$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/973cd140-cab6-388f-8e11-26b2f8fc5390.roa File: 973cd140-cab6-388f-8e11-26b2f8fc5390.roa (raw, json) Hash identifier: 1h0J18zRKsnABTFWT1+bs1NlLmzq8Z4KvgPdrjLBd3k= Subject key identifier: 27:AE:EE:DB:F9:B3:D1:EE:F8:8B:08:81:09:AD:0A:53:89:89:D3:FD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AA29D23089B3D27A624680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/973cd140-cab6-388f-8e11-26b2f8fc5390.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.21.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:29:d2:30:89:b3:d2:7a:62:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=1eeb6350-cdc4-4734-b882-7444a532d561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:59:fe:37:aa:63:c0:49:8c:32:d7:cb:14: 2e:55:61:61:bc:cf:31:cd:4a:10:4a:3e:5b:85:8e: d2:4c:cb:e0:6f:c7:8c:ff:7c:b1:d3:20:bf:a4:55: 2f:77:fd:8c:fc:e8:e2:20:5a:ae:b1:36:45:83:11: 49:b9:22:42:93:db:f2:1b:10:f3:89:95:f1:78:76: c6:7a:90:86:de:f4:21:49:1d:d8:0c:a2:fd:b4:a7: 38:b1:ae:c0:cb:bc:57:7a:f4:5e:01:6e:38:c6:7b: 5c:ef:0f:31:b4:f1:e3:a3:bf:7f:a9:94:1e:b0:f0: 3b:e7:1c:0b:66:cd:b8:a6:71:de:f6:53:19:0a:94: 8d:d7:2f:ea:ca:64:d7:18:a9:22:a2:c6:39:98:94: 6f:fb:7a:c7:cb:fe:52:cf:3a:cf:e3:3c:4d:82:46: 18:1f:08:40:1c:99:bb:84:5c:af:9f:d9:35:1f:3b: 34:e7:87:4c:03:fc:69:46:6e:0f:d1:81:6b:b3:2e: 11:c7:d7:45:a2:94:3a:1d:35:c1:66:e8:c0:b3:3e: 5b:02:77:82:87:6f:fb:3f:d9:12:9a:cb:6f:f6:77: 9f:d3:1e:a5:ff:48:d8:c8:ab:69:77:13:5a:72:57: ac:69:12:94:59:76:e8:a4:af:fb:5c:b4:bb:54:7f: 31:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AE:EE:DB:F9:B3:D1:EE:F8:8B:08:81:09:AD:0A:53:89:89:D3:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/973cd140-cab6-388f-8e11-26b2f8fc5390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:fa:6a:16:4d:ca:23:19:18:c4:9d:b3:8f:1a:d8:56:e7:15: 1c:f8:8a:1c:dc:27:b7:94:d3:f8:11:30:c5:f0:d3:38:ad:71: 04:24:73:78:08:43:57:04:ad:cb:58:ac:04:06:45:db:55:9b: 20:2a:c7:69:52:aa:82:7a:6b:48:23:ce:4c:fb:db:e8:ca:0e: 8d:25:3d:4a:a7:69:2d:a5:7c:cc:2d:9e:a1:12:f7:1c:5a:f4: 4a:11:c3:80:59:9a:b2:4b:d4:5d:fa:20:0c:6e:50:82:7a:09: c2:e7:dd:82:6a:6a:ce:b5:31:0b:1d:4a:32:fb:89:e2:72:12: 18:91:a5:6a:f8:11:03:18:6a:65:d6:06:48:eb:e8:fd:1b:44: 48:36:60:fc:9d:d8:19:a8:43:7e:37:4d:1c:c0:56:e5:8f:e5: 11:e4:f3:3a:43:0d:90:47:0f:e0:30:a0:13:85:f4:50:1e:bc: 3f:e7:fe:92:46:aa:56:88:4b:39:1b:52:24:7b:13:a8:31:07: 06:5f:ce:f9:a0:12:f8:6d:30:ce:1b:db:6d:76:ee:05:fb:22: 88:b3:ea:b4:00:7c:45:28:17:94:11:c3:08:d9:c9:66:50:59: 51:e0:b2:79:72:da:9d:44:0c:76:41:c6:75:d7:e5:f3:0b:29: 6d:c4:be:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqinSMImz0npiRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MWVlYjYzNTAtY2RjNC00NzM0LWI4ODItNzQ0NGE1MzJkNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqlZ/jeqY8BJjDLXyxQuVWFhvM8xzUoQSj5b hY7STMvgb8eM/3yx0yC/pFUvd/2M/OjiIFqusTZFgxFJuSJCk9vyGxDziZXxeHbG epCG3vQhSR3YDKL9tKc4sa7Ay7xXevReAW44xntc7w8xtPHjo79/qZQesPA75xwL Zs24pnHe9lMZCpSN1y/qymTXGKkiosY5mJRv+3rHy/5SzzrP4zxNgkYYHwhAHJm7 hFyvn9k1Hzs054dMA/xpRm4P0YFrsy4Rx9dFopQ6HTXBZujAsz5bAneCh2/7P9kS mstv9nef0x6l/0jYyKtpdxNaclesaRKUWXbopK/7XLS7VH8xIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeu7tv5s9Hu+IsIgQmtClOJidP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTczY2QxNDAtY2FiNi0z ODhmLThlMTEtMjZiMmY4ZmM1MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj6ahZNyiMZGMSds48a2FbnFRz4ihzcJ7eU0/gRMMXw0zitcQQkc3gI Q1cErctYrAQGRdtVmyAqx2lSqoJ6a0gjzkz72+jKDo0lPUqnaS2lfMwtnqES9xxa 9EoRw4BZmrJL1F36IAxuUIJ6CcLn3YJqas61MQsdSjL7ieJyEhiRpWr4EQMYamXW Bkjr6P0bREg2YPyd2BmoQ343TRzAVuWP5RHk8zpDDZBHD+AwoBOF9FAevD/n/pJG qlaISzkbUiR7E6gxBwZfzvmgEvhtMM4b22127gX7Ioiz6rQAfEUoF5QRwwjZyWZQ WVHgsnly2p1EDHZBxnXX5fMLKW3Evj8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:11:07 2026 by rpki-client