$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db99f61d-31ec-37f3-b7ec-a859c703324e.roa File: db99f61d-31ec-37f3-b7ec-a859c703324e.roa (raw, json) Hash identifier: AKdtvKzAxHEijtC+bI5z6dktnkKUpMc3o+BsGOLU7Ec= Subject key identifier: 27:BB:89:4A:03:9C:CD:20:7E:55:BB:40:D3:FA:03:17:BD:FD:D6:23 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E1313A6CAB66C9BB6DA100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db99f61d-31ec-37f3-b7ec-a859c703324e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.25.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:31:3a:6c:ab:66:c9:bb:6d:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f9b2aaf0-0bfe-4235-9ac1-3617d5fa1b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:72:ae:ba:85:76:a2:3c:a5:02:1f:47:74: f4:07:94:7b:c1:9c:71:c3:5f:07:8a:10:65:a6:ff: 25:d6:fd:2a:31:f0:7d:ee:dc:8f:80:9a:51:71:db: 84:05:17:00:59:cd:fc:8a:9c:11:d9:c2:e5:4b:a0: 1f:d4:92:cd:3c:94:ba:57:51:5d:20:58:c1:d2:25: 9c:61:d6:44:ed:08:93:ba:cb:61:7c:d8:d8:23:ed: f3:6d:9c:46:4a:4b:bd:ed:22:e1:3e:86:8f:07:94: 34:dd:fd:73:ae:50:b0:21:95:e7:57:76:47:c0:37: 11:97:01:54:fd:0c:8a:96:0b:a2:4b:c7:21:36:be: 51:b4:05:fe:17:84:f9:86:84:00:d7:37:01:b5:c8: ab:86:5a:25:97:bc:ff:1c:83:08:91:4c:d0:c8:b2: fd:ae:46:2b:71:7c:a6:15:54:f7:2b:23:51:82:9b: fd:6c:ae:a0:0d:94:4e:3e:13:cd:78:fd:87:8f:83: 6f:f0:56:b3:e7:3e:46:6f:eb:bd:73:f7:40:f6:dc: 87:cb:04:b9:5e:5b:42:02:1a:2c:2c:26:a2:ae:c2: e2:f6:38:c5:f4:d4:95:1e:a7:5f:ee:04:d7:e5:a5: d9:97:8d:c7:0d:4b:6b:67:6b:6c:95:f3:96:ac:ab: a2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BB:89:4A:03:9C:CD:20:7E:55:BB:40:D3:FA:03:17:BD:FD:D6:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db99f61d-31ec-37f3-b7ec-a859c703324e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:11:51:ec:c3:2b:43:fb:3f:a3:8d:2a:f1:e5:82:f5:73:8a: 2a:9a:09:b8:2b:7c:12:75:bd:33:96:a5:e9:7b:3e:46:b7:b0: 99:0b:5d:59:1a:1f:39:bb:7c:08:0a:ef:fb:53:5c:b0:bf:bc: c1:02:4f:ff:0f:a0:dd:12:94:2b:2d:fa:16:a5:e8:a0:f2:18: 1d:33:85:5b:50:62:ec:5c:62:3a:b7:91:0e:04:47:aa:6f:ed: 39:7a:0b:51:d0:57:30:f9:f3:57:6a:84:ef:5f:35:97:e7:85: bb:a5:53:4b:f6:82:2a:57:1d:a3:76:2f:1f:c5:6d:c9:ab:75: 65:4c:b2:02:ce:13:88:29:a8:dd:1d:6e:cd:49:96:a3:5f:76: 13:b9:73:c3:b8:40:91:45:35:17:35:77:7c:e9:eb:62:73:da: a9:31:7e:7a:46:c7:aa:98:e3:b9:85:ea:5c:d6:9c:6c:48:e5: 3a:05:1c:dd:04:94:2f:0a:a8:b9:f3:40:0b:0d:51:5f:dd:97: f9:26:2d:0f:6f:70:55:d3:e4:67:0f:c8:13:22:30:85:e6:0e: 85:32:32:40:23:46:21:02:5b:b8:bf:9b:13:a7:be:f7:03:d9: 38:a2:f3:8e:7e:91:31:78:32:39:9c:1a:cb:db:be:ae:27:06: 75:9a:77:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4TE6bKtmybttoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZjliMmFhZjAtMGJmZS00MjM1LTlhYzEtMzYxN2Q1ZmExYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/dyrrqFdqI8pQIfR3T0B5R7wZxxw18HihBl pv8l1v0qMfB97tyPgJpRcduEBRcAWc38ipwR2cLlS6Af1JLNPJS6V1FdIFjB0iWc YdZE7QiTusthfNjYI+3zbZxGSku97SLhPoaPB5Q03f1zrlCwIZXnV3ZHwDcRlwFU /QyKlguiS8chNr5RtAX+F4T5hoQA1zcBtcirhloll7z/HIMIkUzQyLL9rkYrcXym FVT3KyNRgpv9bK6gDZROPhPNeP2Hj4Nv8Faz5z5Gb+u9c/dA9tyHywS5XltCAhos LCairsLi9jjF9NSVHqdf7gTX5aXZl43HDUtrZ2tslfOWrKuipQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe7iUoDnM0gflW7QNP6Axe9/dYjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGI5OWY2MWQtMzFlYy0z N2YzLWI3ZWMtYTg1OWM3MDMzMjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQRUezDK0P7P6ONKvHlgvVziiqaCbgrfBJ1vTOWpel7Pka3sJkLXVka Hzm7fAgK7/tTXLC/vMECT/8PoN0SlCst+hal6KDyGB0zhVtQYuxcYjq3kQ4ER6pv 7Tl6C1HQVzD581dqhO9fNZfnhbulU0v2gipXHaN2Lx/FbcmrdWVMsgLOE4gpqN0d bs1JlqNfdhO5c8O4QJFFNRc1d3zp62Jz2qkxfnpGx6qY47mF6lzWnGxI5ToFHN0E lC8KqLnzQAsNUV/dl/kmLQ9vcFXT5GcPyBMiMIXmDoUyMkAjRiECW7i/mxOnvvcD 2Tii845+kTF4MjmcGsvbvq4nBnWad5Q= -----END CERTIFICATE-----Generated at Thu Mar 26 12:04:01 2026 by rpki-client