$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98fa31a8-a2b1-351b-a45b-4cf8c34abfa1.roa File: 98fa31a8-a2b1-351b-a45b-4cf8c34abfa1.roa (raw, json) Hash identifier: ILRMIOY3qxC+BBjJMpjQab3p/T996D+K8UlbcIS2C6E= Subject key identifier: EC:58:C9:7F:49:D9:6A:DA:C7:D3:35:DB:CC:23:96:00:B7:70:3C:E3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF7C4F3DE52A3DC21FA7E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98fa31a8-a2b1-351b-a45b-4cf8c34abfa1.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.21.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:7c:4f:3d:e5:2a:3d:c2:1f:a7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=39dd763d-6698-4523-a02d-73823ffd0ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:93:f3:34:0a:a4:2f:cd:4b:58:ec:96:97:bb: de:54:6b:86:46:59:56:15:bf:b2:3b:d7:ab:c0:74: f6:d0:5b:ff:1b:90:de:e0:de:39:2a:8e:4e:96:21: 95:e2:58:93:56:05:da:d8:f0:f3:70:d0:bb:50:69: 62:02:d6:5c:3b:5f:e0:8a:e8:bd:de:47:4d:75:80: 63:88:6c:ed:11:1e:35:d6:5b:ff:0a:d6:2a:ed:88: 6b:8a:87:21:7d:b8:dc:45:8f:60:c3:6a:4e:78:55: fb:a9:d3:88:41:c0:dd:e8:81:3e:f3:87:62:35:37: ee:12:51:b7:12:a6:bb:f6:71:88:41:06:39:ae:86: d0:2d:76:1f:61:84:7a:ac:4c:af:92:d6:20:b8:fb: ce:0e:fa:5d:b2:37:d1:8e:65:6b:f8:a2:b3:56:4e: 51:f6:c0:f0:2a:a7:3f:f1:60:96:a8:58:8c:17:21: ae:1b:a9:b1:17:82:eb:f3:49:85:12:f7:95:8b:64: f4:03:d0:7a:c6:67:b1:61:85:2d:07:6e:f1:62:0f: 6a:4e:3f:69:ae:31:6a:b0:38:b6:1e:2f:54:dd:1d: b0:d6:18:b0:60:35:f3:dd:a9:c4:0b:67:4c:f2:78: 37:75:55:e4:57:b0:16:65:83:a3:ff:73:88:4c:e4: 00:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:58:C9:7F:49:D9:6A:DA:C7:D3:35:DB:CC:23:96:00:B7:70:3C:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/98fa31a8-a2b1-351b-a45b-4cf8c34abfa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:02:34:f3:31:40:13:5c:51:75:48:4f:20:5a:d7:30:61:bf: c8:38:ef:28:ff:9c:3d:19:23:d9:c0:5b:0a:fc:ad:7b:a9:2c: de:89:a9:ba:ee:f5:e3:4b:41:39:2a:14:fc:12:d2:4b:5c:23: 80:e4:57:29:91:af:db:56:a5:d2:1c:ca:ed:b1:8a:ce:d7:ea: a9:c5:e3:72:31:5a:51:b3:2f:70:2e:f0:6f:a9:c8:42:71:2e: 53:3a:1d:22:0b:56:ae:ce:fb:ec:90:d2:df:ff:f5:48:20:7f: 08:14:7e:63:e6:a1:47:c0:3f:f5:32:25:49:c7:d6:18:2f:a1: 5d:90:0d:a0:d9:bd:9d:e9:d4:b7:22:a3:c8:ef:cc:f1:ce:73: e5:d9:38:d0:df:95:30:4a:33:dc:df:07:1a:91:82:2c:7c:57: 1f:56:51:ad:f7:9b:65:e6:2d:a9:29:7b:90:52:c6:0d:08:7d: 60:96:ae:4a:79:5a:01:a5:f2:ce:3c:f2:ee:35:ae:0c:00:ca: 40:9f:5a:f1:a9:05:08:34:09:01:0d:38:f5:a3:e6:2a:b9:18: 31:67:cb:44:55:47:3a:7f:85:cd:83:d1:ae:99:72:69:8f:8e: 3f:eb:cb:40:8b:c8:aa:03:ec:51:48:33:9b:39:f5:0e:0f:ee: 53:57:a4:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k33xPPeUqPcIfp+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzlkZDc2M2QtNjY5OC00NTIzLWEwMmQtNzM4MjNmZmQwYWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJPzNAqkL81LWOyWl7veVGuGRllWFb+yO9er wHT20Fv/G5De4N45Ko5OliGV4liTVgXa2PDzcNC7UGliAtZcO1/giui93kdNdYBj iGztER411lv/CtYq7YhriochfbjcRY9gw2pOeFX7qdOIQcDd6IE+84diNTfuElG3 Eqa79nGIQQY5robQLXYfYYR6rEyvktYguPvODvpdsjfRjmVr+KKzVk5R9sDwKqc/ 8WCWqFiMFyGuG6mxF4Lr80mFEveVi2T0A9B6xmexYYUtB27xYg9qTj9prjFqsDi2 Hi9U3R2w1hiwYDXz3anEC2dM8ng3dVXkV7AWZYOj/3OITOQAyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxYyX9J2Wrax9M128wjlgC3cDzjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOThmYTMxYTgtYTJiMS0z NTFiLWE0NWItNGNmOGMzNGFiZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8CNPMxQBNcUXVITyBa1zBhv8g47yj/nD0ZI9nAWwr8rXupLN6Jqbru 9eNLQTkqFPwS0ktcI4DkVymRr9tWpdIcyu2xis7X6qnF43IxWlGzL3Au8G+pyEJx LlM6HSILVq7O++yQ0t//9UggfwgUfmPmoUfAP/UyJUnH1hgvoV2QDaDZvZ3p1Lci o8jvzPHOc+XZONDflTBKM9zfBxqRgix8Vx9WUa33m2XmLakpe5BSxg0IfWCWrkp5 WgGl8s488u41rgwAykCfWvGpBQg0CQENOPWj5iq5GDFny0RVRzp/hc2D0a6ZcmmP jj/ry0CLyKoD7FFIM5s59Q4P7lNXpD4= -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:23 2026 by rpki-client