$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa File: c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa (raw, json) Hash identifier: ejEPZ5fzUh6HMWyzC3Zp0/vyFQlCSkbUTDVJwKZYBaE= Subject key identifier: 46:31:69:B9:7C:C4:FD:5E:62:8A:11:A9:E2:8E:39:58:15:75:C3:ED Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AABEB8911E372EBA763D40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.21.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:be:b8:91:1e:37:2e:ba:76:3d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=039a4d44-37e2-41f5-9dc6-d641b560ae75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4b:a0:e7:d6:f5:c0:70:50:be:35:79:08:cb: b4:a4:c4:d5:db:cc:84:df:1f:12:4b:dc:1a:c6:19: e9:68:e0:2d:22:64:88:be:19:28:31:38:7c:29:52: 5b:6e:17:63:29:06:17:e4:35:fa:19:4f:92:05:08: 94:0e:06:14:33:30:bb:d0:65:d9:53:ec:67:af:e8: b4:d5:80:46:5b:55:c4:9a:d9:57:52:fc:d3:70:5c: 9a:c4:62:fe:d0:d6:37:e9:eb:17:ae:f5:74:5a:0f: fe:da:ee:a6:3f:9d:a0:b4:02:e3:21:78:79:33:2a: d9:50:1f:84:cd:02:6e:99:fe:7a:ff:f2:06:1a:41: 52:36:7d:f4:a1:3f:c5:66:23:24:0b:be:83:34:2c: 69:84:8a:03:19:e9:ea:51:70:8d:37:d1:6e:80:3c: fd:30:64:89:53:54:c8:84:b0:b6:4c:4e:21:99:36: 2b:7d:7e:da:1c:df:90:7d:34:e0:c1:fb:2d:94:c1: 71:af:85:05:60:da:a6:aa:0b:05:fa:57:dc:c8:66: ef:29:59:b6:01:b7:d3:f0:d6:ad:f0:22:d1:b4:4e: 86:71:41:31:8a:9f:2b:fc:ce:19:c9:a5:f1:eb:ef: 66:02:45:b2:19:f5:72:6d:44:52:1f:91:24:50:4e: 23:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:31:69:B9:7C:C4:FD:5E:62:8A:11:A9:E2:8E:39:58:15:75:C3:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:30:a8:75:9a:6d:5f:17:9e:8d:0b:9a:72:85:0b:e7:99:03: cb:72:e5:8f:10:e3:7f:1b:8c:23:b0:ca:e9:52:8a:0c:15:72: 2e:53:d4:40:dc:c7:c1:5a:e0:65:f9:0e:a1:cb:77:7a:3c:90: 9f:4c:84:3f:fa:5e:67:1d:b4:88:ee:c9:9b:1b:5a:b7:f8:a3: 9c:58:cd:7b:ca:da:f7:98:8c:d7:fc:00:68:77:5a:d4:33:2a: 99:3b:35:6d:f5:b4:26:35:85:db:d0:19:16:63:e6:4d:76:f2: 16:40:ef:72:93:29:c2:86:c4:55:35:96:35:9c:99:62:7b:6d: 5b:ea:e8:4d:86:09:67:8b:48:f3:28:c9:b1:21:3b:a3:2a:92: ca:e9:ae:24:fb:e0:e6:f8:ac:19:d9:09:56:fd:b0:c6:86:97: 84:57:76:45:0a:4e:51:6f:09:26:eb:2a:53:dd:df:92:b9:2f: 2d:36:fe:f6:59:fb:68:aa:d5:e1:e3:1c:c5:5a:ba:2c:de:3d: d7:36:00:83:aa:18:08:3c:4c:ea:47:61:22:b2:db:4a:b0:43: 97:88:29:80:64:96:55:80:1e:2f:43:4b:d6:80:ee:c5:a5:de: 84:59:2d:e4:1d:1d:1c:75:90:ea:c4:bf:11:76:e1:1f:7e:ab: f3:1a:5f:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqr64kR43Lrp2PUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MDM5YTRkNDQtMzdlMi00MWY1LTlkYzYtZDY0MWI1NjBhZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEug59b1wHBQvjV5CMu0pMTV28yE3x8SS9wa xhnpaOAtImSIvhkoMTh8KVJbbhdjKQYX5DX6GU+SBQiUDgYUMzC70GXZU+xnr+i0 1YBGW1XEmtlXUvzTcFyaxGL+0NY36esXrvV0Wg/+2u6mP52gtALjIXh5MyrZUB+E zQJumf56//IGGkFSNn30oT/FZiMkC76DNCxphIoDGenqUXCNN9FugDz9MGSJU1TI hLC2TE4hmTYrfX7aHN+QfTTgwfstlMFxr4UFYNqmqgsF+lfcyGbvKVm2AbfT8Nat 8CLRtE6GcUExip8r/M4ZyaXx6+9mAkWyGfVybURSH5EkUE4jeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYxabl8xP1eYooRqeKOOVgVdcPtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzMzZjNhMmUtNmIxYS0z NmNjLWE4NzktN2ViZTA4NTY4YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEwqHWabV8Xno0LmnKFC+eZA8ty5Y8Q438bjCOwyulSigwVci5T1EDc x8Fa4GX5DqHLd3o8kJ9MhD/6XmcdtIjuyZsbWrf4o5xYzXvK2veYjNf8AGh3WtQz Kpk7NW31tCY1hdvQGRZj5k128hZA73KTKcKGxFU1ljWcmWJ7bVvq6E2GCWeLSPMo ybEhO6MqksrpriT74Ob4rBnZCVb9sMaGl4RXdkUKTlFvCSbrKlPd35K5Ly02/vZZ +2iq1eHjHMVauizePdc2AIOqGAg8TOpHYSKy20qwQ5eIKYBkllWAHi9DS9aA7sWl 3oRZLeQdHRx1kOrEvxF24R9+q/MaXy4= -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:46 2026 by rpki-client