$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9f86307-8f42-3703-91c1-ef6e08cbe97c.roa File: a9f86307-8f42-3703-91c1-ef6e08cbe97c.roa (raw, json) Hash identifier: wKSE63XRTk9UScJrcGgoW8ve60mpC7lxi3lPktu3x5o= Subject key identifier: DA:13:C7:FD:44:E4:97:53:05:FB:14:0A:39:71:A0:49:8C:70:9F:8F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF9364B0E252AD71343680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9f86307-8f42-3703-91c1-ef6e08cbe97c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.18.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:93:64:b0:e2:52:ad:71:34:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3b50c237-f235-4bff-a68a-34e500100318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f6:a7:57:c9:30:b2:ca:88:9d:f1:b0:62:13: 89:d0:ae:4e:6e:62:b1:3e:cb:91:92:8c:9d:b2:89: f7:5e:bf:a6:03:32:00:ae:c4:15:80:6e:0b:27:20: d8:5a:ea:58:e5:bf:90:0d:2b:53:c1:68:9e:60:5c: 1c:1a:79:31:61:90:f7:27:f1:ce:d9:86:95:a4:3e: c4:b2:4d:5c:53:4d:db:4d:69:84:f8:79:08:b4:9c: 84:c5:81:55:34:7c:69:ca:1e:2a:45:c2:92:e4:ae: 8f:32:e7:4c:a1:d2:07:8e:55:ca:68:c1:31:43:5d: c2:d1:9d:76:c5:a5:29:df:0b:d7:28:42:68:c7:34: 01:3d:30:e8:17:0c:fb:0a:fb:10:4b:1e:59:60:7a: fc:ae:96:d6:77:3f:7c:b1:38:57:6e:57:06:c2:3a: 63:9f:4b:91:86:4f:cd:f9:70:af:e6:44:a5:d5:56: a5:c1:b4:6a:fd:e1:7d:6d:7b:1b:cb:df:cb:a4:b3: 14:83:ed:eb:2f:ec:0a:1f:78:e2:8f:ad:47:0d:ba: 75:1e:4f:94:4c:d8:69:78:0d:e9:b6:dd:d3:45:7b: 43:94:95:76:b0:1f:5e:69:a3:98:19:f3:0c:ca:0a: 1c:82:f9:55:17:5a:7f:5e:a7:a6:b4:bb:ee:13:70: 87:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:13:C7:FD:44:E4:97:53:05:FB:14:0A:39:71:A0:49:8C:70:9F:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9f86307-8f42-3703-91c1-ef6e08cbe97c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ad:28:a7:b2:c3:76:8b:2a:95:d8:5d:22:01:44:be:fa:3c: f1:5f:21:d3:c3:2d:f5:5b:6a:ae:06:f2:7b:ac:4b:3f:bb:8c: b3:e1:21:aa:b8:ac:92:6f:fb:ed:13:72:26:a1:41:ac:cc:92: 90:c0:24:c3:3d:ed:c8:ad:31:fe:b2:10:e5:01:27:f5:67:8f: 44:9a:9b:d8:41:f8:77:3d:2c:ac:8a:36:68:a6:5a:ac:cb:7a: 4c:aa:74:96:a4:b5:f6:36:3e:e8:62:3d:b2:d1:bd:a9:a8:2d: 97:0e:eb:f7:e6:22:86:93:ed:2a:30:a9:d2:02:c9:48:bb:2c: e6:6e:af:b6:4e:92:db:f8:c6:7c:f9:ad:fd:dd:5d:eb:38:34: 46:bc:65:68:e1:d5:8c:a5:fc:42:d4:71:85:a6:1d:2e:e1:d1: 48:02:39:1c:5f:08:b5:b5:c4:fa:12:2c:e1:b8:46:42:87:f0: 38:c1:d2:9b:61:8e:ec:34:45:b1:18:44:ae:ef:e8:d8:61:8f: c4:23:f9:5d:6d:0f:ea:48:a4:bc:a2:5e:15:4f:af:27:b1:35: fc:5e:81:d9:90:fc:7e:15:79:b9:65:8e:06:1c:c7:8b:61:8d: 51:1c:99:6f:77:a9:79:c8:91:e4:a8:73:9b:ba:0b:c4:76:97: 35:44:1a:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35NksOJSrXE0NoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2I1MGMyMzctZjIzNS00YmZmLWE2OGEtMzRlNTAwMTAwMzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPanV8kwssqInfGwYhOJ0K5ObmKxPsuRkoyd son3Xr+mAzIArsQVgG4LJyDYWupY5b+QDStTwWieYFwcGnkxYZD3J/HO2YaVpD7E sk1cU03bTWmE+HkItJyExYFVNHxpyh4qRcKS5K6PMudModIHjlXKaMExQ13C0Z12 xaUp3wvXKEJoxzQBPTDoFwz7CvsQSx5ZYHr8rpbWdz98sThXblcGwjpjn0uRhk/N +XCv5kSl1ValwbRq/eF9bXsby9/LpLMUg+3rL+wKH3jij61HDbp1Hk+UTNhpeA3p tt3TRXtDlJV2sB9eaaOYGfMMygocgvlVF1p/XqemtLvuE3CHZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoTx/1E5JdTBfsUCjlxoEmMcJ+PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTlmODYzMDctOGY0Mi0z NzAzLTkxYzEtZWY2ZTA4Y2JlOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRLkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCtKKeyw3aLKpXYXSIBRL76PPFfIdPDLfVbaq4G8nusSz+7jLPhIaq4 rJJv++0TciahQazMkpDAJMM97citMf6yEOUBJ/Vnj0Sam9hB+Hc9LKyKNmimWqzL ekyqdJaktfY2PuhiPbLRvamoLZcO6/fmIoaT7SowqdICyUi7LOZur7ZOktv4xnz5 rf3dXes4NEa8ZWjh1Yyl/ELUcYWmHS7h0UgCORxfCLW1xPoSLOG4RkKH8DjB0pth juw0RbEYRK7v6Nhhj8Qj+V1tD+pIpLyiXhVPryexNfxegdmQ/H4VeblljgYcx4th jVEcmW93qXnIkeSoc5u6C8R2lzVEGj4= -----END CERTIFICATE-----Generated at Thu Mar 26 17:54:22 2026 by rpki-client