$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d9be207-a67e-35f2-b44f-60bfe095dea2.roa File: 9d9be207-a67e-35f2-b44f-60bfe095dea2.roa (raw, json) Hash identifier: 7zkzXi6kM1SruU9SOagopWiEE4d78I0UbwhwQGypQ+M= Subject key identifier: A5:F5:C8:59:31:C5:18:A3:1A:21:4D:08:94:C2:65:EE:9D:94:84:D6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E12E4CBA2FA5049735F400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d9be207-a67e-35f2-b44f-60bfe095dea2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.28.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2e:4c:ba:2f:a5:04:97:35:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a6b2b596-4e35-4364-8834-df5dfac73def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a3:4a:22:ae:c2:85:24:ec:0d:65:a2:c1:2c: 85:ab:18:bd:87:9b:2c:8b:2c:ab:27:14:c0:f2:61: 5e:f3:a3:a7:bb:60:fc:ea:fd:c8:74:93:bf:6d:44: 2b:ba:48:54:fc:73:9b:e0:d8:c7:f6:f0:b6:d5:2d: c9:75:69:c9:4a:c0:31:69:6a:f6:e5:b2:8b:88:80: a7:78:3f:f9:0c:66:21:b2:32:bb:ee:9b:f9:ec:25: 4f:15:70:ee:8b:d7:a1:f0:d8:32:1d:20:a1:ab:83: 15:c8:f0:60:aa:2b:40:48:9f:5f:36:c5:e9:c2:36: 9d:4c:c9:88:64:9b:7a:7c:2d:b9:12:71:25:1f:58: 33:b0:79:d4:3f:57:13:5e:54:9b:80:24:e1:57:4e: 41:fb:95:40:a7:0d:17:55:5e:97:4c:6c:73:dd:42: 8e:9d:49:d3:d8:00:3a:43:da:c7:6e:1c:9f:47:66: bf:a5:9b:38:cf:e1:9e:7f:64:5c:09:46:8d:2f:b5: 30:b9:9d:d3:1b:0a:06:d6:df:14:3e:1f:5f:8e:32: bd:d4:35:23:c9:27:25:d2:19:81:ef:26:bd:60:2d: d8:fc:15:4a:f7:ff:8d:57:43:24:0d:be:8a:ab:20: 4c:2b:ab:d3:f2:a0:36:ed:9c:18:4c:23:29:ca:70: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F5:C8:59:31:C5:18:A3:1A:21:4D:08:94:C2:65:EE:9D:94:84:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d9be207-a67e-35f2-b44f-60bfe095dea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c6:9e:db:15:dc:ca:74:30:e4:62:cb:eb:90:dc:bf:4b:ec: 43:07:b6:1a:15:bf:52:ba:92:1c:bf:0e:15:5c:a8:c4:02:b9: 70:24:47:d6:98:7d:55:a5:52:c7:bf:11:4c:43:9a:10:2a:5b: f9:46:29:9d:80:9a:78:24:61:b2:fa:39:2b:1f:1f:11:18:b4: ee:c9:47:50:6f:b8:7c:b7:62:a5:5a:b0:fd:9a:fc:12:87:8b: cd:e7:70:21:9b:44:b8:87:aa:b5:c8:91:e2:f6:92:3b:e9:10: 1e:4e:be:28:c1:cd:94:77:55:89:47:48:ea:43:57:c5:f4:e9: 0d:23:8c:83:c4:42:16:6a:1e:be:d7:3d:41:ee:10:c0:f1:39: e3:21:fa:b3:41:13:22:da:df:c0:de:12:c6:c3:1a:4e:a4:06: a0:58:00:cd:dc:b9:52:76:65:54:05:14:9a:5a:97:76:22:5f: 0e:ca:1b:fc:dd:8f:8f:f2:fb:71:c0:ad:38:18:98:80:8d:99: 57:ed:50:56:0a:cd:3f:c2:32:98:16:8a:6a:59:ff:51:66:05: ef:a3:55:da:bb:7e:a2:a5:23:fe:f1:4a:39:0a:5b:c3:2b:55: 5f:0d:1b:ab:58:05:47:7a:26:1a:88:19:94:19:67:55:85:d6: 5e:76:de:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4S5Mui+lBJc19AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTZiMmI1OTYtNGUzNS00MzY0LTg4MzQtZGY1ZGZhYzczZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaNKIq7ChSTsDWWiwSyFqxi9h5ssiyyrJxTA 8mFe86Onu2D86v3IdJO/bUQrukhU/HOb4NjH9vC21S3JdWnJSsAxaWr25bKLiICn eD/5DGYhsjK77pv57CVPFXDui9eh8NgyHSChq4MVyPBgqitASJ9fNsXpwjadTMmI ZJt6fC25EnElH1gzsHnUP1cTXlSbgCThV05B+5VApw0XVV6XTGxz3UKOnUnT2AA6 Q9rHbhyfR2a/pZs4z+Gef2RcCUaNL7UwuZ3TGwoG1t8UPh9fjjK91DUjyScl0hmB 7ya9YC3Y/BVK9/+NV0MkDb6KqyBMK6vT8qA27ZwYTCMpynCPuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX1yFkxxRijGiFNCJTCZe6dlITWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWQ5YmUyMDctYTY3ZS0z NWYyLWI0NGYtNjBiZmUwOTVkZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRz+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATGntsV3Mp0MORiy+uQ3L9L7EMHthoVv1K6khy/DhVcqMQCuXAkR9aY fVWlUse/EUxDmhAqW/lGKZ2AmngkYbL6OSsfHxEYtO7JR1BvuHy3YqVasP2a/BKH i83ncCGbRLiHqrXIkeL2kjvpEB5OvijBzZR3VYlHSOpDV8X06Q0jjIPEQhZqHr7X PUHuEMDxOeMh+rNBEyLa38DeEsbDGk6kBqBYAM3cuVJ2ZVQFFJpal3YiXw7KG/zd j4/y+3HArTgYmICNmVftUFYKzT/CMpgWimpZ/1FmBe+jVdq7fqKlI/7xSjkKW8Mr VV8NG6tYBUd6JhqIGZQZZ1WF1l523jU= -----END CERTIFICATE-----Generated at Thu Mar 26 12:59:08 2026 by rpki-client