$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c2898a9-cad9-308f-9cf2-148979fb3943.roa File: 8c2898a9-cad9-308f-9cf2-148979fb3943.roa (raw, json) Hash identifier: JSn+QDL7W8aOWgKPASYlBBBAFbvmCeJ6zYOVMzrM8Hw= Subject key identifier: B5:4F:6D:06:FB:95:A0:A1:7E:E1:5B:22:E4:AA:96:A9:4B:4F:99:0E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D39CF7CFAF3EF1BE727BC5800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c2898a9-cad9-308f-9cf2-148979fb3943.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.28.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:7c:fa:f3:ef:1b:e7:27:bc:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=d17cf7e1-80e3-4e2e-95bd-7e1d4a027693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3e:39:d9:34:f7:77:ce:2e:78:17:14:03:be: d5:59:bc:0a:9f:09:e8:8e:43:83:2d:9d:39:50:46: 25:3e:46:70:ee:72:0e:02:54:b7:94:98:cc:d9:05: bd:d7:aa:d8:d5:6b:ab:d1:93:9f:9a:56:e8:e0:61: 9c:49:90:25:16:0b:88:b9:a7:3d:cc:53:5a:96:08: 51:b4:ff:e5:77:e9:f3:66:ae:f0:f6:10:79:ab:de: 20:87:8c:ee:d0:72:c3:b8:d2:34:82:c6:a8:71:52: 84:50:32:6b:0e:04:db:bd:3d:a8:89:74:9c:15:17: 5f:72:43:85:70:d0:49:4c:b9:36:ed:1c:5b:5a:2c: 11:d6:1a:47:29:0b:a8:11:10:c0:f6:cc:32:57:99: 0a:e3:8b:9b:e3:1f:94:4e:19:f8:85:93:f6:bc:b1: 35:52:fa:38:56:1d:08:cb:a7:38:cd:71:d3:5a:db: 92:91:2d:8e:22:ec:82:62:1a:c6:ee:68:5f:cb:5b: a6:60:f8:03:d8:48:73:93:bf:96:86:cd:64:e8:7b: 6d:99:43:74:17:4b:ac:90:7a:17:01:2e:c6:2a:22: 9f:6a:d3:60:b4:e1:32:23:aa:56:25:17:54:49:f5: 9f:0d:0b:8e:fa:0b:1f:25:9a:cc:af:05:e8:c4:e6: c6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:4F:6D:06:FB:95:A0:A1:7E:E1:5B:22:E4:AA:96:A9:4B:4F:99:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c2898a9-cad9-308f-9cf2-148979fb3943.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:86:69:39:c1:b7:92:dc:1b:29:83:e7:e0:ba:20:a5:0e:73: 1e:2e:c6:77:82:46:ab:33:a7:48:4e:c4:97:59:eb:99:4c:e9: 6e:46:24:c6:44:e7:4c:0d:ea:a1:98:1e:4c:0a:4c:2a:f8:6f: 13:ba:49:23:ad:8c:a5:c1:fa:8e:df:ce:ce:f1:d3:a9:90:5b: 9b:3d:fb:3c:08:0f:93:ac:e3:a4:61:82:08:dc:de:eb:9a:50: d3:92:71:0e:08:af:84:48:08:b7:28:84:6d:db:a0:29:54:5d: c5:2e:62:3c:11:06:8a:5d:ef:9e:ea:33:7c:c9:4c:2b:38:5f: 28:e1:e4:ae:c2:27:ff:e4:e6:91:84:3c:12:06:e3:c8:33:31: f1:f7:d4:a7:c3:b7:df:b0:2d:cc:e8:8b:f3:36:55:c6:0f:5e: bd:1d:2e:29:ad:1c:e0:97:8a:1e:98:1d:34:4d:21:53:2e:73: 54:4a:96:bc:22:ef:38:91:27:81:dc:47:94:e5:c3:c4:2a:16: c4:f2:b7:b8:7b:e5:9d:6f:df:e2:2a:99:a4:44:d2:82:73:a7: 45:36:02:fa:a4:7b:82:cd:b1:3b:26:c4:05:e5:55:63:37:98: 9d:09:f2:5c:0c:b3:0e:59:1e:b2:9c:36:26:57:7e:7d:71:18: 52:70:47:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z3z68+8b5ye8WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk ZDE3Y2Y3ZTEtODBlMy00ZTJlLTk1YmQtN2UxZDRhMDI3NjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz452TT3d84ueBcUA77VWbwKnwnojkODLZ05 UEYlPkZw7nIOAlS3lJjM2QW916rY1Wur0ZOfmlbo4GGcSZAlFguIuac9zFNalghR tP/ld+nzZq7w9hB5q94gh4zu0HLDuNI0gsaocVKEUDJrDgTbvT2oiXScFRdfckOF cNBJTLk27RxbWiwR1hpHKQuoERDA9swyV5kK44ub4x+UThn4hZP2vLE1Uvo4Vh0I y6c4zXHTWtuSkS2OIuyCYhrG7mhfy1umYPgD2Ehzk7+Whs1k6HttmUN0F0uskHoX AS7GKiKfatNgtOEyI6pWJRdUSfWfDQuO+gsfJZrMrwXoxObGfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVPbQb7laChfuFbIuSqlqlLT5kOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGMyODk4YTktY2FkOS0z MDhmLTljZjItMTQ4OTc5ZmIzOTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2GaTnBt5LcGymD5+C6IKUOcx4uxneCRqszp0hOxJdZ65lM6W5GJMZE 50wN6qGYHkwKTCr4bxO6SSOtjKXB+o7fzs7x06mQW5s9+zwID5Os46Rhggjc3uua UNOScQ4Ir4RICLcohG3boClUXcUuYjwRBopd757qM3zJTCs4Xyjh5K7CJ//k5pGE PBIG48gzMfH31KfDt9+wLczoi/M2VcYPXr0dLimtHOCXih6YHTRNIVMuc1RKlrwi 7ziRJ4HcR5Tlw8QqFsTyt7h75Z1v3+IqmaRE0oJzp0U2Avqke4LNsTsmxAXlVWM3 mJ0J8lwMsw5ZHrKcNiZXfn1xGFJwR9E= -----END CERTIFICATE-----Generated at Thu Mar 26 06:27:56 2026 by rpki-client