$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96c2b6ac-9dae-37ab-9d54-979728d4a91b.roa File: 96c2b6ac-9dae-37ab-9d54-979728d4a91b.roa (raw, json) Hash identifier: fyesgi6/ZCxj2BymafYdx3YicLAYROjaQrYJU4UvGQw= Subject key identifier: 09:30:4A:84:C6:B5:E9:5B:C1:65:92:FD:E6:E1:1A:0E:A6:1B:92:C4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E12A7E04BE334A198E3300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96c2b6ac-9dae-37ab-9d54-979728d4a91b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.29.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2a:7e:04:be:33:4a:19:8e:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=7c867dc6-d4db-4e48-9b86-3b4313adc65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e5:69:84:cd:6b:e5:95:c5:c6:b8:99:b7:ce: 8f:e3:70:1b:e7:5c:d3:ca:63:15:21:a1:5c:80:46: c3:f5:29:f5:d0:95:09:38:53:d0:41:bd:37:72:07: fa:ad:a4:1e:af:42:28:f4:58:6c:ae:4a:96:85:63: 35:f2:54:85:9d:a0:17:48:0b:3d:21:28:d1:ed:bc: 9b:6b:df:15:a9:8e:4f:d0:ef:17:78:7d:08:c9:70: 06:fc:19:ac:35:f3:6b:63:f6:01:f2:37:63:00:03: d1:e0:f2:e7:af:f8:9a:5b:0a:3d:fc:6c:37:70:54: 85:db:cf:6e:8b:38:f8:65:1a:9f:ec:24:e8:37:8c: e3:98:da:d5:c1:c8:3c:20:4f:dc:bc:15:87:4e:e7: ea:b5:05:e1:6a:ce:17:73:61:4b:60:76:2e:66:0b: 12:e7:1a:98:c4:51:52:a3:33:a8:c1:7a:d4:a7:33: 13:67:8a:c5:7e:40:30:15:7a:cf:64:90:8f:d9:8f: ac:3b:0a:de:f1:98:f7:a5:55:9f:07:3d:11:ee:47: 96:3b:05:8a:30:90:70:31:10:f0:34:4d:34:f6:1e: c4:87:60:57:c7:8c:18:e8:55:38:7a:38:63:aa:58: eb:14:5c:45:db:dc:75:6b:3b:bf:43:0a:a4:bc:e7: 8b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:30:4A:84:C6:B5:E9:5B:C1:65:92:FD:E6:E1:1A:0E:A6:1B:92:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96c2b6ac-9dae-37ab-9d54-979728d4a91b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ae:48:19:10:1b:db:b3:4a:53:54:81:9c:18:bf:28:43:70: 81:2e:db:76:f3:26:e6:31:1a:d5:33:4d:4c:80:7a:66:80:cc: 80:dc:2b:73:0b:de:36:32:14:e4:c2:11:3a:77:b8:a8:a4:76: 26:a7:48:5d:df:82:de:50:c1:9c:5d:54:fb:06:8e:36:d2:0a: 2b:9a:25:49:95:03:d1:0b:0f:e8:29:97:44:2b:c8:07:5c:26: 1e:fd:31:6c:2e:84:cd:29:e8:bc:68:1a:82:0d:8a:4d:27:d1: a8:e5:97:31:b0:23:0b:a0:58:00:2e:b7:5d:82:4d:80:62:b3: 5e:17:b9:70:d5:be:be:01:7e:43:3a:b7:96:00:78:7c:99:f1: 11:58:b4:a0:5d:0e:99:c4:4f:b7:ba:51:18:c9:60:a6:bb:72: 94:80:74:b2:5a:aa:ca:f5:68:f4:d3:68:16:7e:72:de:96:b8: 08:a1:83:40:fd:04:10:8f:c8:df:26:86:c1:fb:0f:a1:f8:7c: 53:38:79:47:3f:99:8f:d9:af:f2:ac:b8:38:bf:99:d4:c1:4e: 3e:69:a2:b1:d1:48:5a:e4:58:d4:ce:12:af:b6:54:d6:a5:30: 72:6b:e5:60:e9:10:18:4b:d3:85:e3:a3:e1:10:d8:03:6c:d4: 16:e9:7c:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Sp+BL4zShmOMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk N2M4NjdkYzYtZDRkYi00ZTQ4LTliODYtM2I0MzEzYWRjNjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+VphM1r5ZXFxriZt86P43Ab51zTymMVIaFc gEbD9Sn10JUJOFPQQb03cgf6raQer0Io9FhsrkqWhWM18lSFnaAXSAs9ISjR7byb a98VqY5P0O8XeH0IyXAG/BmsNfNrY/YB8jdjAAPR4PLnr/iaWwo9/Gw3cFSF289u izj4ZRqf7CToN4zjmNrVwcg8IE/cvBWHTufqtQXhas4Xc2FLYHYuZgsS5xqYxFFS ozOowXrUpzMTZ4rFfkAwFXrPZJCP2Y+sOwre8Zj3pVWfBz0R7keWOwWKMJBwMRDw NE009h7Eh2BXx4wY6FU4ejhjqljrFFxF29x1azu/QwqkvOeL0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkwSoTGtelbwWWS/ebhGg6mG5LEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTZjMmI2YWMtOWRhZS0z N2FiLTlkNTQtOTc5NzI4ZDRhOTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiuSBkQG9uzSlNUgZwYvyhDcIEu23bzJuYxGtUzTUyAemaAzIDcK3ML 3jYyFOTCETp3uKikdianSF3fgt5QwZxdVPsGjjbSCiuaJUmVA9ELD+gpl0QryAdc Jh79MWwuhM0p6LxoGoINik0n0ajllzGwIwugWAAut12CTYBis14XuXDVvr4BfkM6 t5YAeHyZ8RFYtKBdDpnET7e6URjJYKa7cpSAdLJaqsr1aPTTaBZ+ct6WuAihg0D9 BBCPyN8mhsH7D6H4fFM4eUc/mY/Zr/KsuDi/mdTBTj5porHRSFrkWNTOEq+2VNal MHJr5WDpEBhL04Xjo+EQ2ANs1BbpfEY= -----END CERTIFICATE-----Generated at Thu Mar 26 12:06:40 2026 by rpki-client