzRmOTdlNDgtNmVjNy00NGI1LWIyMTgtNmRhNjQ0YmM3NTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSDO3AFnuGkrFW1NaXEOwzyJSwAlP2EmA/DM Ci2yidS7q2JiVVDg36xcd6Q7j9wq/pjn4FXheB/oiVyeVdjdvfJnctJVh4arv0v6 ILD2UCasmCcwm4CDGOcGtnD3cj2WbM6+nwQXKIYGgd7cUU3wOT85HqzaI+hn7gTz 9I9fgExkOELZCfheQVePJddEYR3ml2U1T0TvVJhHb30xp1IzVILxFT6shU99mNiI ifzNO/om2Ke+swPk+Dyqb16SOFp9ntVCFfwGjmZuIvGuj6mGEgJ7DPZhYqcDS1R5 L9hvEi8eA3R0JVrbnTN3gM0Z6+zDwsM9XUrzXmNlgUYMfzYNwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjUEY2uEME3J7vQQ5QBZgDiMwRHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGI2NjBmM2QtOGY0NS0z MTk4LThkMjUtNjAyNDUxZDEyOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRz/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh7OV3zjU4E1PaM1F6rNvBU6hrveUlYTLKU6S//f3H0lAaekpyKvWKK 90M87u7DaR6tScCFnKx5/JO9AXmI5QL7DLctQgNZoG2hViJMfm5jowQ4dmKwfU3u QwosSQ6809H4K09RwtL0B0J1rSDRAm49MX0EjBzw1NgvOaByMJPlLL8ocp4nzFHz TKdXQ1d+p03Dy4vZlBEgJkZ49B0yIx63QW5//S+yZZwswd0xtCLBx8wJBlJGe9Nd QAhZGwi7SCuFGwUS+EPiiFLybr41ayw5y8R6MTNWrto+kPKkY436NICZ0ixuInSD yYBgFgsZrWbQAS41QEfNQYknq4HZ3jI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:37:58 2026 by rpki-client