$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96339c60-9b45-36f3-bc38-52a8a2c75bab.roa File: 96339c60-9b45-36f3-bc38-52a8a2c75bab.roa (raw, json) Hash identifier: m+Bx7kgJhcgXhI/pXnjUR1hpLa0i38ZQUFhOugX5npg= Subject key identifier: A7:EB:96:0A:C1:C4:B7:37:0E:95:6E:2E:45:A9:D4:65:1A:3C:3C:5C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E10F52D8E4FCB6AF49B280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96339c60-9b45-36f3-bc38-52a8a2c75bab.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 150.195.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:0f:52:d8:e4:fc:b6:af:49:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ed0b7f5d-09c9-4459-be77-1971970b0aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:75:1f:2f:21:c8:eb:75:e7:1f:18:f5:6e:66: 59:01:1d:ff:27:83:3b:4f:6c:d2:76:34:69:d7:da: f4:94:c6:49:78:a2:95:6b:fa:b0:c4:7a:c1:67:eb: bd:42:5b:42:3f:c6:12:6b:ce:a3:a2:9a:c2:83:47: 16:71:16:1b:de:1d:a5:0c:e3:32:22:8e:77:2d:ab: 64:de:f3:09:b9:d5:11:0f:66:52:e2:06:be:6f:b3: a3:21:49:db:4d:b8:3e:a2:0d:40:c1:cb:0b:bb:1d: fd:a0:c4:64:90:f4:1f:9f:95:ac:16:7c:ed:03:92: 3b:ef:26:4b:e1:80:6f:53:bf:70:f5:51:f3:43:18: d1:c6:4f:05:2b:49:58:89:d4:11:93:2c:37:dc:01: 10:61:23:01:cf:ee:0e:09:7b:81:35:1b:73:8a:6c: c9:c7:12:d8:17:b7:9e:4b:23:ba:4d:4c:b5:83:62: 6c:7a:52:38:fb:2a:61:79:68:a0:77:34:14:64:d1: 82:77:52:2f:20:1d:71:9e:77:be:54:f3:1f:65:b8: 70:4b:c0:05:8c:db:77:08:12:ac:c6:b1:2d:1c:da: 3c:3d:17:5e:69:c7:e2:33:79:e5:44:34:0a:23:11: c5:0c:46:21:86:f8:49:46:22:a3:9b:9f:d1:c8:8e: 01:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EB:96:0A:C1:C4:B7:37:0E:95:6E:2E:45:A9:D4:65:1A:3C:3C:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96339c60-9b45-36f3-bc38-52a8a2c75bab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:f2:6c:27:29:a9:ac:c0:c1:df:4d:33:6b:4c:f3:d6:d7:8c: 2d:60:af:d4:e4:73:6b:0f:40:c0:1b:d6:65:1b:1f:b2:57:2a: 99:50:93:90:ed:8a:d3:7b:1e:29:3f:75:00:a9:36:15:55:3c: f9:73:8b:ec:80:31:52:59:27:8a:17:28:5d:07:55:39:76:1d: 2c:89:bb:0a:ea:8f:74:74:06:c1:ee:d9:61:cd:89:8a:99:e1: 83:a5:b7:29:c6:6b:ee:57:09:e1:0a:d0:99:1d:d4:3b:23:92: 0c:fc:8b:57:5b:02:2c:9c:9b:7f:e7:d2:a3:df:a4:08:2e:28: 33:25:bc:0c:98:da:fd:89:1a:22:53:4d:84:99:a4:5a:1b:64: 26:d3:78:9a:de:75:dc:2a:70:9d:7e:d2:04:b1:dc:b1:9f:62: de:ab:e4:e6:61:e4:b3:98:4b:4b:77:d8:ee:3e:c1:56:b6:7a: f1:59:90:8d:ec:cd:d9:9e:29:38:a6:b7:6c:13:a9:30:48:10: 42:66:aa:46:53:cd:2d:b7:d9:0d:b9:72:6b:03:53:3b:b6:7b: 30:14:00:02:22:be:fc:31:fd:56:78:42:48:34:3d:bd:cf:ac: 17:a5:7a:8f:e1:41:a2:4e:4f:97:c9:85:b9:5b:c3:2e:1e:4b: 75:a3:89:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Q9S2OT8tq9JsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZWQwYjdmNWQtMDljOS00NDU5LWJlNzctMTk3MTk3MGIwYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3UfLyHI63XnHxj1bmZZAR3/J4M7T2zSdjRp 19r0lMZJeKKVa/qwxHrBZ+u9QltCP8YSa86joprCg0cWcRYb3h2lDOMyIo53Latk 3vMJudURD2ZS4ga+b7OjIUnbTbg+og1AwcsLux39oMRkkPQfn5WsFnztA5I77yZL 4YBvU79w9VHzQxjRxk8FK0lYidQRkyw33AEQYSMBz+4OCXuBNRtzimzJxxLYF7ee SyO6TUy1g2JselI4+ypheWigdzQUZNGCd1IvIB1xnne+VPMfZbhwS8AFjNt3CBKs xrEtHNo8PRdeacfiM3nlRDQKIxHFDEYhhvhJRiKjm5/RyI4B+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfrlgrBxLc3DpVuLkWp1GUaPDxcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTYzMzljNjAtOWI0NS0z NmYzLWJjMzgtNTJhOGEyYzc1YmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXybCcpqazAwd9NM2tM89bXjC1gr9Tkc2sPQMAb1mUbH7JXKplQk5Dt itN7Hik/dQCpNhVVPPlzi+yAMVJZJ4oXKF0HVTl2HSyJuwrqj3R0BsHu2WHNiYqZ 4YOltynGa+5XCeEK0Jkd1Dsjkgz8i1dbAiycm3/n0qPfpAguKDMlvAyY2v2JGiJT TYSZpFobZCbTeJreddwqcJ1+0gSx3LGfYt6r5OZh5LOYS0t32O4+wVa2evFZkI3s zdmeKTimt2wTqTBIEEJmqkZTzS232Q25cmsDUzu2ezAUAAIivvwx/VZ4Qkg0Pb3P rBeleo/hQaJOT5fJhblbwy4eS3WjiSg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:53:20 2026 by rpki-client