$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa File: ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa (raw, json) Hash identifier: 3vLYy/OKGVnIL4XhhROgWnofb/o9TO3a59UgO/uaSos= Subject key identifier: 26:11:AB:21:72:D3:C1:9E:CD:0D:99:B6:CE:87:5F:44:42:AB:D4:97 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF96BB11BF5A7D953CFC80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.21.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:96:bb:11:bf:5a:7d:95:3c:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f5543eb3-ae7a-4285-96ef-17b724909202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:04:33:f8:31:dc:57:23:3b:4c:23:14:21: bf:23:7e:e6:95:79:3f:e4:d3:62:93:07:bd:a3:6a: 3f:3f:18:01:d8:ea:50:93:8b:13:7e:8c:0b:52:54: c8:a4:0d:82:f3:5b:db:8a:0c:75:c9:53:43:7d:ab: 99:a0:b5:8b:1e:30:ca:15:4e:64:97:b9:0c:24:42: f4:e0:db:7f:de:f6:9e:5a:cf:b3:28:5e:6a:58:ec: fa:64:75:58:0e:8f:1c:5e:65:7d:d8:67:d3:3b:98: 3d:60:99:65:39:a9:01:4d:21:e0:1e:46:17:01:1f: 2e:5a:2e:87:f2:07:f4:6f:f6:ec:0f:ad:80:da:df: 5b:7d:6c:e5:29:44:0d:bc:74:00:05:9b:5b:55:73: f5:94:b1:22:f5:77:07:90:d1:be:a5:35:e8:d9:2c: 55:fd:d2:a4:ee:ec:69:df:ad:1b:2f:04:ce:c7:41: 95:07:2d:de:9e:fa:7d:25:43:c5:00:c5:8f:a3:fb: bc:a9:b0:83:7e:d7:50:09:1a:95:7f:42:d2:b1:f4: 2a:4b:e4:c9:09:93:5a:a2:aa:55:5e:66:00:c7:a7: 5f:04:e7:47:79:e7:10:b3:f7:5b:cb:a3:96:af:95: 97:8a:ce:71:0e:61:45:97:c1:68:02:11:d5:5f:15: 09:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:11:AB:21:72:D3:C1:9E:CD:0D:99:B6:CE:87:5F:44:42:AB:D4:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:9d:a2:f0:f6:e6:b2:23:5a:a1:73:e8:02:c5:a6:d2:3f:bd: 03:60:23:9e:09:3d:d1:df:4a:09:d7:d3:c4:4e:dd:e9:b3:91: d9:60:55:bc:07:cb:37:0f:f6:c8:34:d9:d7:c7:ca:47:3c:d1: 0c:8d:d7:48:54:f8:d1:22:94:39:16:b5:1d:3c:e7:06:40:8f: b4:da:a7:bb:c1:4c:0a:ba:f5:e3:a4:cd:21:11:7b:df:f5:87: b8:e0:ef:eb:89:c5:d7:31:23:03:57:c2:89:61:bb:56:21:db: 74:eb:cd:45:c0:c7:5d:c7:93:d2:7f:62:46:25:6b:c3:c7:6e: 58:a0:0c:0e:4a:b1:8c:1b:ab:58:27:5d:db:82:02:9f:ee:9b: 2a:f1:7f:c5:e0:6a:82:30:e1:08:42:48:f3:4c:f9:8e:ab:8d: 2a:7c:43:28:1c:88:b3:13:3e:94:50:ac:19:a2:9c:ea:e5:49: 0e:49:46:4d:97:a1:29:a6:cf:d4:97:23:c1:d5:11:0e:78:46: de:82:d2:5c:d2:13:b9:b2:6d:0e:11:5a:e9:1a:db:ca:41:a4: 90:5f:82:19:d8:4d:53:dd:71:a0:49:7c:8e:a9:c0:f9:d7:e6: 14:38:e0:74:ed:3d:f2:7a:d1:36:9e:1c:4d:00:81:bb:33:82: b0:2b:73:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35a7Eb9afZU8/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjU1NDNlYjMtYWU3YS00Mjg1LTk2ZWYtMTdiNzI0OTA5MjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx4EM/gx3FcjO0wjFCG/I37mlXk/5NNikwe9 o2o/PxgB2OpQk4sTfowLUlTIpA2C81vbigx1yVNDfauZoLWLHjDKFU5kl7kMJEL0 4Nt/3vaeWs+zKF5qWOz6ZHVYDo8cXmV92GfTO5g9YJllOakBTSHgHkYXAR8uWi6H 8gf0b/bsD62A2t9bfWzlKUQNvHQABZtbVXP1lLEi9XcHkNG+pTXo2SxV/dKk7uxp 360bLwTOx0GVBy3envp9JUPFAMWPo/u8qbCDftdQCRqVf0LSsfQqS+TJCZNaoqpV XmYAx6dfBOdHeecQs/dby6OWr5WXis5xDmFFl8FoAhHVXxUJ8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYRqyFy08GezQ2Zts6HX0RCq9SXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWQ4YjAyOTMtYTNjMC0z MDY3LWE5ZTQtNmQzNWQyOGMxMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRWeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+dovD25rIjWqFz6ALFptI/vQNgI54JPdHfSgnX08RO3emzkdlgVbwH yzcP9sg02dfHykc80QyN10hU+NEilDkWtR085wZAj7Tap7vBTAq69eOkzSERe9/1 h7jg7+uJxdcxIwNXwolhu1Yh23TrzUXAx13Hk9J/YkYla8PHbligDA5KsYwbq1gn XduCAp/umyrxf8XgaoIw4QhCSPNM+Y6rjSp8QygciLMTPpRQrBminOrlSQ5JRk2X oSmmz9SXI8HVEQ54Rt6C0lzSE7mybQ4RWuka28pBpJBfghnYTVPdcaBJfI6pwPnX 5hQ44HTtPfJ60TaeHE0AgbszgrArc2U= -----END CERTIFICATE-----Generated at Thu Mar 26 16:04:30 2026 by rpki-client