$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d418cbd1-7ca3-359d-8800-c514565576e8.roa File: d418cbd1-7ca3-359d-8800-c514565576e8.roa (raw, json) Hash identifier: IM4WIwWq3S7m1JOGXNyZymAFHbmGreJ5iLSvjXIn5Lc= Subject key identifier: 3A:59:3C:3D:C6:8B:18:5D:B4:58:5C:2B:12:2F:5D:BA:67:C2:08:45 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF9415F470E1A00A5B46C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d418cbd1-7ca3-359d-8800-c514565576e8.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.16.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:94:15:f4:70:e1:a0:0a:5b:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0cdf86e5-b6bf-48d8-b7e7-d7a74c750580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f8:95:9b:b7:e2:4b:96:4e:a1:03:c0:ac:26: f4:be:41:a3:d0:ac:09:c5:f9:1c:d1:dd:58:78:77: 5e:5d:b0:df:a6:62:9a:40:1e:90:7a:8a:bc:bd:f7: ce:b0:39:86:7f:11:f4:70:42:59:ad:36:a6:22:76: 91:ce:f8:34:0f:d2:70:ee:c2:c0:11:0b:af:86:57: 39:02:25:cf:36:27:70:31:bc:f7:9e:a9:2b:64:34: 4c:6b:2b:6b:d0:fc:29:9f:31:ba:b3:57:4c:79:9f: 9c:70:89:29:ab:78:20:3a:1e:85:35:60:b5:41:4e: 76:90:23:dc:66:cd:e4:ef:63:0a:54:3c:ae:f1:60: 01:5f:76:dd:2e:d3:67:f5:f4:ab:70:9c:bc:9b:c8: e4:a9:28:f2:f2:57:54:83:2d:f4:23:05:ea:ec:89: 66:1b:0c:71:ba:7c:87:05:22:13:9d:fa:e1:45:fb: 92:97:6d:db:ba:9a:b0:d1:ef:d8:b9:76:8a:b7:ee: 93:01:56:87:6d:e3:96:02:9d:87:bf:50:02:0e:22: c8:29:0d:6d:0c:9f:ca:29:59:18:95:9f:0b:63:fa: bf:91:f2:d1:8d:6a:85:22:c1:45:bb:59:be:3e:11: 34:53:79:d4:b6:e0:dd:8c:3c:89:12:67:c5:0e:2c: 60:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:59:3C:3D:C6:8B:18:5D:B4:58:5C:2B:12:2F:5D:BA:67:C2:08:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d418cbd1-7ca3-359d-8800-c514565576e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:77:26:f3:59:0a:ce:66:9b:ea:07:29:8f:3d:9b:85:8c:6d: 86:69:cb:db:d3:eb:83:51:99:ec:e2:35:59:0d:3d:12:a3:3c: 8a:04:2d:26:de:b2:4b:b4:d4:e2:7a:79:97:e7:a9:eb:ea:2c: 18:ae:e0:f2:bd:6a:ec:b3:73:85:27:46:49:c4:0d:d8:80:b9: b5:70:f2:eb:a6:04:f1:3e:df:4c:31:98:8a:40:52:c9:2f:e9: 13:53:e3:78:c6:4d:38:71:ba:2c:7c:0e:23:c4:ce:bf:b5:78: 69:70:3b:b7:81:b7:90:de:3c:bf:f5:c4:96:a7:9f:e4:f4:1e: 6b:2b:45:32:23:4c:a6:21:30:f5:9c:4b:82:8f:44:53:4b:22: d7:8a:05:51:e9:3f:98:cd:26:8b:0d:f9:0d:be:5f:49:81:46: 4d:22:f1:e4:07:52:5d:4a:ab:05:1d:6e:e7:74:4d:f8:bd:5a: e5:7f:0d:d1:78:05:f1:2f:46:2e:89:fa:4f:bb:f9:06:3a:02: 53:12:d8:51:07:86:5a:f1:9c:12:0c:b4:0e:0d:7c:6d:7d:36: 57:cb:9d:0d:ce:40:c7:da:ca:e1:df:d8:a6:9a:57:e3:90:52: 8e:e3:e6:74:4c:bf:88:08:17:99:2a:42:9f:3b:22:55:59:b3: 57:d1:ba:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35QV9HDhoApbRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGNkZjg2ZTUtYjZiZi00OGQ4LWI3ZTctZDdhNzRjNzUwNTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3viVm7fiS5ZOoQPArCb0vkGj0KwJxfkc0d1Y eHdeXbDfpmKaQB6Qeoq8vffOsDmGfxH0cEJZrTamInaRzvg0D9Jw7sLAEQuvhlc5 AiXPNidwMbz3nqkrZDRMaytr0PwpnzG6s1dMeZ+ccIkpq3ggOh6FNWC1QU52kCPc Zs3k72MKVDyu8WABX3bdLtNn9fSrcJy8m8jkqSjy8ldUgy30IwXq7IlmGwxxunyH BSITnfrhRfuSl23bupqw0e/YuXaKt+6TAVaHbeOWAp2Hv1ACDiLIKQ1tDJ/KKVkY lZ8LY/q/kfLRjWqFIsFFu1m+PhE0U3nUtuDdjDyJEmfFDixguQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpZPD3GixhdtFhcKxIvXbpnwghFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQxOGNiZDEtN2NhMy0z NTlkLTg4MDAtYzUxNDU2NTU3NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR3JvNZCs5mm+oHKY89m4WMbYZpy9vT64NRmeziNVkNPRKjPIoELSbe sku01OJ6eZfnqevqLBiu4PK9auyzc4UnRknEDdiAubVw8uumBPE+30wxmIpAUskv 6RNT43jGTThxuix8DiPEzr+1eGlwO7eBt5DePL/1xJann+T0HmsrRTIjTKYhMPWc S4KPRFNLIteKBVHpP5jNJosN+Q2+X0mBRk0i8eQHUl1KqwUdbud0Tfi9WuV/DdF4 BfEvRi6J+k+7+QY6AlMS2FEHhlrxnBIMtA4NfG19NlfLnQ3OQMfayuHf2KaaV+OQ Uo7j5nRMv4gIF5kqQp87IlVZs1fRugs= -----END CERTIFICATE-----Generated at Thu Mar 26 13:40:09 2026 by rpki-client