$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1286f83-b066-3ef9-aa8b-3557d8930371.roa File: e1286f83-b066-3ef9-aa8b-3557d8930371.roa (raw, json) Hash identifier: amB2d1RKEKIQTyz2F8Llry0BXiVSg5Tqw0sepZn+72I= Subject key identifier: 57:7D:C5:53:F6:64:C4:93:EF:E5:0C:7A:C0:1C:17:70:7E:A8:EC:C1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AACA6A9F92064E4E0FAA80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1286f83-b066-3ef9-aa8b-3557d8930371.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.21.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:ca:6a:9f:92:06:4e:4e:0f:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=e9a8d880-85f7-4537-b051-d7244de77e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:01:8c:45:80:15:64:a3:60:c7:69:0e:f2:7e: 3c:87:39:7d:20:08:50:dc:75:9d:94:b8:05:89:0f: bc:68:51:27:0c:a6:38:e9:c1:ba:e6:85:62:ec:39: fc:09:80:61:27:b0:86:23:e2:2f:26:c2:59:6a:10: 92:de:09:f4:de:00:13:f0:dc:bb:67:50:0d:88:c9: ed:60:76:bb:bd:93:1b:c0:8f:be:d3:1e:db:6c:ba: da:56:f4:bf:7a:ce:ac:72:7c:4e:42:b4:6b:7c:6e: 74:20:c6:0b:2e:03:4a:48:1a:db:78:f8:62:91:2b: c5:fb:83:1b:77:54:ac:ab:2c:5e:e7:cd:54:fc:a0: 9e:36:ef:eb:ae:43:6f:0b:58:15:67:77:dc:c2:eb: 82:45:fa:39:5b:45:8d:b4:b9:29:dc:eb:29:e7:56: 1f:a6:ef:ab:0e:15:96:6e:49:3a:3a:c1:75:1a:db: 61:9c:ac:b8:4a:a0:70:d7:e8:31:16:e3:7f:d5:c4: d6:32:9f:95:f6:7c:66:6d:e2:8f:c4:5f:34:85:81: 34:76:9b:86:e9:a8:4d:e5:06:ba:03:fc:37:da:4d: 42:ee:3e:13:67:58:b4:90:ba:10:d3:4d:e8:4a:02: 04:b2:f6:e3:8e:75:91:22:e3:ff:90:9b:1f:5b:76: 39:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7D:C5:53:F6:64:C4:93:EF:E5:0C:7A:C0:1C:17:70:7E:A8:EC:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1286f83-b066-3ef9-aa8b-3557d8930371.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ee:fb:3c:a5:34:79:49:85:12:d9:52:5b:5c:96:0d:3d:86: fc:42:89:94:02:cf:24:5f:93:1d:d1:71:5d:01:72:20:08:d7: 73:d5:35:91:9b:c7:60:32:21:ac:63:f2:79:50:3e:78:e1:95: 4d:41:b3:7a:12:8e:7f:0e:30:7e:64:0e:d4:02:38:c8:e2:61: f7:1e:c3:02:86:f4:60:a7:97:f1:f0:4b:1c:28:87:60:ec:c4: f9:d7:a5:c5:ef:a6:20:94:cb:f6:68:b9:db:63:06:aa:32:93: 55:84:1e:fd:d6:f9:6e:28:a4:b7:ed:53:4d:40:af:ca:84:85: 46:83:22:4f:28:3e:f1:a8:1a:cb:05:5d:93:34:d7:f6:5d:66: 3f:14:96:8e:97:c1:c6:cb:f6:da:f6:cb:ec:3b:bb:01:57:89: 2a:b0:dc:fd:1a:1b:b6:de:cf:ca:6b:fd:1b:b1:69:ff:d4:5f: 83:d9:7b:0d:96:21:c8:ce:35:fa:6a:81:69:93:97:2f:3f:ce: d8:8d:30:99:91:b7:86:1e:98:5d:58:e0:01:88:06:60:31:61: 3b:fc:f5:f3:ac:a8:bc:5f:7f:79:5c:ee:31:70:36:61:0e:02: df:c9:a1:7f:f8:97:7f:df:63:37:00:55:1c:ed:34:8a:b6:1a: 94:5d:37:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqspqn5IGTk4PqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZTlhOGQ4ODAtODVmNy00NTM3LWIwNTEtZDcyNDRkZTc3ZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAGMRYAVZKNgx2kO8n48hzl9IAhQ3HWdlLgF iQ+8aFEnDKY46cG65oVi7Dn8CYBhJ7CGI+IvJsJZahCS3gn03gAT8Ny7Z1ANiMnt YHa7vZMbwI++0x7bbLraVvS/es6scnxOQrRrfG50IMYLLgNKSBrbePhikSvF+4Mb d1Ssqyxe581U/KCeNu/rrkNvC1gVZ3fcwuuCRfo5W0WNtLkp3Osp51Yfpu+rDhWW bkk6OsF1GtthnKy4SqBw1+gxFuN/1cTWMp+V9nxmbeKPxF80hYE0dpuG6ahN5Qa6 A/w32k1C7j4TZ1i0kLoQ003oSgIEsvbjjnWRIuP/kJsfW3Y50wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFd9xVP2ZMST7+UMesAcF3B+qOzBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTEyODZmODMtYjA2Ni0z ZWY5LWFhOGItMzU1N2Q4OTMwMzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfu+zylNHlJhRLZUltclg09hvxCiZQCzyRfkx3RcV0BciAI13PVNZGb x2AyIaxj8nlQPnjhlU1Bs3oSjn8OMH5kDtQCOMjiYfcewwKG9GCnl/HwSxwoh2Ds xPnXpcXvpiCUy/ZoudtjBqoyk1WEHv3W+W4opLftU01Ar8qEhUaDIk8oPvGoGssF XZM01/ZdZj8Ulo6XwcbL9tr2y+w7uwFXiSqw3P0aG7bez8pr/Ruxaf/UX4PZew2W IcjONfpqgWmTly8/ztiNMJmRt4YemF1Y4AGIBmAxYTv89fOsqLxff3lc7jFwNmEO At/JoX/4l3/fYzcAVRztNIq2GpRdN3I= -----END CERTIFICATE-----Generated at Thu Mar 26 14:16:12 2026 by rpki-client