$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2770d1b-29af-3f91-ad5e-8705f367fdc6.roa File: b2770d1b-29af-3f91-ad5e-8705f367fdc6.roa (raw, json) Hash identifier: rhE4Pbhe2uI1n/CPRlHAh1vwfpKKNR6qDfbqjpq3Suk= Subject key identifier: E5:3B:01:23:1D:81:07:37:9F:8C:DA:1F:7C:5A:E3:17:9D:BC:65:4F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF9996E83E3D3F6368E680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2770d1b-29af-3f91-ad5e-8705f367fdc6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.29.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:99:96:e8:3e:3d:3f:63:68:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3ee57700-ec83-497e-95c0-10227cc7af78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:73:de:af:22:8e:0b:7b:e8:1c:2c:cb:b1:39: d2:de:4e:d5:fb:14:62:23:df:bc:d3:69:fa:4e:9c: b6:e4:0e:7c:0d:ea:7c:7e:24:9b:b4:e2:b6:27:d4: 0e:fc:cf:30:65:69:a2:39:7b:0d:d5:5f:24:8b:e2: 5c:5e:b8:82:33:56:a8:a5:a9:09:07:12:6e:db:3e: ed:5c:a5:bf:19:de:24:56:af:06:d8:4e:c0:f5:63: e6:3c:c1:05:dd:eb:64:89:0c:87:c0:16:fe:90:50: 70:4d:89:c9:96:4b:bc:2d:7a:ea:42:b5:3a:96:a1: 2c:b5:e0:8e:f7:f2:00:f5:a8:db:7e:4a:68:f9:0e: 66:fd:56:64:26:86:38:ba:5c:e7:21:97:84:bd:0d: 5b:03:06:d4:fc:70:39:7b:c6:1a:6a:a3:32:97:46: 63:14:64:e5:81:59:87:4b:3d:57:d3:aa:4c:a1:9c: 42:ef:96:aa:fb:10:77:b2:26:56:22:05:b9:a0:4a: 5a:e9:02:1a:e3:98:99:01:a3:cd:39:a6:7e:cf:ad: 6f:b7:de:88:32:e6:fe:e9:ea:9c:44:61:79:af:ef: f3:63:cb:ce:da:53:ea:b0:0b:df:05:aa:d7:3c:7c: 34:fb:17:85:85:76:51:a4:fa:e3:4b:12:68:b6:ca: 10:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:3B:01:23:1D:81:07:37:9F:8C:DA:1F:7C:5A:E3:17:9D:BC:65:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2770d1b-29af-3f91-ad5e-8705f367fdc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:93:a1:23:25:c3:af:d2:70:34:39:dc:86:ec:3f:12:7c:11: 64:40:01:bf:0a:b4:e5:a2:20:68:18:33:0c:69:69:18:19:bf: 68:a5:31:b5:1f:ad:95:b6:ee:b5:58:6e:79:d3:3a:af:2d:36: e2:57:67:49:bf:59:97:a3:6c:17:13:52:16:d3:a5:1f:5a:a8: 66:57:95:45:ad:00:0b:a0:13:0e:fc:2e:e3:1c:6c:13:ec:78: 29:c4:20:16:7e:c4:e4:81:ea:97:e2:39:e1:41:9c:c0:f7:70: 69:49:d0:69:c7:3f:56:ff:f8:60:2d:5b:db:4d:4c:b6:84:3a: 37:31:ee:eb:8e:70:17:9f:36:06:30:87:13:5e:30:50:33:c4: 28:82:93:1c:74:b2:a3:63:4b:d0:ed:fb:32:13:5d:4c:be:6f: 88:87:23:16:08:bf:0e:d5:07:7e:dd:00:1c:14:f6:ea:c1:02: c1:19:19:cb:92:c4:99:46:e4:d9:25:9f:b3:d3:bb:12:12:a0: e2:01:bc:4e:18:c3:9e:7b:11:34:7e:0c:1e:41:38:be:5b:28: d8:8c:39:1f:9c:5f:a4:70:b4:09:c8:39:52:ac:df:5b:7c:a0: 2f:7c:b5:2f:5f:5d:17:e1:09:72:c0:bf:e2:07:f3:7a:8d:9c: 4f:d0:0e:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35mW6D49P2No5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2VlNTc3MDAtZWM4My00OTdlLTk1YzAtMTAyMjdjYzdhZjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHPeryKOC3voHCzLsTnS3k7V+xRiI9+802n6 Tpy25A58Dep8fiSbtOK2J9QO/M8wZWmiOXsN1V8ki+JcXriCM1aopakJBxJu2z7t XKW/Gd4kVq8G2E7A9WPmPMEF3etkiQyHwBb+kFBwTYnJlku8LXrqQrU6lqEsteCO 9/IA9ajbfkpo+Q5m/VZkJoY4ulznIZeEvQ1bAwbU/HA5e8YaaqMyl0ZjFGTlgVmH Sz1X06pMoZxC75aq+xB3siZWIgW5oEpa6QIa45iZAaPNOaZ+z61vt96IMub+6eqc RGF5r+/zY8vO2lPqsAvfBarXPHw0+xeFhXZRpPrjSxJotsoQLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOU7ASMdgQc3n4zaH3xa4xedvGVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjI3NzBkMWItMjlhZi0z ZjkxLWFkNWUtODcwNWYzNjdmZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASToSMlw6/ScDQ53IbsPxJ8EWRAAb8KtOWiIGgYMwxpaRgZv2ilMbUf rZW27rVYbnnTOq8tNuJXZ0m/WZejbBcTUhbTpR9aqGZXlUWtAAugEw78LuMcbBPs eCnEIBZ+xOSB6pfiOeFBnMD3cGlJ0GnHP1b/+GAtW9tNTLaEOjcx7uuOcBefNgYw hxNeMFAzxCiCkxx0sqNjS9Dt+zITXUy+b4iHIxYIvw7VB37dABwU9urBAsEZGcuS xJlG5Nkln7PTuxISoOIBvE4Yw557ETR+DB5BOL5bKNiMOR+cX6RwtAnIOVKs31t8 oC98tS9fXRfhCXLAv+IH83qNnE/QDto= -----END CERTIFICATE-----Generated at Thu Mar 26 07:42:19 2026 by rpki-client