$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba0f1270-cf4d-375f-9d17-31944b85577c.roa File: ba0f1270-cf4d-375f-9d17-31944b85577c.roa (raw, json) Hash identifier: /Dc//s8D3MPIZIOHQyirmBVNSjj2uajMH4PmfSZOox4= Subject key identifier: DB:BD:EA:CC:8E:CF:12:4D:D4:9B:8E:19:C0:E9:5D:75:AF:46:75:87 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E11D170A0FB50EA845DF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba0f1270-cf4d-375f-9d17-31944b85577c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.16.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:1d:17:0a:0f:b5:0e:a8:45:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2cbd3cf9-282f-4d82-b7f7-b49da8293de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:23:7c:58:b1:1b:a5:8d:b8:7a:79:b0:16: 94:f6:bc:3c:bf:59:bc:da:b8:23:0e:e9:64:52:8f: 36:44:1e:e5:45:6e:64:16:23:a0:29:b3:9a:58:0a: bb:0d:59:e7:69:07:05:83:2c:a4:bc:76:4a:8c:81: 12:ef:cb:6c:57:87:67:01:47:e6:0e:a6:83:c5:fd: 6a:58:29:7c:95:b9:29:e5:aa:14:f4:10:3e:15:ee: fc:7c:9b:b9:8f:bb:ac:19:9e:b3:c9:84:68:34:63: 52:11:08:bb:d4:eb:18:d3:dd:2d:2f:91:60:8d:0c: 0c:96:bd:9b:b0:74:21:2c:bd:06:2f:06:f8:1b:38: 27:85:44:18:8f:c9:e7:23:7a:54:8e:d5:42:c5:ac: b6:09:01:52:5a:91:a8:b2:c9:45:15:33:ab:fe:7c: d0:2c:f5:64:d6:63:54:0f:3e:a4:e0:f1:0c:8b:8d: ff:16:c4:84:c0:50:31:6b:1c:96:b9:5d:92:8e:1b: c3:51:bc:f9:9d:de:c4:fe:bb:25:c5:87:8c:2d:b1: 9e:f0:9c:5c:00:30:9e:eb:cd:f1:06:5e:be:6b:13: 02:ac:58:0a:37:cf:3d:d0:3a:e3:e5:77:cf:d6:43: 7a:37:df:30:1c:83:30:fd:94:95:39:68:e5:ea:5d: 4d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BD:EA:CC:8E:CF:12:4D:D4:9B:8E:19:C0:E9:5D:75:AF:46:75:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba0f1270-cf4d-375f-9d17-31944b85577c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:c0:32:af:15:67:6e:fc:4f:80:7d:ec:b1:4b:92:13:08:ce: d2:41:cd:2c:b7:3a:8d:2f:3d:92:f7:92:5f:dd:f1:ec:fd:5c: 9e:f0:2b:5c:7a:1e:f0:81:a3:18:63:25:f7:19:d3:63:44:14: 5c:97:eb:af:fd:f3:98:28:93:c5:21:ff:06:6e:fc:33:82:40: 40:81:b5:6e:54:da:04:98:32:db:ae:08:31:ac:a7:64:99:61: e5:5b:eb:4c:37:12:5c:36:47:e1:34:a1:47:65:0e:4e:09:23: bf:6e:40:fb:32:db:18:6d:d8:b3:ac:34:b7:cc:86:1c:65:aa: 0d:d5:e3:3c:0b:a9:9c:1f:14:4e:7f:42:2a:a7:61:b9:44:3b: 08:97:e9:26:66:93:f5:57:ea:4f:62:00:eb:84:63:82:81:d9: 64:82:47:a4:32:32:79:0d:98:b5:2f:25:fe:31:a4:c2:7b:5b: e6:6a:a6:c2:0d:94:24:eb:a3:70:f0:be:0f:10:9c:31:55:34: 59:93:06:cf:64:56:34:ff:bd:fc:01:c0:14:d6:92:65:9d:4a: 0c:e3:0b:de:78:22:0d:14:26:79:4d:76:7f:1a:b4:c6:c0:a7: ff:aa:44:48:e4:b9:f6:18:3e:d4:1d:97:2b:a7:d5:c7:30:10: 5d:0d:93:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4R0XCg+1DqhF34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MmNiZDNjZjktMjgyZi00ZDgyLWI3ZjctYjQ5ZGE4MjkzZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgYjfFixG6WNuHp5sBaU9rw8v1m82rgjDulk Uo82RB7lRW5kFiOgKbOaWAq7DVnnaQcFgyykvHZKjIES78tsV4dnAUfmDqaDxf1q WCl8lbkp5aoU9BA+Fe78fJu5j7usGZ6zyYRoNGNSEQi71OsY090tL5FgjQwMlr2b sHQhLL0GLwb4GzgnhUQYj8nnI3pUjtVCxay2CQFSWpGosslFFTOr/nzQLPVk1mNU Dz6k4PEMi43/FsSEwFAxaxyWuV2SjhvDUbz5nd7E/rslxYeMLbGe8JxcADCe683x Bl6+axMCrFgKN8890Drj5XfP1kN6N98wHIMw/ZSVOWjl6l1NlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNu96syOzxJN1JuOGcDpXXWvRnWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmEwZjEyNzAtY2Y0ZC0z NzVmLTlkMTctMzE5NDRiODU1NzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRAmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/AMq8VZ278T4B97LFLkhMIztJBzSy3Oo0vPZL3kl/d8ez9XJ7wK1x6 HvCBoxhjJfcZ02NEFFyX66/985gok8Uh/wZu/DOCQECBtW5U2gSYMtuuCDGsp2SZ YeVb60w3Elw2R+E0oUdlDk4JI79uQPsy2xht2LOsNLfMhhxlqg3V4zwLqZwfFE5/ QiqnYblEOwiX6SZmk/VX6k9iAOuEY4KB2WSCR6QyMnkNmLUvJf4xpMJ7W+ZqpsIN lCTro3Dwvg8QnDFVNFmTBs9kVjT/vfwBwBTWkmWdSgzjC954Ig0UJnlNdn8atMbA p/+qREjkufYYPtQdlyun1ccwEF0Nkz8= -----END CERTIFICATE-----Generated at Thu Mar 26 07:53:40 2026 by rpki-client