$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c49633c0-e4d6-3326-87e7-8f541659f819.roa File: c49633c0-e4d6-3326-87e7-8f541659f819.roa (raw, json) Hash identifier: A3rTHNrr8WCemHWfCqxOWWUKAmfi3RiEQuVw1+8jqng= Subject key identifier: 4B:A0:C4:63:2C:6D:98:78:7D:4A:11:E4:F3:5E:C6:AF:BC:30:36:F9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AA1B4F2D8FCA337880EF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c49633c0-e4d6-3326-87e7-8f541659f819.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.29.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:1b:4f:2d:8f:ca:33:78:80:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=19de6339-74a7-4322-aacf-3e600ff0c7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a2:bc:12:e8:d9:e2:8f:dd:a6:37:56:94:e9: cd:e8:ad:42:7e:6b:11:a2:d4:46:66:f2:7d:b7:b8: 33:3c:5a:6c:e2:51:67:8c:c6:bd:04:c7:7d:f7:1d: ee:25:93:3a:75:16:94:f0:d3:0c:a5:ec:ca:3f:5c: ba:e0:c9:86:1d:0b:85:0a:13:45:b9:b5:30:92:b4: dc:e5:c1:8b:47:75:65:cb:c1:46:5a:1c:ad:0b:2a: 60:9a:57:10:73:0b:da:32:8d:f1:d7:24:42:e6:be: 65:c9:3e:b5:ac:07:b3:16:78:c4:51:54:3c:c1:9c: a5:b8:94:12:69:d5:03:72:20:82:a2:75:4b:3e:2f: 54:3f:0e:72:6b:db:43:91:c6:66:02:bd:a0:be:c5: 60:86:d5:ef:1c:91:4d:e8:ac:98:33:b6:66:04:5d: 9d:fc:d6:a3:e9:c9:44:1c:03:b8:5e:e3:7b:f1:27: 3d:ce:96:46:8d:19:4b:cb:e0:03:0b:a4:fd:d7:e9: 4a:62:ae:5a:f5:94:97:fc:3b:35:e9:35:a5:4e:56: 54:93:b8:db:ef:2f:4b:c4:62:d5:78:60:74:5b:23: 5c:33:4a:04:e8:ab:69:bd:33:18:f0:03:e9:e6:d9: 34:37:f5:a5:34:3e:53:eb:2c:7b:59:b4:c0:28:79: af:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A0:C4:63:2C:6D:98:78:7D:4A:11:E4:F3:5E:C6:AF:BC:30:36:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c49633c0-e4d6-3326-87e7-8f541659f819.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:a6:01:ee:cf:75:73:1b:c6:b1:cd:b4:d4:d9:0c:8d:22:58: 78:b5:59:f6:05:54:d2:52:90:c2:5c:7c:31:88:f8:fe:49:4e: 82:32:c5:ff:83:9d:00:46:1a:b3:ce:e0:e6:65:4a:9b:74:72: 34:c6:40:49:64:fe:d9:b4:79:03:fb:4d:38:71:6b:70:d4:71: e3:3f:be:52:5f:8e:c2:33:e5:97:5b:b4:d3:e4:b0:07:35:03: d5:06:cb:54:34:e0:80:ed:bc:40:6f:6c:d6:c4:59:67:70:1e: dd:fd:12:48:44:0e:11:80:c6:d3:19:57:a7:54:ac:e2:48:5e: a8:09:95:e4:45:4e:cd:74:1d:87:c7:80:da:49:2e:f2:e3:82: 61:b4:13:89:bd:59:f6:5f:99:32:0a:86:8d:ba:99:f2:0d:d7: ec:61:de:31:0e:7b:3e:b3:5f:16:c5:e8:4a:d0:cb:c1:46:2e: 4c:d2:4d:de:6a:e0:a9:22:26:54:94:65:86:15:f9:4e:af:24: 78:f4:66:ad:4b:4e:5e:f4:12:39:61:51:51:db:a6:c4:ef:c4: 56:e3:58:61:12:ee:13:9f:be:e2:8e:b3:67:57:e8:97:66:10: e3:db:de:47:01:e1:5d:65:06:bc:b4:04:a0:ad:b5:0e:fd:79: 90:a2:13:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqhtPLY/KM3iA7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MTlkZTYzMzktNzRhNy00MzIyLWFhY2YtM2U2MDBmZjBjN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaK8EujZ4o/dpjdWlOnN6K1CfmsRotRGZvJ9 t7gzPFps4lFnjMa9BMd99x3uJZM6dRaU8NMMpezKP1y64MmGHQuFChNFubUwkrTc 5cGLR3Vly8FGWhytCypgmlcQcwvaMo3x1yRC5r5lyT61rAezFnjEUVQ8wZyluJQS adUDciCConVLPi9UPw5ya9tDkcZmAr2gvsVghtXvHJFN6KyYM7ZmBF2d/Naj6clE HAO4XuN78Sc9zpZGjRlLy+ADC6T91+lKYq5a9ZSX/Ds16TWlTlZUk7jb7y9LxGLV eGB0WyNcM0oE6KtpvTMY8APp5tk0N/WlND5T6yx7WbTAKHmvTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEugxGMsbZh4fUoR5PNexq+8MDb5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzQ5NjMzYzAtZTRkNi0z MzI2LTg3ZTctOGY1NDE2NTlmODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCmAe7PdXMbxrHNtNTZDI0iWHi1WfYFVNJSkMJcfDGI+P5JToIyxf+D nQBGGrPO4OZlSpt0cjTGQElk/tm0eQP7TThxa3DUceM/vlJfjsIz5ZdbtNPksAc1 A9UGy1Q04IDtvEBvbNbEWWdwHt39EkhEDhGAxtMZV6dUrOJIXqgJleRFTs10HYfH gNpJLvLjgmG0E4m9WfZfmTIKho26mfIN1+xh3jEOez6zXxbF6ErQy8FGLkzSTd5q 4KkiJlSUZYYV+U6vJHj0Zq1LTl70EjlhUVHbpsTvxFbjWGES7hOfvuKOs2dX6Jdm EOPb3kcB4V1lBry0BKCttQ79eZCiE84= -----END CERTIFICATE-----Generated at Thu Mar 26 07:43:59 2026 by rpki-client