$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d06be2-2497-387b-b093-f9161a79abe6.roa File: b8d06be2-2497-387b-b093-f9161a79abe6.roa (raw, json) Hash identifier: p9QXJqMeQhF70GwEHyOV0clAmefr+v4AZV9T1abL0IE= Subject key identifier: C7:EF:4F:5E:8C:58:3E:40:59:B2:CB:33:4A:EE:39:AB:CF:39:1B:59 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E122F39A3493BC1D42F780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d06be2-2497-387b-b093-f9161a79abe6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.21.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:22:f3:9a:34:93:bc:1d:42:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=032674b4-4857-4725-b6bd-5e28b4c23bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:55:47:d0:5e:8e:9e:28:3a:64:48:47:fb: 7d:2b:86:b0:27:65:b9:ab:2a:e6:40:7c:48:88:d2: 74:d9:0f:e9:51:76:79:4b:c8:11:ed:13:c0:31:89: a9:23:3a:ee:60:95:fb:41:03:97:e7:ca:68:57:3f: 70:ed:50:8f:02:3e:f5:bf:c2:87:07:66:ba:bf:84: 23:c6:ba:f2:63:b3:66:2e:3d:51:5b:bc:bb:d5:22: 87:9c:fa:3e:c9:86:2a:d6:05:f9:be:55:ec:1f:f0: 0d:94:99:bb:72:5b:a9:1c:3b:b6:0c:ca:81:cf:e0: eb:93:77:a3:c3:dd:45:81:8b:8b:47:d6:cd:59:5c: 14:da:4a:33:8d:b2:88:1e:d7:fa:c1:e9:5b:1a:22: ae:5d:15:e7:c9:5b:e4:ac:38:3f:41:5c:10:91:1e: 82:c0:74:e4:63:c9:a8:b1:d6:e8:68:51:78:db:e1: 16:03:92:7d:d6:e4:b9:b5:52:ab:95:a0:22:cd:aa: f6:f6:54:1b:18:44:65:cc:bf:9e:ba:7b:ca:5d:e6: 49:cf:eb:1d:50:f7:37:2d:c3:5f:c8:cc:b5:c3:af: a2:45:18:36:78:df:bd:c3:6e:a7:62:05:7d:9f:5c: fb:60:7d:52:02:fc:80:c2:03:d3:4f:63:0a:65:19: eb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EF:4F:5E:8C:58:3E:40:59:B2:CB:33:4A:EE:39:AB:CF:39:1B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d06be2-2497-387b-b093-f9161a79abe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c2:64:1b:f7:4d:c7:06:dc:13:3f:6d:2e:68:9a:5c:b3:e5: f9:24:bf:f1:ed:5a:88:ff:be:7a:1c:79:e4:36:74:00:91:c8: 5a:f1:d2:43:e5:0d:44:e9:0b:48:50:c0:6c:bb:4c:bb:61:e4: 75:d7:6a:cb:fd:6c:d8:f3:f0:35:17:89:00:a4:82:dc:c8:00: fc:98:54:f6:31:1c:76:86:b9:90:70:02:fb:13:e6:57:5e:44: ae:85:0e:67:e5:9d:38:f2:40:5d:6b:cb:65:1b:97:a6:4b:9a: d5:c9:39:e0:3e:34:26:96:2f:04:2a:41:0b:6a:2d:c2:4d:33: 13:c5:5e:cb:94:49:77:ec:b7:bf:56:7d:40:12:a5:ce:d3:89: 4d:29:db:3c:f2:d2:50:80:c1:b0:7d:97:f2:2e:52:1b:e4:0d: 7b:87:be:eb:14:f3:a1:1c:43:ec:23:ff:95:28:16:69:e2:d4: af:3a:e6:45:95:75:4d:23:40:88:62:d1:f3:eb:d8:b8:8d:3f: a8:3f:c6:31:ba:94:cc:15:39:6d:e4:34:55:20:73:37:b0:e7: d6:f8:c5:63:97:33:f0:86:6f:3c:60:83:e9:55:5f:28:0b:fa: 66:df:0c:27:12:f2:fc:d5:86:83:4a:a4:0a:53:cc:9f:0b:b6: 50:2d:56:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4SLzmjSTvB1C94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDMyNjc0YjQtNDg1Ny00NzI1LWI2YmQtNWUyOGI0YzIzYmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApItVR9Bejp4oOmRIR/t9K4awJ2W5qyrmQHxI iNJ02Q/pUXZ5S8gR7RPAMYmpIzruYJX7QQOX58poVz9w7VCPAj71v8KHB2a6v4Qj xrryY7NmLj1RW7y71SKHnPo+yYYq1gX5vlXsH/ANlJm7clupHDu2DMqBz+Drk3ej w91FgYuLR9bNWVwU2kozjbKIHtf6welbGiKuXRXnyVvkrDg/QVwQkR6CwHTkY8mo sdboaFF42+EWA5J91uS5tVKrlaAizar29lQbGERlzL+eunvKXeZJz+sdUPc3LcNf yMy1w6+iRRg2eN+9w26nYgV9n1z7YH1SAvyAwgPTT2MKZRnrQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfvT16MWD5AWbLLM0ruOavPORtZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjhkMDZiZTItMjQ5Ny0z ODdiLWIwOTMtZjkxNjFhNzlhYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTCZBv3TccG3BM/bS5omlyz5fkkv/HtWoj/vnoceeQ2dACRyFrx0kPl DUTpC0hQwGy7TLth5HXXasv9bNjz8DUXiQCkgtzIAPyYVPYxHHaGuZBwAvsT5lde RK6FDmflnTjyQF1ry2Ubl6ZLmtXJOeA+NCaWLwQqQQtqLcJNMxPFXsuUSXfst79W fUASpc7TiU0p2zzy0lCAwbB9l/IuUhvkDXuHvusU86EcQ+wj/5UoFmni1K865kWV dU0jQIhi0fPr2LiNP6g/xjG6lMwVOW3kNFUgczew59b4xWOXM/CGbzxgg+lVXygL +mbfDCcS8vzVhoNKpApTzJ8LtlAtVk4= -----END CERTIFICATE-----Generated at Thu Mar 26 16:27:50 2026 by rpki-client