$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d813a30f-7c6f-3784-bbf1-69517a391010.roa File: d813a30f-7c6f-3784-bbf1-69517a391010.roa (raw, json) Hash identifier: oFRF8lV+2bglCg+qY6Vnf5J8rgCJVuvBwANsVxNF4O8= Subject key identifier: A4:11:2C:54:79:EB:1B:F1:92:67:7A:B0:84:65:B9:24:AE:3C:BA:76 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E12C30C402783B245947C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d813a30f-7c6f-3784-bbf1-69517a391010.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 150.195.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2c:30:c4:02:78:3b:24:59:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=10a011d8-31b5-4608-be66-59185061ce71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:96:6e:95:3d:0b:20:26:be:fd:de:e3:91:7f: d6:46:9f:87:86:60:d7:db:ba:3e:e2:4d:d7:70:33: df:5d:6e:21:1c:cd:2b:bb:40:96:eb:02:fa:3e:93: 82:c1:dd:d2:8f:27:bc:b9:bf:5b:21:ac:ba:14:28: ef:34:01:18:8c:55:7b:7b:bf:de:a9:48:e6:00:c8: dc:9c:44:ce:ec:f1:d4:fb:4c:30:b5:b0:c3:b1:83: af:88:f1:81:3a:44:95:86:bc:41:96:b8:fd:02:e6: 1b:43:29:7d:87:01:98:3f:c6:27:03:7a:2d:76:7f: d9:24:d3:5e:d0:dc:04:11:83:5c:d8:51:cd:41:c8: 2e:e5:fd:14:9e:02:f7:fc:d5:1b:d5:99:97:51:c7: 79:6e:74:ce:ca:ce:bb:4e:a0:bc:84:93:cc:41:31: f0:3f:bd:cd:2f:ac:b1:7f:5a:42:ba:56:f1:bc:b3: fa:70:01:9d:2c:f6:5c:c7:ec:93:6a:e8:10:a7:48: 58:c2:dc:06:14:09:a4:26:0c:13:12:96:e6:86:6c: 04:fb:01:52:7c:29:1c:e3:4e:60:a3:48:c6:b1:11: 52:41:c0:c7:0d:da:5d:cd:23:10:2f:bd:5e:55:33: da:a8:45:6b:c8:91:39:81:c3:72:57:e6:10:2c:37: c4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:11:2C:54:79:EB:1B:F1:92:67:7A:B0:84:65:B9:24:AE:3C:BA:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d813a30f-7c6f-3784-bbf1-69517a391010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d1:88:98:46:9d:08:ea:82:a9:7a:05:99:2c:8a:cc:ac:19: dc:58:6a:48:4f:6e:56:3c:df:4d:36:cc:7b:e1:2c:65:62:7d: c1:d5:a6:99:32:01:92:4a:89:27:4b:c4:79:e2:8d:3d:65:88: e1:a5:93:1d:5a:e0:91:95:02:b7:8e:a0:1d:a5:b4:25:9a:e2: 56:cd:fe:3d:e5:6f:3d:92:05:4f:7f:de:fb:74:fc:cb:79:78: 57:cd:b3:4e:18:a3:05:a8:56:d0:db:9f:af:71:e5:04:84:15: e7:cf:ae:be:4c:d5:41:84:aa:dd:0d:2b:88:10:c2:51:48:d6: a4:cb:2d:cb:f4:2d:cd:19:86:a1:a4:bb:a0:69:b0:6e:82:0f: aa:9b:77:a8:99:06:5f:c3:61:ed:dc:f4:82:7e:9a:8c:ae:24: b4:4f:11:fb:8e:5e:6e:93:6b:f9:08:75:9f:93:9b:7d:eb:d3: 7c:44:6e:0f:fc:96:e9:1f:5b:c6:ee:d8:44:62:65:01:a3:0b: a9:13:91:15:f5:05:ce:53:30:ae:9d:e6:da:bc:78:bd:42:bc: 78:ff:b5:fc:41:ea:68:26:89:46:2e:23:b5:12:bf:39:39:66: 35:c6:be:ba:0a:59:a4:3f:9b:c6:e9:9d:55:a3:8e:25:8b:f7: 4f:85:dc:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4SwwxAJ4OyRZR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTBhMDExZDgtMzFiNS00NjA4LWJlNjYtNTkxODUwNjFjZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJZulT0LICa+/d7jkX/WRp+HhmDX27o+4k3X cDPfXW4hHM0ru0CW6wL6PpOCwd3Sjye8ub9bIay6FCjvNAEYjFV7e7/eqUjmAMjc nETO7PHU+0wwtbDDsYOviPGBOkSVhrxBlrj9AuYbQyl9hwGYP8YnA3otdn/ZJNNe 0NwEEYNc2FHNQcgu5f0UngL3/NUb1ZmXUcd5bnTOys67TqC8hJPMQTHwP73NL6yx f1pCulbxvLP6cAGdLPZcx+yTaugQp0hYwtwGFAmkJgwTEpbmhmwE+wFSfCkc405g o0jGsRFSQcDHDdpdzSMQL71eVTPaqEVryJE5gcNyV+YQLDfE1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQRLFR56xvxkmd6sIRluSSuPLp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDgxM2EzMGYtN2M2Zi0z Nzg0LWJiZjEtNjk1MTdhMzkxMDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrRiJhGnQjqgql6BZksisysGdxYakhPblY83002zHvhLGVifcHVppky AZJKiSdLxHnijT1liOGlkx1a4JGVAreOoB2ltCWa4lbN/j3lbz2SBU9/3vt0/Mt5 eFfNs04YowWoVtDbn69x5QSEFefPrr5M1UGEqt0NK4gQwlFI1qTLLcv0Lc0ZhqGk u6BpsG6CD6qbd6iZBl/DYe3c9IJ+moyuJLRPEfuOXm6Ta/kIdZ+Tm33r03xEbg/8 lukfW8bu2ERiZQGjC6kTkRX1Bc5TMK6d5tq8eL1CvHj/tfxB6mgmiUYuI7USvzk5 ZjXGvroKWaQ/m8bpnVWjjiWL90+F3Ao= -----END CERTIFICATE-----Generated at Thu Mar 26 14:14:27 2026 by rpki-client