$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa File: a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa (raw, json) Hash identifier: f9T7VwUALrPg7CE8s/J+2t/VWdC3hipI18vzrbJIFNU= Subject key identifier: 2A:81:48:D5:14:02:2B:42:EC:38:C8:7E:A5:38:64:E0:5D:23:E3:99 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AAC9CC4E5721BE426FC940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.17.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:c9:cc:4e:57:21:be:42:6f:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=eeda0e8f-4744-42a6-91cf-6c324b8f18af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:38:f6:51:00:3f:9f:59:53:fb:26:1a:16:16: b9:b2:c5:1e:30:ef:dc:ae:e0:c2:21:02:d5:f3:d6: b7:d5:6f:04:42:81:76:ce:78:46:80:34:2a:f0:a5: 8c:ce:0d:23:21:d5:d7:4b:49:7c:28:79:9e:49:c5: 6e:49:cc:d3:fb:14:98:67:10:fd:bb:fb:c8:d6:d1: 65:65:4f:fa:78:9b:2a:1f:47:fc:12:8c:aa:db:49: 3f:1c:29:02:11:93:30:7a:59:c7:b4:76:f8:e4:29: 7c:83:82:5e:75:e5:b5:6a:b3:2d:ef:2d:e2:c8:10: 71:db:39:3f:f4:59:f5:ae:d4:bc:ab:79:a8:73:47: 78:7b:62:16:9d:f0:75:83:32:8f:56:9b:62:4c:31: e1:86:17:a4:68:d6:e6:af:82:b4:36:2f:cf:f9:f9: 41:16:30:8d:2b:3d:04:4d:bc:25:de:cc:19:85:f7: f2:b1:fc:d0:b9:be:e1:e7:4b:9d:4a:c3:47:07:ff: ac:aa:04:e1:71:63:a7:57:3e:4a:eb:c2:aa:38:a6: b1:b8:9c:c3:34:13:5c:d6:d8:1f:44:12:f8:35:69: d5:01:05:72:dc:f8:56:52:f0:e6:0a:6c:55:73:58: 17:b3:43:1a:be:59:3b:10:51:63:38:a7:f6:5b:aa: 36:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:81:48:D5:14:02:2B:42:EC:38:C8:7E:A5:38:64:E0:5D:23:E3:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a7cfa9be-e28e-39cb-b724-508b2c7f1e73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d7:16:06:c4:ef:d2:f3:23:30:8d:26:95:36:bf:05:6e:a3: 5d:8a:7c:45:38:55:2a:63:c8:9c:e1:27:3f:0a:2e:95:4d:2c: b8:9a:ad:00:0a:2c:86:0d:4a:12:2d:40:50:ab:33:44:bb:b6: a5:8d:b9:a9:40:d5:f1:52:f2:eb:9f:0a:c7:15:bb:0b:e0:5b: a8:5e:6d:52:b8:28:1c:34:1b:b2:8f:56:61:1b:86:d4:71:17: 6f:95:73:07:96:4e:9e:7d:8d:b6:d9:e7:ff:40:c7:99:97:92: 52:4b:73:e3:7a:3f:de:6d:9c:6e:5a:9f:59:f3:9e:d0:91:4b: 75:ac:d2:39:27:3f:00:cc:f1:56:68:e9:a4:4a:8b:08:1c:be: 2e:75:e1:63:b3:67:eb:3f:2b:1a:7a:8b:e8:6a:0f:ae:b7:98: 5d:03:6f:54:aa:ec:a2:ee:68:f3:65:86:1d:4f:15:bb:8d:58: a8:7d:14:15:90:49:10:6c:d7:71:14:76:8a:42:71:81:6d:53: fc:77:e9:54:a9:86:ed:83:29:15:43:ff:b6:66:c1:f5:d5:a0: 0d:c6:56:79:70:29:69:29:e4:1f:ff:13:9d:94:a8:11:38:4a: 8f:eb:0f:63:69:20:15:95:53:1d:3e:57:e5:e2:46:65:10:fb: 98:bb:2a:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqsnMTlchvkJvyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZWVkYTBlOGYtNDc0NC00MmE2LTkxY2YtNmMzMjRiOGYxOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDj2UQA/n1lT+yYaFha5ssUeMO/cruDCIQLV 89a31W8EQoF2znhGgDQq8KWMzg0jIdXXS0l8KHmeScVuSczT+xSYZxD9u/vI1tFl ZU/6eJsqH0f8Eoyq20k/HCkCEZMwelnHtHb45Cl8g4JedeW1arMt7y3iyBBx2zk/ 9Fn1rtS8q3moc0d4e2IWnfB1gzKPVptiTDHhhhekaNbmr4K0Ni/P+flBFjCNKz0E Tbwl3swZhffysfzQub7h50udSsNHB/+sqgThcWOnVz5K68KqOKaxuJzDNBNc1tgf RBL4NWnVAQVy3PhWUvDmCmxVc1gXs0Mavlk7EFFjOKf2W6o2mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqBSNUUAitC7DjIfqU4ZOBdI+OZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTdjZmE5YmUtZTI4ZS0z OWNiLWI3MjQtNTA4YjJjN2YxZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDXFgbE79LzIzCNJpU2vwVuo12KfEU4VSpjyJzhJz8KLpVNLLiarQAK LIYNShItQFCrM0S7tqWNualA1fFS8uufCscVuwvgW6hebVK4KBw0G7KPVmEbhtRx F2+VcweWTp59jbbZ5/9Ax5mXklJLc+N6P95tnG5an1nzntCRS3Ws0jknPwDM8VZo 6aRKiwgcvi514WOzZ+s/Kxp6i+hqD663mF0Db1Sq7KLuaPNlhh1PFbuNWKh9FBWQ SRBs13EUdopCcYFtU/x36VSphu2DKRVD/7ZmwfXVoA3GVnlwKWkp5B//E52UqBE4 So/rD2NpIBWVUx0+V+XiRmUQ+5i7KvA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:31 2026 by rpki-client