$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1877b3f-cc18-3ac8-a2a7-5ad9fdbd5f73.roa File: d1877b3f-cc18-3ac8-a2a7-5ad9fdbd5f73.roa (raw, json) Hash identifier: BchcjE4qi4ckk9vCzr4536UVC5GqGvbY698hK6w/bPc= Subject key identifier: 6C:70:58:8F:EB:11:8B:73:36:CD:05:AA:D6:1E:85:13:EF:36:D7:78 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D492A4A36BE95F3448875A860 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1877b3f-cc18-3ac8-a2a7-5ad9fdbd5f73.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 30036 IP address blocks: 173.29.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:4a:36:be:95:f3:44:88:75:a8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=6e9a5601-9fb8-4393-a343-85b3845769bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1e:05:3b:ca:e9:48:91:8e:87:63:53:96:d1: 50:5d:68:17:09:58:28:59:cf:d3:30:1a:b3:bb:b0: 50:69:07:96:3e:43:7f:d4:ca:7e:47:c9:ae:ab:72: 33:a3:19:57:93:0f:72:e4:14:c7:c0:f3:b9:1a:19: 03:92:e5:b5:93:59:c0:a8:6e:42:a2:3b:33:38:85: a7:b3:a4:45:a0:36:8e:28:e3:e0:d8:65:ab:63:55: b6:90:d4:5e:87:8a:f2:62:d2:bf:d7:cf:f7:6c:dd: d5:2c:6b:16:4b:79:ef:f4:6f:a9:45:a4:1d:ba:52: 92:bd:b4:d2:01:58:21:55:c4:be:92:36:25:e7:a7: b7:6e:b7:6b:69:28:68:c4:84:63:0b:62:b6:cd:ef: 28:7b:f2:a7:38:aa:da:7a:64:75:94:b8:34:fa:b0: e8:61:64:09:33:f9:a0:17:34:74:eb:6e:e7:7e:72: 26:0b:bd:e0:14:30:74:08:76:49:52:a9:62:da:b0: 7f:ef:a2:0f:cb:c6:74:83:4f:b8:27:ab:af:3c:5c: e3:cb:d6:aa:65:3f:89:eb:77:74:96:67:9e:14:14: 8d:62:d7:af:e2:bd:77:c4:5f:46:e5:02:8a:9d:fd: 5d:86:37:84:f2:b9:e3:57:ec:d7:55:6b:a3:f4:4d: a9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:70:58:8F:EB:11:8B:73:36:CD:05:AA:D6:1E:85:13:EF:36:D7:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d1877b3f-cc18-3ac8-a2a7-5ad9fdbd5f73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:db:35:11:84:8b:e1:c5:51:ff:36:b6:10:36:34:2b:55:20: d8:de:c4:35:b8:e2:b5:d2:b1:f3:d7:2a:c6:27:a7:d5:93:39: 0f:15:f4:eb:35:7e:30:7c:97:f9:9d:ff:f2:bf:76:61:9b:3a: f2:78:5f:eb:50:dd:60:f6:bb:0e:ee:8b:72:20:2c:2f:14:80: bb:5d:99:64:70:af:17:b3:46:a1:34:20:c3:8e:6f:e0:c1:06: 37:2e:38:2d:e9:14:f8:d6:94:59:a2:24:76:bd:ff:bb:9c:0c: 92:e1:8b:e2:80:02:06:c2:ef:54:38:42:61:66:cf:f3:32:61: fc:70:b3:8f:92:3b:3e:74:3f:a0:06:9e:f3:a1:60:59:34:eb: 91:dd:a2:cb:61:b7:f1:c2:8d:18:03:8d:07:62:cb:11:0d:a1: f9:ff:26:ee:e6:ac:8b:4d:11:95:ef:64:5f:da:52:ae:9c:78: 46:fd:87:5e:46:c1:26:5e:ed:3a:b6:92:5f:e6:fb:e7:18:a2: f4:f1:d8:aa:0f:17:09:f6:91:05:c0:1a:d1:2c:a7:fb:35:d6: 31:5c:9e:de:0e:fd:ef:4f:0b:be:5a:33:29:1f:c4:45:8a:d4: 40:4c:bd:98:a2:b3:31:cd:aa:52:fd:f8:4f:1d:04:42:ce:81: 30:1c:ad:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKko2vpXzRIh1qGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NmU5YTU2MDEtOWZiOC00MzkzLWEzNDMtODViMzg0NTc2OWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB4FO8rpSJGOh2NTltFQXWgXCVgoWc/TMBqz u7BQaQeWPkN/1Mp+R8muq3IzoxlXkw9y5BTHwPO5GhkDkuW1k1nAqG5CojszOIWn s6RFoDaOKOPg2GWrY1W2kNReh4ryYtK/18/3bN3VLGsWS3nv9G+pRaQdulKSvbTS AVghVcS+kjYl56e3brdraShoxIRjC2K2ze8oe/KnOKraemR1lLg0+rDoYWQJM/mg FzR0627nfnImC73gFDB0CHZJUqli2rB/76IPy8Z0g0+4J6uvPFzjy9aqZT+J63d0 lmeeFBSNYtev4r13xF9G5QKKnf1dhjeE8rnjV+zXVWuj9E2pcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxwWI/rEYtzNs0FqtYehRPvNtd4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDE4NzdiM2YtY2MxOC0z YWM4LWEyYTctNWFkOWZkYmQ1ZjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELbNRGEi+HFUf82thA2NCtVINjexDW44rXSsfPXKsYnp9WTOQ8V9Os1 fjB8l/md//K/dmGbOvJ4X+tQ3WD2uw7ui3IgLC8UgLtdmWRwrxezRqE0IMOOb+DB BjcuOC3pFPjWlFmiJHa9/7ucDJLhi+KAAgbC71Q4QmFmz/MyYfxws4+SOz50P6AG nvOhYFk065Hdostht/HCjRgDjQdiyxENofn/Ju7mrItNEZXvZF/aUq6ceEb9h15G wSZe7Tq2kl/m++cYovTx2KoPFwn2kQXAGtEsp/s11jFcnt4O/e9PC75aMykfxEWK 1EBMvZiiszHNqlL9+E8dBELOgTAcrbo= -----END CERTIFICATE-----Generated at Thu Mar 26 07:29:00 2026 by rpki-client