$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0f324e3-bcdb-32ce-be9e-9351765dc35b.roa File: c0f324e3-bcdb-32ce-be9e-9351765dc35b.roa (raw, json) Hash identifier: kvBJtUQNhsn05iaAO3ltyc+5PCYrxWgdiGCKYfrkic0= Subject key identifier: 85:20:AA:E2:F9:E9:70:A1:46:F9:13:54:F1:C7:53:55:F8:76:1C:31 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E12D4422CF62F4FD3E8CF0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0f324e3-bcdb-32ce-be9e-9351765dc35b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.27.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2d:44:22:cf:62:f4:fd:3e:8c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=32f3c2b4-ffe8-4a56-8942-b38005dcf016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1b:d2:d6:6f:ee:36:b9:b8:79:d3:33:6e:13: 7a:2d:92:1c:3c:3f:96:b0:f8:25:1e:7f:19:0d:03: e4:70:69:05:23:9b:c9:3d:b9:d3:59:41:a4:6e:bf: ee:d4:c2:5d:31:88:b8:19:10:0f:10:71:e0:d9:e5: 6e:31:8e:d0:c0:e8:91:70:99:3a:39:8b:cc:1f:47: 8e:76:2d:af:2b:ad:f1:04:04:2d:5a:60:09:c4:fd: d7:c3:6a:f0:37:72:ef:13:05:ce:74:77:91:69:8a: 91:7c:10:30:49:95:5c:5a:8d:7a:53:b1:83:33:0c: 0a:a9:b3:a2:b6:e9:e3:a1:5a:55:83:46:14:eb:6a: cf:cf:d0:4c:60:58:8f:10:8c:f8:4f:36:4b:ae:c2: 39:2d:23:fa:e0:f0:25:c9:a4:26:a7:69:7a:9c:c0: ee:02:d0:c1:fc:a8:e7:c6:3f:4e:27:54:83:d8:b0: 50:fd:04:96:28:e8:83:99:89:eb:a4:99:ee:c3:98: 65:0a:71:4b:0c:e9:ac:28:32:66:34:72:5c:16:ad: be:8c:d8:7f:76:11:67:cd:2e:53:9d:9e:3d:b5:d6: ff:9e:0b:cf:a3:86:1e:e2:1d:9f:8b:ff:3a:54:cb: 06:b4:be:b1:37:45:37:08:4c:e5:70:e7:33:10:15: 25:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:20:AA:E2:F9:E9:70:A1:46:F9:13:54:F1:C7:53:55:F8:76:1C:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c0f324e3-bcdb-32ce-be9e-9351765dc35b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:60:06:a4:b3:53:87:60:1d:24:4a:53:d7:31:ba:b8:dd:28: 14:55:12:48:1b:98:51:12:1d:4f:81:f3:b2:ea:15:1d:0c:c6: e9:e6:0a:51:5d:0f:4b:8f:f1:ea:66:cb:e3:d1:46:7b:53:8b: ad:e4:9c:56:7b:7c:26:49:dc:5a:75:e4:50:3f:3c:79:96:f3: b2:41:f5:28:bb:9c:0f:c6:49:d7:24:d1:df:5d:a1:4c:40:b9: 1b:bc:b3:de:6a:f1:91:8a:1f:c4:3e:47:5e:7f:1e:dc:1e:de: 77:3c:02:3c:70:de:50:dd:e7:fc:60:20:26:39:df:35:8c:c5: e1:98:8a:2f:c0:af:ba:ca:a2:7d:8a:bc:88:16:c0:be:7f:9c: f8:f0:bd:ec:81:c6:50:64:73:c7:91:06:97:79:cf:de:1a:aa: e0:3e:fe:f4:bc:7e:b3:43:91:b4:ba:ca:3b:ac:e2:07:70:b9: df:81:7c:7f:ba:da:37:20:be:8a:c8:fb:bb:b9:40:61:3e:41: bd:70:c5:ea:c3:f4:68:79:98:d9:ee:1e:94:4c:ca:05:2e:00: d4:a8:43:4b:05:55:be:68:1e:84:01:62:1e:0b:cc:8d:fc:10: c0:1e:80:f5:d6:21:10:6d:00:ff:f2:95:df:cd:b2:3c:58:64: 34:82:92:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4S1EIs9i9P0+jPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzJmM2MyYjQtZmZlOC00YTU2LTg5NDItYjM4MDA1ZGNmMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBvS1m/uNrm4edMzbhN6LZIcPD+WsPglHn8Z DQPkcGkFI5vJPbnTWUGkbr/u1MJdMYi4GRAPEHHg2eVuMY7QwOiRcJk6OYvMH0eO di2vK63xBAQtWmAJxP3Xw2rwN3LvEwXOdHeRaYqRfBAwSZVcWo16U7GDMwwKqbOi tunjoVpVg0YU62rPz9BMYFiPEIz4TzZLrsI5LSP64PAlyaQmp2l6nMDuAtDB/Kjn xj9OJ1SD2LBQ/QSWKOiDmYnrpJnuw5hlCnFLDOmsKDJmNHJcFq2+jNh/dhFnzS5T nZ49tdb/ngvPo4Ye4h2fi/86VMsGtL6xN0U3CEzlcOczEBUl/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUgquL56XChRvkTVPHHU1X4dhwxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzBmMzI0ZTMtYmNkYi0z MmNlLWJlOWUtOTM1MTc2NWRjMzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRskMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJgBqSzU4dgHSRKU9cxurjdKBRVEkgbmFESHU+B87LqFR0MxunmClFd D0uP8epmy+PRRntTi63knFZ7fCZJ3Fp15FA/PHmW87JB9Si7nA/GSdck0d9doUxA uRu8s95q8ZGKH8Q+R15/Htwe3nc8Ajxw3lDd5/xgICY53zWMxeGYii/Ar7rKon2K vIgWwL5/nPjwveyBxlBkc8eRBpd5z94aquA+/vS8frNDkbS6yjus4gdwud+BfH+6 2jcgvorI+7u5QGE+Qb1wxerD9Gh5mNnuHpRMygUuANSoQ0sFVb5oHoQBYh4LzI38 EMAegPXWIRBtAP/yld/NsjxYZDSCknE= -----END CERTIFICATE-----Generated at Thu Mar 26 09:22:44 2026 by rpki-client