$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad35f282-4358-39cf-a530-e512a7b2efe6.roa File: ad35f282-4358-39cf-a530-e512a7b2efe6.roa (raw, json) Hash identifier: y8IKYPcTAS5YBraELByLdiZgdFAWoyFChIwbjUY8VGw= Subject key identifier: 0F:D4:1E:97:42:AC:E5:73:EC:AF:35:A2:6A:84:28:71:18:83:5A:82 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E1136F0F9EC384852F45C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad35f282-4358-39cf-a530-e512a7b2efe6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.21.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:13:6f:0f:9e:c3:84:85:2f:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5289ab28-b0b6-4c41-bd46-4fe314d878a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:0a:0d:08:84:2d:3f:e2:a7:eb:c7:60:9a: c4:b6:1b:83:37:a7:e5:38:03:f8:db:29:f5:7d:a9: dd:49:0a:b1:be:c9:9b:89:3f:ac:9f:10:8a:da:aa: 35:43:85:81:e4:b0:9e:a6:dd:4f:f5:54:5d:bf:ad: 63:bb:e1:97:9f:09:63:6e:e1:93:02:b6:76:28:47: 47:ac:c6:8c:0a:70:29:ab:f4:0f:9c:68:25:04:ae: 81:a3:07:d9:76:f6:69:76:92:3a:75:f9:9c:d6:bc: 94:85:db:cb:48:a8:63:e2:38:b7:4f:b7:3f:3a:ec: f3:d5:c2:af:be:e7:c8:68:66:9e:30:f6:9c:80:00: bb:9c:b2:f7:b6:2c:53:24:21:57:c9:33:9b:a2:79: 40:d2:88:e6:c0:2e:fb:3a:f0:95:6f:df:9f:fe:b3: db:79:61:f2:28:74:5e:75:74:b0:b9:0b:85:87:f7: 8f:b8:93:22:25:6d:0e:8e:49:8c:20:6d:9a:33:3d: c1:55:66:17:9f:ec:f3:a2:e6:f7:de:39:f4:44:b0: 89:cc:73:5e:78:c7:92:60:c4:5a:6e:18:ba:bd:37: ee:45:83:84:90:e3:cb:13:34:96:e7:6d:29:b8:db: a5:5f:df:83:6d:4e:05:50:49:95:b9:1d:e3:a2:10: 87:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D4:1E:97:42:AC:E5:73:EC:AF:35:A2:6A:84:28:71:18:83:5A:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad35f282-4358-39cf-a530-e512a7b2efe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d1:c9:3f:cf:fa:55:37:43:b7:57:b7:e3:2e:20:20:ba:2f: 7e:f1:44:bb:f1:26:12:42:4b:5e:3a:3a:14:bd:f9:e7:ee:ff: 73:98:58:4b:72:2f:7b:2e:23:a3:ff:a4:3f:7f:a9:b1:17:d5: 27:86:4e:73:fb:c4:69:a9:64:38:f4:06:00:aa:bc:c1:f7:42: 59:0e:da:cf:a9:52:3e:9b:17:6e:ff:89:a0:a9:f1:c1:b6:a1: a4:39:34:b5:da:1e:69:89:38:d0:a2:de:a4:7c:d1:97:5b:42: 90:24:bf:d7:66:2e:97:bb:9e:a1:20:15:79:18:3b:ae:f3:71: bc:67:10:0d:21:fa:8c:80:50:ab:21:ab:da:66:d5:35:57:80: 9b:5b:df:83:d9:1e:d5:e3:42:4a:31:4b:c2:ca:e7:34:3a:78: ad:3a:45:6b:bb:15:cc:6a:5b:e0:c7:6d:ae:b5:9a:42:31:23: 98:0f:8f:0a:da:a3:b1:8a:74:c5:e0:c8:0c:27:b0:0c:be:9a: 7c:9a:ac:26:21:25:b9:93:e0:e7:f3:a5:a5:e6:09:ff:5e:88: 78:78:d1:47:fe:41:7c:86:b6:cf:a9:7d:1b:e7:ea:13:17:7e: 82:3b:86:36:30:92:81:04:0d:ba:85:8a:75:64:81:99:95:df: 28:9b:c9:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RNvD57DhIUvRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTI4OWFiMjgtYjBiNi00YzQxLWJkNDYtNGZlMzE0ZDg3OGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy4KDQiELT/ip+vHYJrEthuDN6flOAP42yn1 fandSQqxvsmbiT+snxCK2qo1Q4WB5LCept1P9VRdv61ju+GXnwljbuGTArZ2KEdH rMaMCnApq/QPnGglBK6BowfZdvZpdpI6dfmc1ryUhdvLSKhj4ji3T7c/Ouzz1cKv vufIaGaeMPacgAC7nLL3tixTJCFXyTObonlA0ojmwC77OvCVb9+f/rPbeWHyKHRe dXSwuQuFh/ePuJMiJW0OjkmMIG2aMz3BVWYXn+zzoub33jn0RLCJzHNeeMeSYMRa bhi6vTfuRYOEkOPLEzSW520puNulX9+DbU4FUEmVuR3johCHZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/UHpdCrOVz7K81omqEKHEYg1qCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWQzNWYyODItNDM1OC0z OWNmLWE1MzAtZTUxMmE3YjJlZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADRyT/P+lU3Q7dXt+MuICC6L37xRLvxJhJCS146OhS9+efu/3OYWEty L3suI6P/pD9/qbEX1SeGTnP7xGmpZDj0BgCqvMH3QlkO2s+pUj6bF27/iaCp8cG2 oaQ5NLXaHmmJONCi3qR80ZdbQpAkv9dmLpe7nqEgFXkYO67zcbxnEA0h+oyAUKsh q9pm1TVXgJtb34PZHtXjQkoxS8LK5zQ6eK06RWu7FcxqW+DHba61mkIxI5gPjwra o7GKdMXgyAwnsAy+mnyarCYhJbmT4OfzpaXmCf9eiHh40Uf+QXyGts+pfRvn6hMX foI7hjYwkoEEDbqFinVkgZmV3yibyX4= -----END CERTIFICATE-----Generated at Thu Mar 26 07:37:57 2026 by rpki-client