$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f9f66e-19d9-38a6-b99b-095fa533651b.roa File: d4f9f66e-19d9-38a6-b99b-095fa533651b.roa (raw, json) Hash identifier: 2AAr4uLCcw1p9eQlLlmikbSy8h7tbvl/CqwqQKV3Tlo= Subject key identifier: 63:FF:38:B0:DA:40:AB:A2:DD:44:34:3E:D6:0E:78:B2:97:96:AE:E5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF96A9252906F75DEE1A20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f9f66e-19d9-38a6-b99b-095fa533651b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.29.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:96:a9:25:29:06:f7:5d:ee:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f491e8e8-5b0f-458a-9bc4-1aab26b182f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:cf:5c:ed:c3:04:e1:96:9b:6f:37:84:9b: 92:ce:ab:56:fe:9f:4f:0e:5b:93:71:03:77:5a:1c: 2e:3c:13:7c:1b:7d:71:be:46:d6:6e:96:f9:fa:14: 55:f5:2c:37:6e:5e:d5:db:9d:4a:d3:ff:51:6a:61: d6:c7:86:6c:e5:92:0b:32:2b:b8:c1:e1:95:71:5d: f2:95:f8:6c:31:3f:06:aa:04:dd:2c:4e:ac:a1:b5: 1e:26:cf:b3:df:a7:71:32:a4:c5:27:40:5c:bb:03: 16:55:3a:c4:f0:d1:32:37:d0:e6:1d:3f:e7:ef:19: 7d:d3:f0:47:a7:0a:3b:17:85:a0:0d:bb:ca:d5:53: eb:e3:b0:09:b4:72:7a:e7:44:f5:7c:99:6f:da:41: fd:f1:87:35:17:93:bd:2a:40:3e:ac:d0:fe:48:52: 0e:d2:85:1f:e8:dd:3e:ea:6b:13:bc:02:d0:a3:ee: 0d:70:40:d9:f5:17:71:41:17:29:ac:e3:df:05:c9: 0c:16:1e:02:6f:fe:df:b5:06:72:f1:94:82:4a:37: f8:38:cb:55:a7:cf:d8:44:1e:2c:26:a5:04:fc:04: a3:36:ca:b6:bc:dd:2a:31:34:6a:aa:1b:6d:49:c2: b8:9b:78:4c:53:79:6f:60:dc:38:d2:db:74:c1:74: ac:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FF:38:B0:DA:40:AB:A2:DD:44:34:3E:D6:0E:78:B2:97:96:AE:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4f9f66e-19d9-38a6-b99b-095fa533651b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:4f:56:55:7a:b7:5d:f7:3e:9a:02:d6:c0:6a:e9:da:b9:76: db:02:b9:b5:f2:83:85:d3:f6:5b:ce:d1:d5:84:ab:a7:24:b7: 1b:22:e9:c6:c1:a6:63:0a:f6:b2:79:69:86:95:cd:f1:a2:45: 3f:e0:c0:69:f4:ba:87:c7:bb:6d:5a:cd:7c:68:65:54:ed:94: 88:ef:75:64:9e:25:98:09:25:92:30:4c:03:21:78:14:22:89: 0a:89:a1:a0:cb:82:67:75:a6:cc:da:7e:a6:90:58:de:bc:ee: f3:02:52:ed:ce:d1:13:d3:4b:9e:c3:23:a1:6f:01:e9:c3:61: 3d:ec:84:ad:2e:91:09:65:33:94:3f:4e:fb:f7:75:b3:54:7c: 08:14:53:b5:50:78:2a:e9:15:6b:8f:27:67:13:cd:97:ef:5c: c3:da:81:c4:f1:78:19:3d:35:5b:cb:66:fc:4e:1d:fa:7a:12: 13:f7:d1:f4:91:f1:1f:bf:d9:8f:b4:ef:81:18:89:f3:d0:aa: 85:b4:8a:be:09:e4:1f:fa:a2:c6:b7:52:c8:fb:22:5e:95:31: e4:fe:6c:0e:00:cb:8b:75:67:75:32:59:10:fb:3f:d4:58:49: 76:17:ca:ed:d0:a9:40:32:8f:9a:9b:e7:54:7b:7b:04:54:7b: f1:35:40:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35apJSkG913uGiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjQ5MWU4ZTgtNWIwZi00NThhLTliYzQtMWFhYjI2YjE4MmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwzPXO3DBOGWm283hJuSzqtW/p9PDluTcQN3 WhwuPBN8G31xvkbWbpb5+hRV9Sw3bl7V251K0/9RamHWx4Zs5ZILMiu4weGVcV3y lfhsMT8GqgTdLE6sobUeJs+z36dxMqTFJ0BcuwMWVTrE8NEyN9DmHT/n7xl90/BH pwo7F4WgDbvK1VPr47AJtHJ650T1fJlv2kH98Yc1F5O9KkA+rND+SFIO0oUf6N0+ 6msTvALQo+4NcEDZ9RdxQRcprOPfBckMFh4Cb/7ftQZy8ZSCSjf4OMtVp8/YRB4s JqUE/ASjNsq2vN0qMTRqqhttScK4m3hMU3lvYNw40tt0wXSs4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP/OLDaQKui3UQ0PtYOeLKXlq7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDRmOWY2NmUtMTlkOS0z OGE2LWI5OWItMDk1ZmE1MzM2NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJPVlV6t133PpoC1sBq6dq5dtsCubXyg4XT9lvO0dWEq6cktxsi6cbB pmMK9rJ5aYaVzfGiRT/gwGn0uofHu21azXxoZVTtlIjvdWSeJZgJJZIwTAMheBQi iQqJoaDLgmd1pszafqaQWN687vMCUu3O0RPTS57DI6FvAenDYT3shK0ukQllM5Q/ Tvv3dbNUfAgUU7VQeCrpFWuPJ2cTzZfvXMPagcTxeBk9NVvLZvxOHfp6EhP30fSR 8R+/2Y+074EYifPQqoW0ir4J5B/6osa3Usj7Il6VMeT+bA4Ay4t1Z3UyWRD7P9RY SXYXyu3QqUAyj5qb51R7ewRUe/E1QAE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:17:32 2026 by rpki-client