$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f111c8-3652-3329-88ee-ce79c6a6d011.roa File: d4f111c8-3652-3329-88ee-ce79c6a6d011.roa (raw, json) Hash identifier: Yfj84PbzafhJS5Iq4jfZ9cN0q9VA3gT3/JsWykuKzyQ= Subject key identifier: 38:DB:A7:0A:3F:B6:6A:00:13:B5:C1:F9:51:84:C0:F5:EB:25:C9:70 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF88424DA2F330CE008B6E Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f111c8-3652-3329-88ee-ce79c6a6d011.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.19.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:88:42:4d:a2:f3:30:ce:00:8b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=ca2087fd-5e25-4058-b7c2-de217beef190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:a1:1a:00:4d:52:df:65:93:61:23:8c:c9: 34:b5:2d:5a:60:87:32:3e:24:28:3c:81:90:a4:07: 0c:c1:ff:a8:ea:32:69:5a:23:a7:10:9f:96:94:d4: 2e:d6:43:9c:5c:0f:6e:41:bf:f7:f5:bc:49:95:8c: d7:92:3f:4d:20:df:f6:2c:be:72:9e:14:05:d0:38: 31:c8:e8:34:6e:33:70:33:1f:cc:c5:d4:8b:a0:77: 14:ce:ac:c0:85:d5:76:f0:ee:60:8b:35:7c:90:2e: 5a:6b:94:b9:8d:bb:60:30:09:ad:5a:60:61:43:2a: 91:bc:c5:4f:0a:81:d6:fd:48:d0:72:14:23:06:79: 33:e4:8f:0e:2d:fb:61:a9:1c:7a:1d:59:a7:4c:9b: 98:17:bb:b8:b7:bb:2f:63:3e:88:aa:31:d2:30:6b: 91:a6:d0:0d:80:44:59:9c:ea:a4:4b:c6:d0:d5:4c: f3:b8:67:eb:4f:07:b7:75:a5:db:70:c1:dd:c7:c3: 32:ae:a5:b9:1c:c5:8b:c2:e6:ff:74:25:7d:b8:d4: fd:d0:79:9b:0a:f1:ad:6f:16:53:e3:04:d7:89:c2: 46:74:42:ab:d4:9f:81:ac:47:c1:67:48:72:59:b6: d4:7d:55:2d:12:e5:19:d5:05:35:6e:7f:30:87:61: 0c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DB:A7:0A:3F:B6:6A:00:13:B5:C1:F9:51:84:C0:F5:EB:25:C9:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f111c8-3652-3329-88ee-ce79c6a6d011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f0:eb:0c:59:e6:3e:53:1b:b7:48:ef:4f:da:2e:2c:97:52: 3d:23:03:d0:b8:a9:51:2a:a6:08:d7:5c:14:3b:e6:57:f0:17: 32:2a:59:71:63:91:f6:f7:10:13:0b:d9:44:0e:f8:65:b9:c1: 76:74:48:2b:ad:1b:d5:b3:84:25:b2:93:c2:c3:34:e4:20:ba: a2:be:04:7c:fd:be:7b:52:f4:b2:f4:6d:33:2b:47:6d:9a:34: b5:34:30:8e:c4:54:c7:84:de:aa:03:f6:08:85:15:be:10:fb: 0e:d1:25:6c:12:46:c6:52:cf:8c:c3:23:b5:94:db:52:f2:30: 3c:5f:16:33:a6:c0:a9:37:1f:ec:be:95:e3:3e:f3:17:06:83: 41:46:d4:32:0f:8b:24:5c:87:73:4a:5b:73:e8:02:a6:64:02: 30:af:dd:b9:8e:5c:25:94:2e:a8:96:e0:6a:f0:6e:0c:6f:e7: bd:d1:ee:70:41:aa:a1:69:e3:36:d0:b6:22:b5:7e:73:d3:94: 7c:b5:10:5f:b6:14:01:c0:5e:a7:08:79:0f:fb:16:f1:6a:eb: 10:a0:ef:9d:c2:6f:1b:bd:23:07:43:61:aa:4b:e8:f3:99:96: b5:a6:77:01:ba:ac:ad:62:a8:4f:32:69:eb:b4:61:1a:14:09: 22:28:73:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k34hCTaLzMM4Ai24wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2EyMDg3ZmQtNWUyNS00MDU4LWI3YzItZGUyMTdiZWVmMTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMGhGgBNUt9lk2EjjMk0tS1aYIcyPiQoPIGQ pAcMwf+o6jJpWiOnEJ+WlNQu1kOcXA9uQb/39bxJlYzXkj9NIN/2LL5ynhQF0Dgx yOg0bjNwMx/MxdSLoHcUzqzAhdV28O5gizV8kC5aa5S5jbtgMAmtWmBhQyqRvMVP CoHW/UjQchQjBnkz5I8OLfthqRx6HVmnTJuYF7u4t7svYz6IqjHSMGuRptANgERZ nOqkS8bQ1UzzuGfrTwe3daXbcMHdx8MyrqW5HMWLwub/dCV9uNT90HmbCvGtbxZT 4wTXicJGdEKr1J+BrEfBZ0hyWbbUfVUtEuUZ1QU1bn8wh2EM5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjbpwo/tmoAE7XB+VGEwPXrJclwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDRmMTExYzgtMzY1Mi0z MzI5LTg4ZWUtY2U3OWM2YTZkMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRM2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrw6wxZ5j5TG7dI70/aLiyXUj0jA9C4qVEqpgjXXBQ75lfwFzIqWXFj kfb3EBML2UQO+GW5wXZ0SCutG9WzhCWyk8LDNOQguqK+BHz9vntS9LL0bTMrR22a NLU0MI7EVMeE3qoD9giFFb4Q+w7RJWwSRsZSz4zDI7WU21LyMDxfFjOmwKk3H+y+ leM+8xcGg0FG1DIPiyRch3NKW3PoAqZkAjCv3bmOXCWULqiW4Grwbgxv573R7nBB qqFp4zbQtiK1fnPTlHy1EF+2FAHAXqcIeQ/7FvFq6xCg753Cbxu9IwdDYapL6POZ lrWmdwG6rK1iqE8yaeu0YRoUCSIoc4U= -----END CERTIFICATE-----Generated at Thu Mar 26 12:03:58 2026 by rpki-client