$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2a8b3f6-bded-3677-b401-499c1139fa37.roa File: b2a8b3f6-bded-3677-b401-499c1139fa37.roa (raw, json) Hash identifier: OohhQ5cW8+urvtQ/YpfUT9MKd1E5O3rBBRj/REj8BBg= Subject key identifier: 97:BF:60:7A:AD:23:F8:6E:29:A8:F6:20:6A:5E:ED:30:88:0B:5F:C0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF8FB1A4AE45F62A85D400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2a8b3f6-bded-3677-b401-499c1139fa37.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 150.195.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:8f:b1:a4:ae:45:f6:2a:85:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=677413da-ac51-4c53-b244-659846075ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5c:6e:d0:62:21:79:d2:bc:dc:47:d0:1c:d5: 83:e6:b5:64:6d:a3:b4:6f:ad:1f:a6:e2:50:68:7e: da:d6:f5:c3:01:b3:0d:b3:bb:13:11:87:09:33:2b: 50:22:b9:c4:83:97:15:b0:96:3a:c0:9c:24:99:bd: e6:6c:f1:af:76:6c:05:fe:a2:fa:67:2d:3e:3d:ed: fd:62:ba:1a:d9:e3:22:dd:b9:0f:a0:bc:70:4e:be: d3:37:88:1e:f5:46:93:4f:c2:fc:a4:00:95:cb:4c: e2:25:a9:e4:0e:22:19:b2:ab:4a:66:ed:6c:a3:c4: 29:ee:4b:a1:00:7a:7e:8d:55:35:97:14:b2:bb:e3: 16:12:59:a6:99:d3:05:67:5d:0e:fa:1a:a0:19:d3: 80:4a:cd:4c:ef:66:ab:6f:71:8b:82:9e:cb:db:9e: e3:b8:3e:55:63:bd:f8:4f:59:20:1a:61:eb:c2:b2: 9c:7c:35:4e:4b:a7:ea:49:f8:aa:70:fa:73:13:aa: bc:70:af:ea:3e:67:6a:22:0d:52:bf:17:79:82:fd: 26:72:7e:db:65:32:a5:ad:90:53:63:ac:5f:19:a1: b8:f1:7b:f3:c0:fc:e5:30:7e:fc:63:df:8a:03:0c: 32:b1:4a:9e:0f:2e:4e:ef:4a:48:ce:cb:24:7f:5d: ae:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BF:60:7A:AD:23:F8:6E:29:A8:F6:20:6A:5E:ED:30:88:0B:5F:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2a8b3f6-bded-3677-b401-499c1139fa37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ed:68:ce:b3:70:4d:84:43:fb:20:80:ad:d8:9d:8d:03:4d: e9:6a:96:a4:fc:5c:4d:7e:7d:2a:1b:c8:d0:b8:18:15:ae:28: a8:7e:87:a8:1c:1a:79:1f:7a:7b:a7:f3:cf:ef:0e:54:36:ce: ef:1b:79:eb:07:3e:cb:77:b9:e1:db:c4:ea:e2:15:99:c0:0e: c1:4c:9b:e1:48:d6:1b:43:4f:f1:ba:4a:37:8b:5e:40:3e:22: 4c:6f:f2:6a:f4:d4:49:06:af:99:4b:39:1e:51:69:94:30:ba: cf:7b:00:35:e2:d3:9d:93:2c:89:93:23:aa:85:43:58:ac:54: e8:ea:a3:47:9a:22:3c:71:93:9f:3b:bb:76:36:d3:14:35:8b: de:c1:7e:fc:73:17:77:0a:13:71:04:d7:88:0b:f3:d0:c2:94: 45:85:d4:82:14:db:52:eb:4f:e2:67:9a:e1:a5:6d:06:33:72: 18:cf:06:de:82:57:d0:0d:18:bf:61:9c:14:05:7c:c3:a0:78: 1f:d0:e5:14:8d:54:27:9c:68:64:3f:8f:97:4b:07:b5:70:99: 3e:e2:01:2c:4f:7c:33:44:9b:76:46:8b:0e:b4:c7:4b:6a:f4: ad:f9:78:1c:af:78:61:b6:f7:75:ef:9e:8e:e8:e0:94:b4:1d: 87:52:fc:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k34+xpK5F9iqF1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Njc3NDEzZGEtYWM1MS00YzUzLWIyNDQtNjU5ODQ2MDc1ZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFxu0GIhedK83EfQHNWD5rVkbaO0b60fpuJQ aH7a1vXDAbMNs7sTEYcJMytQIrnEg5cVsJY6wJwkmb3mbPGvdmwF/qL6Zy0+Pe39 Yroa2eMi3bkPoLxwTr7TN4ge9UaTT8L8pACVy0ziJankDiIZsqtKZu1so8Qp7kuh AHp+jVU1lxSyu+MWElmmmdMFZ10O+hqgGdOASs1M72arb3GLgp7L257juD5VY734 T1kgGmHrwrKcfDVOS6fqSfiqcPpzE6q8cK/qPmdqIg1Svxd5gv0mcn7bZTKlrZBT Y6xfGaG48XvzwPzlMH78Y9+KAwwysUqeDy5O70pIzsskf12u4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJe/YHqtI/huKaj2IGpe7TCIC1/AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjJhOGIzZjYtYmRlZC0z Njc3LWI0MDEtNDk5YzExMzlmYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3taM6zcE2EQ/sggK3YnY0DTelqlqT8XE1+fSobyNC4GBWuKKh+h6gc Gnkfenun88/vDlQ2zu8beesHPst3ueHbxOriFZnADsFMm+FI1htDT/G6SjeLXkA+ Ikxv8mr01EkGr5lLOR5RaZQwus97ADXi052TLImTI6qFQ1isVOjqo0eaIjxxk587 u3Y20xQ1i97BfvxzF3cKE3EE14gL89DClEWF1IIU21LrT+JnmuGlbQYzchjPBt6C V9ANGL9hnBQFfMOgeB/Q5RSNVCecaGQ/j5dLB7VwmT7iASxPfDNEm3ZGiw60x0tq 9K35eByveGG293Xvno7o4JS0HYdS/JA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:28:46 2026 by rpki-client