$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa File: b85ae6d7-e6f8-347c-9094-7c500122ea64.roa (raw, json) Hash identifier: hQ+50UIffrhr8Tp5+d8omDetc6kNqGFctJ6kfeOsC6Q= Subject key identifier: 99:52:7C:94:B0:62:3F:8A:30:8A:11:29:8A:4C:29:BF:6F:87:61:E5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AAC9584C8C38ECED792B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.16.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:c9:58:4c:8c:38:ec:ed:79:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=20c093ec-2e44-4c18-bdb4-e2ba0ad17f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1e:79:ee:1d:00:1d:44:f2:86:10:dd:b4:2b: 04:04:17:95:53:f7:6c:57:22:ea:2e:b8:02:77:f7: bd:57:37:85:c6:11:b9:9b:e2:ac:2f:b5:02:67:59: 25:94:41:f3:37:20:7c:39:96:1a:e0:8b:3b:7b:c1: 9b:0a:e2:e7:75:91:c2:75:f7:19:a9:76:fe:86:ab: 23:48:4a:07:5a:dd:18:eb:da:c5:b7:9a:d2:b2:d9: fe:0b:42:14:ec:8c:be:5c:80:82:c9:e5:e9:68:67: 1d:17:6a:c1:db:26:13:8b:b1:a5:b3:5a:b7:0b:a9: d2:bc:ba:77:e5:95:9c:06:a1:f3:ec:d7:ec:fd:78: 70:c4:55:20:df:7f:e1:38:5e:b2:15:ed:f3:27:f6: 12:f3:98:01:09:37:69:4b:db:2c:60:e1:2c:58:2b: bb:57:58:33:0c:de:ed:45:39:5b:a0:49:b5:af:ea: 54:f0:2d:23:f9:76:31:53:e6:e9:a5:d5:a9:6a:41: ec:65:72:67:9d:76:5c:88:6b:75:27:83:57:8d:b1: f7:e1:e3:38:66:21:e0:9c:04:d4:eb:e0:35:3f:82: 7a:61:b5:5e:6f:66:81:b8:1a:b1:6e:82:93:44:03: 2a:71:ba:50:3b:4a:0e:54:8b:ac:eb:e4:31:c1:a6: 3d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:52:7C:94:B0:62:3F:8A:30:8A:11:29:8A:4C:29:BF:6F:87:61:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b85ae6d7-e6f8-347c-9094-7c500122ea64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:e9:39:12:0c:eb:5f:b1:77:fb:10:55:08:2c:7b:90:16:ab: 22:44:85:96:98:1e:3e:0c:c7:79:da:13:dd:16:0d:6a:99:6d: 77:7c:72:4a:6c:a9:dd:27:1c:b8:a7:0b:35:ed:50:a3:34:44: 9b:31:88:09:86:66:e8:9d:70:71:ec:96:f6:76:97:3e:90:6d: d8:e1:67:5d:d8:45:2c:ca:ee:81:e8:9d:d0:68:1a:7c:65:19: 37:25:94:41:7d:fb:da:3d:2c:f9:1f:5a:9c:17:c8:00:90:04: 44:fa:0f:8a:1b:e4:8a:d9:61:91:2e:22:16:63:d5:b5:bb:7d: 7f:76:73:db:b8:94:35:ea:28:72:0f:48:34:f9:34:85:c2:26: 0d:d3:0d:b5:24:57:97:0d:a4:d8:45:2d:89:89:b7:35:5d:76: 19:6a:c6:15:6a:fa:f5:7f:3d:2f:4e:0e:c3:32:c7:0f:be:dc: 4d:92:e1:c2:08:5f:4c:f4:94:a3:33:96:66:94:d7:33:4d:4f: 85:22:53:e8:f2:98:c7:97:2d:9e:ac:9f:46:8b:62:d3:70:a3: ef:e7:05:08:d8:86:b1:64:94:18:5b:6e:02:28:9e:fe:07:a3: 52:4d:f6:bf:46:6b:b2:42:cb:8d:99:95:f0:da:e5:44:c5:68: 02:20:a1:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqslYTIw47O15K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MjBjMDkzZWMtMmU0NC00YzE4LWJkYjQtZTJiYTBhZDE3ZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB557h0AHUTyhhDdtCsEBBeVU/dsVyLqLrgC d/e9VzeFxhG5m+KsL7UCZ1kllEHzNyB8OZYa4Is7e8GbCuLndZHCdfcZqXb+hqsj SEoHWt0Y69rFt5rSstn+C0IU7Iy+XICCyeXpaGcdF2rB2yYTi7Gls1q3C6nSvLp3 5ZWcBqHz7Nfs/XhwxFUg33/hOF6yFe3zJ/YS85gBCTdpS9ssYOEsWCu7V1gzDN7t RTlboEm1r+pU8C0j+XYxU+bppdWpakHsZXJnnXZciGt1J4NXjbH34eM4ZiHgnATU 6+A1P4J6YbVeb2aBuBqxboKTRAMqcbpQO0oOVIus6+QxwaY99QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlSfJSwYj+KMIoRKYpMKb9vh2HlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjg1YWU2ZDctZTZmOC0z NDdjLTkwOTQtN2M1MDAxMjJlYTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnpORIM61+xd/sQVQgse5AWqyJEhZaYHj4Mx3naE90WDWqZbXd8ckps qd0nHLinCzXtUKM0RJsxiAmGZuidcHHslvZ2lz6QbdjhZ13YRSzK7oHondBoGnxl GTcllEF9+9o9LPkfWpwXyACQBET6D4ob5IrZYZEuIhZj1bW7fX92c9u4lDXqKHIP SDT5NIXCJg3TDbUkV5cNpNhFLYmJtzVddhlqxhVq+vV/PS9ODsMyxw++3E2S4cII X0z0lKMzlmaU1zNNT4UiU+jymMeXLZ6sn0aLYtNwo+/nBQjYhrFklBhbbgIonv4H o1JN9r9Ga7JCy42ZlfDa5UTFaAIgoTs= -----END CERTIFICATE-----Generated at Thu Mar 26 07:34:39 2026 by rpki-client