$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1d79f2c-48dd-3e7c-b4db-e94cdb4b466c.roa File: b1d79f2c-48dd-3e7c-b4db-e94cdb4b466c.roa (raw, json) Hash identifier: 6DRE6WmC+2kTiq8mHvZXDrMVW1fEKOtWNPltYc6Sdfw= Subject key identifier: B9:97:C2:AE:35:3A:11:C6:68:7B:4B:B9:67:38:B1:51:6D:D6:60:AA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF9F655942012BEBC78800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1d79f2c-48dd-3e7c-b4db-e94cdb4b466c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.22.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:9f:65:59:42:01:2b:eb:c7:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=40646700-773f-4be3-8220-4d47bf51e1e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:f9:c7:b5:ea:77:19:19:b4:ca:b0:26:c9: df:bd:f0:0f:2e:b9:b9:69:65:9d:3d:fe:aa:e1:d9: 36:d8:19:a1:3b:b4:bf:ac:41:93:1b:f3:5b:a7:a1: 26:b2:ea:19:23:b3:39:94:65:9a:ac:ef:2b:19:60: 8a:5e:a7:e8:76:40:22:a1:26:62:75:b7:24:9e:f2: 9f:0e:05:a3:b3:61:53:ef:ac:ca:c8:43:fa:61:d8: fd:a9:fa:33:90:b3:df:ec:9e:d0:30:1b:2a:56:30: 7c:eb:2d:20:d5:bf:a2:42:a2:07:43:ab:30:9e:09: 43:74:79:b9:ef:01:8e:23:0f:c6:47:a3:35:ad:a2: 2b:06:a6:b1:b3:73:12:34:78:6f:a1:54:e2:ae:b0: 49:03:f9:56:ae:13:4d:56:24:2d:fd:b7:0e:fd:c7: 4c:1a:cb:83:45:0f:28:8b:e0:66:30:f8:fd:6a:1f: 4a:1d:43:72:3f:4e:9a:01:24:ea:1c:41:23:15:cc: 25:4f:15:44:e5:63:1f:09:2a:b1:64:80:d8:c3:65: f3:36:90:88:cc:5c:c1:fe:ae:b6:51:3b:25:2e:10: e1:1d:78:8c:48:17:65:ff:67:8b:6a:e2:cd:56:75: a0:bb:6a:8d:64:62:24:9c:a0:46:40:71:e6:be:52: 8d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:97:C2:AE:35:3A:11:C6:68:7B:4B:B9:67:38:B1:51:6D:D6:60:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b1d79f2c-48dd-3e7c-b4db-e94cdb4b466c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:4e:04:4f:7c:fe:ba:c0:50:48:a2:5d:2e:43:6d:42:3c:e0: fc:9a:d4:8f:bc:5e:1f:f7:02:4f:91:61:a3:1f:ed:f6:1a:cc: 44:dc:97:7f:5d:44:6e:01:83:2d:27:3f:38:5b:52:ef:9f:f8: fb:d3:2b:63:c1:79:ae:e0:e6:3f:5d:a4:c8:e2:3a:1f:01:4f: c3:ed:96:fe:bd:74:22:a9:11:32:e3:dd:7e:3c:b4:ea:9b:4e: 7d:19:98:bc:ea:cf:1e:67:8c:42:50:ef:7f:ee:a1:41:dc:d5: b0:33:2c:42:9d:6a:4b:6d:83:25:a2:54:fc:44:4f:08:57:0f: 37:8f:47:02:9c:6d:2c:b4:5a:1d:8a:8f:31:05:96:e6:ce:6f: 94:6d:a4:78:33:74:6b:1d:af:ec:20:ef:4f:fa:f0:67:50:02: 08:98:1c:dc:6b:68:ed:e4:2a:27:6d:ad:c4:cc:1c:71:5d:1c: 67:d4:87:04:c8:9a:9a:4d:fb:d4:6d:9a:d6:9c:85:d2:80:fb: fc:7c:54:71:f5:54:ae:3c:c4:48:ad:d1:4e:40:0a:81:49:da: 58:d8:55:98:9e:e1:89:0d:a2:4c:d3:ab:0b:a8:7d:29:de:d3: 6f:a7:7c:a5:47:94:d7:12:40:8d:45:0a:d0:fb:e9:8d:f9:5c: ac:ff:d7:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k359lWUIBK+vHiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDA2NDY3MDAtNzczZi00YmUzLTgyMjAtNGQ0N2JmNTFlMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdv5x7XqdxkZtMqwJsnfvfAPLrm5aWWdPf6q 4dk22BmhO7S/rEGTG/Nbp6EmsuoZI7M5lGWarO8rGWCKXqfodkAioSZidbcknvKf DgWjs2FT76zKyEP6Ydj9qfozkLPf7J7QMBsqVjB86y0g1b+iQqIHQ6swnglDdHm5 7wGOIw/GR6M1raIrBqaxs3MSNHhvoVTirrBJA/lWrhNNViQt/bcO/cdMGsuDRQ8o i+BmMPj9ah9KHUNyP06aASTqHEEjFcwlTxVE5WMfCSqxZIDYw2XzNpCIzFzB/q62 UTslLhDhHXiMSBdl/2eLauLNVnWgu2qNZGIknKBGQHHmvlKNHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmXwq41OhHGaHtLuWc4sVFt1mCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjFkNzlmMmMtNDhkZC0z ZTdjLWI0ZGItZTk0Y2RiNGI0NjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpOBE98/rrAUEiiXS5DbUI84Pya1I+8Xh/3Ak+RYaMf7fYazETcl39d RG4Bgy0nPzhbUu+f+PvTK2PBea7g5j9dpMjiOh8BT8Ptlv69dCKpETLj3X48tOqb Tn0ZmLzqzx5njEJQ73/uoUHc1bAzLEKdakttgyWiVPxETwhXDzePRwKcbSy0Wh2K jzEFlubOb5RtpHgzdGsdr+wg70/68GdQAgiYHNxraO3kKidtrcTMHHFdHGfUhwTI mppN+9RtmtachdKA+/x8VHH1VK48xEit0U5ACoFJ2ljYVZie4YkNokzTqwuofSne 02+nfKVHlNcSQI1FCtD76Y35XKz/1z8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:05:00 2026 by rpki-client