$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4fa88ce-aa46-3fca-9649-fc12b75ca6e4.roa File: d4fa88ce-aa46-3fca-9649-fc12b75ca6e4.roa (raw, json) Hash identifier: xYHGn3JczU6OMoxZddMcN33aQaD4soCO7IkaAVta1ZM= Subject key identifier: C4:99:9A:6D:3E:35:7B:78:7E:F1:B9:0D:3A:FD:E5:1B:A7:DF:04:97 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E1228DAF5F9DF9A1079F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4fa88ce-aa46-3fca-9649-fc12b75ca6e4.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.19.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:22:8d:af:5f:9d:f9:a1:07:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c5112e56-ec1d-4979-bbbe-75bb6cfd8746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:de:57:11:74:d3:18:2e:8f:bf:43:6e:61: be:cd:8a:60:05:61:d1:c1:aa:89:a5:c9:c2:55:ee: 3a:d9:a6:8d:10:fd:c0:9c:e5:a7:c8:a4:e6:dc:01: 1f:e1:d1:8b:7f:c7:63:b3:28:50:d1:8b:dc:cc:30: 0f:c2:27:de:e5:10:44:dc:db:a5:06:8a:62:80:b3: ad:a9:9b:4a:6f:47:bb:44:de:41:18:0f:c6:3d:2e: fa:12:15:bd:62:56:32:6b:75:19:98:6d:c0:21:97: ee:d9:2b:65:64:ca:d9:02:9f:41:0b:b7:75:c4:13: 98:0a:f8:20:da:68:52:3b:51:5c:9c:65:fc:29:d4: 06:ce:11:7e:5e:c1:61:df:78:57:c4:f6:a9:64:38: 3e:50:88:c2:4c:c2:df:90:7a:f7:e6:a8:d0:ed:d0: cc:fd:a8:45:6b:8b:9f:8f:a4:48:7c:33:7a:69:e9: 30:b1:8c:2b:17:5e:a7:ad:54:8f:f3:05:22:b8:db: 15:0e:b9:a7:ce:f8:0f:a4:c7:99:3a:41:9a:74:94: b3:75:c8:ec:d4:1e:e9:a0:c6:39:69:23:33:58:3e: 14:ce:2c:ce:a3:44:a3:6d:e0:18:f7:13:6f:f4:83: 7e:f7:e1:19:b6:ec:a7:a4:93:cf:64:9e:db:9a:03: a4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:99:9A:6D:3E:35:7B:78:7E:F1:B9:0D:3A:FD:E5:1B:A7:DF:04:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4fa88ce-aa46-3fca-9649-fc12b75ca6e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:8e:97:cc:c4:2e:6e:10:59:bb:a2:ab:0a:46:d8:34:3c:6e: 5f:3a:b2:40:69:d7:a0:3a:0a:c5:ef:17:12:b9:c3:33:79:c1: b5:0d:e4:8d:3a:6e:43:a3:ec:a2:40:3e:cb:49:a3:76:7b:df: df:87:80:4d:64:a9:88:fc:1d:d9:e7:e1:b6:f9:90:2f:5b:6d: 27:27:27:c4:ff:c9:12:0f:6d:42:a2:56:be:93:5b:98:0e:a9: de:ca:25:d3:71:a0:4f:88:45:41:8a:be:9f:ce:6b:6c:fd:9f: 49:38:5c:fe:73:3c:e5:a1:2c:5d:3b:b3:31:ec:65:25:5c:bf: ca:0d:a5:7e:aa:44:f0:a4:c8:63:50:d3:54:c3:81:62:69:5a: ed:c8:ae:a5:4b:de:c0:09:f8:30:77:2d:5e:52:73:ab:78:ab: 2b:de:f3:ca:ab:fd:14:74:e4:cb:e1:a6:06:99:e2:94:d2:c7: 1c:b6:d6:5f:4d:15:3f:d2:04:30:13:2f:57:ff:09:2d:35:da: e9:fd:fe:b7:7a:48:95:54:e0:8f:64:b6:13:97:b0:aa:e4:c5: e8:c1:5b:4c:05:a4:5b:8f:b1:4c:f0:8f:f2:64:45:a3:01:6f: 83:e5:4e:79:5c:e9:83:24:76:6f:2e:fc:92:9c:60:26:e9:f8: c3:5e:0c:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4SKNr1+d+aEHn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzUxMTJlNTYtZWMxZC00OTc5LWJiYmUtNzViYjZjZmQ4NzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnPeVxF00xguj79DbmG+zYpgBWHRwaqJpcnC Ve462aaNEP3AnOWnyKTm3AEf4dGLf8djsyhQ0YvczDAPwife5RBE3NulBopigLOt qZtKb0e7RN5BGA/GPS76EhW9YlYya3UZmG3AIZfu2StlZMrZAp9BC7d1xBOYCvgg 2mhSO1FcnGX8KdQGzhF+XsFh33hXxPapZDg+UIjCTMLfkHr35qjQ7dDM/ahFa4uf j6RIfDN6aekwsYwrF16nrVSP8wUiuNsVDrmnzvgPpMeZOkGadJSzdcjs1B7poMY5 aSMzWD4UzizOo0SjbeAY9xNv9IN+9+EZtuynpJPPZJ7bmgOk/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSZmm0+NXt4fvG5DTr95Run3wSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDRmYTg4Y2UtYWE0Ni0z ZmNhLTk2NDktZmMxMmI3NWNhNmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRMiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiOl8zELm4QWbuiqwpG2DQ8bl86skBp16A6CsXvFxK5wzN5wbUN5I06 bkOj7KJAPstJo3Z739+HgE1kqYj8Hdnn4bb5kC9bbScnJ8T/yRIPbUKiVr6TW5gO qd7KJdNxoE+IRUGKvp/Oa2z9n0k4XP5zPOWhLF07szHsZSVcv8oNpX6qRPCkyGNQ 01TDgWJpWu3IrqVL3sAJ+DB3LV5Sc6t4qyve88qr/RR05MvhpgaZ4pTSxxy21l9N FT/SBDATL1f/CS012un9/rd6SJVU4I9kthOXsKrkxejBW0wFpFuPsUzwj/JkRaMB b4PlTnlc6YMkdm8u/JKcYCbp+MNeDI4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:03:16 2026 by rpki-client