$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf80f08c-152d-3bb2-b48b-341b799003f6.roa File: cf80f08c-152d-3bb2-b48b-341b799003f6.roa (raw, json) Hash identifier: AzZVpzIscUrE3H2ggY1tOfLwHF4vfxrdI2KGOwj2eL0= Subject key identifier: 50:BD:C4:3A:AB:99:8B:AD:5C:F8:E2:9C:C8:A0:67:AF:A4:A3:51:5C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF93DEAB5B7A7885F291C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf80f08c-152d-3bb2-b48b-341b799003f6.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.24.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:93:de:ab:5b:7a:78:85:f2:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=3a368a52-49aa-41f8-bf01-d471d37b988d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:68:97:26:72:72:58:e0:eb:f6:bb:f2:f5: 09:6d:11:7b:77:87:6f:17:5a:d1:5f:73:09:77:05: 71:80:5f:70:34:ad:38:da:18:7e:02:e5:9f:23:9e: 57:2e:e9:30:14:31:d2:5d:45:cb:ab:10:42:e8:3d: ad:77:cf:5d:dc:0a:16:f1:7d:85:ef:ab:c0:0b:71: be:94:5c:ae:d1:b6:8c:00:6c:51:57:ed:99:0e:33: 2d:be:26:64:5d:57:eb:9f:39:a2:03:ab:59:d0:71: 86:cf:e0:5a:1c:79:27:dd:4b:2a:de:f3:ab:c7:7e: 5b:4e:a4:22:ae:31:bc:1b:66:6a:59:50:9a:bc:44: 2d:fb:fe:a2:0b:39:da:77:ce:aa:cd:8d:e2:b3:98: 84:c2:a2:54:10:26:29:08:a1:dd:d4:33:ee:32:90: 51:78:7a:40:9e:6c:48:f6:69:c5:8b:e9:48:c2:18: 6e:4e:7b:92:d0:03:11:d9:ce:33:bb:d7:74:db:4a: cc:41:ad:ca:49:a2:45:7a:df:96:a5:4d:f7:cd:04: 81:b0:f4:f0:4c:95:73:98:a6:0c:28:c8:7f:0d:10: 87:6d:ce:0e:36:41:32:7f:76:6f:5e:c2:a5:64:1e: 16:8b:84:f3:31:e3:02:22:6e:ac:85:8e:12:42:7a: 47:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BD:C4:3A:AB:99:8B:AD:5C:F8:E2:9C:C8:A0:67:AF:A4:A3:51:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf80f08c-152d-3bb2-b48b-341b799003f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:30:b2:97:50:aa:1f:e2:64:82:ce:fb:47:a8:c7:c5:99:95: a2:0b:e3:7e:8b:1a:0b:2e:25:61:da:8a:ef:cd:b2:eb:fc:02: 0c:61:e7:34:1c:3b:90:ba:3c:f5:d4:16:93:d9:32:29:99:f1: 0c:7e:b3:94:a4:12:21:20:d6:7f:cc:2d:bf:69:dd:22:fd:05: d2:06:24:41:4d:4b:1e:1c:63:bd:4d:69:f1:83:8f:19:d7:ed: 2b:4b:64:83:73:99:0b:af:9e:82:b7:90:a2:ac:03:97:2f:31: 4c:05:e5:84:eb:ac:a1:c4:5f:a5:09:cf:8f:c8:f5:f3:7e:20: 3f:f3:3a:2c:1d:20:4f:be:52:e5:64:c1:42:ca:61:62:44:a5: b3:cd:29:8f:d7:44:6f:59:3e:42:d0:c9:c6:43:1b:26:46:d0: 7b:b8:6c:5e:c6:2c:32:f6:4d:a2:bd:d4:7a:69:e7:51:73:2b: 1f:80:21:3d:9b:55:80:4e:0c:83:d0:ac:03:b4:39:dd:a9:c3: 3d:a5:f7:60:d4:47:bd:73:68:a7:2f:fe:6b:d3:cd:db:dd:46: d7:2e:15:35:0a:6c:e2:92:fe:ab:b6:75:b2:12:98:72:9c:65: 81:96:9e:41:c8:78:eb:8f:0f:fe:ed:d4:76:e8:2e:85:e5:0c: 98:a5:aa:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35Peq1t6eIXykcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk M2EzNjhhNTItNDlhYS00MWY4LWJmMDEtZDQ3MWQzN2I5ODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUdolyZycljg6/a78vUJbRF7d4dvF1rRX3MJ dwVxgF9wNK042hh+AuWfI55XLukwFDHSXUXLqxBC6D2td89d3AoW8X2F76vAC3G+ lFyu0baMAGxRV+2ZDjMtviZkXVfrnzmiA6tZ0HGGz+BaHHkn3Usq3vOrx35bTqQi rjG8G2ZqWVCavEQt+/6iCznad86qzY3is5iEwqJUECYpCKHd1DPuMpBReHpAnmxI 9mnFi+lIwhhuTnuS0AMR2c4zu9d020rMQa3KSaJFet+WpU33zQSBsPTwTJVzmKYM KMh/DRCHbc4ONkEyf3ZvXsKlZB4Wi4TzMeMCIm6shY4SQnpHZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFC9xDqrmYutXPjinMigZ6+ko1FcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y4MGYwOGMtMTUyZC0z YmIyLWI0OGItMzQxYjc5OTAwM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkwspdQqh/iZILO+0eox8WZlaIL436LGgsuJWHaiu/Nsuv8Agxh5zQc O5C6PPXUFpPZMimZ8Qx+s5SkEiEg1n/MLb9p3SL9BdIGJEFNSx4cY71NafGDjxnX 7StLZINzmQuvnoK3kKKsA5cvMUwF5YTrrKHEX6UJz4/I9fN+ID/zOiwdIE++UuVk wULKYWJEpbPNKY/XRG9ZPkLQycZDGyZG0Hu4bF7GLDL2TaK91Hpp51FzKx+AIT2b VYBODIPQrAO0Od2pwz2l92DUR71zaKcv/mvTzdvdRtcuFTUKbOKS/qu2dbISmHKc ZYGWnkHIeOuPD/7t1HboLoXlDJilqrs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:39:52 2026 by rpki-client