$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e70cd449-30a3-3b2b-a48c-52c8fcc9b2b1.roa File: e70cd449-30a3-3b2b-a48c-52c8fcc9b2b1.roa (raw, json) Hash identifier: VvEjITmw5Z7oHwbrLoqj/igXUKnKAuGJgbOZcgdMGyk= Subject key identifier: C5:51:4D:E3:74:24:F9:1A:5A:4E:37:C5:73:ED:37:A6:87:EA:FC:B9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2644BBC36E44DE41DD832F40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e70cd449-30a3-3b2b-a48c-52c8fcc9b2b1.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 30036 IP address blocks: 173.17.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:bb:c3:6e:44:de:41:dd:83:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=1607719c-7eff-40d2-9f5e-35193f29fbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:23:9e:85:6d:3b:10:5d:2b:78:62:1c:00: 97:76:82:33:f7:de:a8:60:16:50:47:3b:44:c9:ef: 27:e2:78:ed:91:41:45:96:66:cf:ea:95:6d:59:3a: 7f:a7:03:9a:f7:31:f9:76:52:18:ca:ec:24:2c:26: 3a:ed:f5:90:96:dc:d5:cd:28:67:87:d1:9d:86:b3: 29:9f:62:56:de:a1:fc:4b:89:87:70:26:71:dd:e7: c8:e4:eb:04:df:fb:c8:c5:4e:ce:17:6e:97:2a:47: 84:4e:d7:12:28:45:fc:92:44:9c:2d:69:a6:f5:da: 8b:a5:de:9f:af:1c:50:d7:c6:2c:66:0d:6b:68:c7: 81:51:62:e1:d9:d6:0c:d2:ae:dd:f7:ee:28:04:0b: 60:94:37:73:04:b5:68:8f:7c:b7:76:89:cf:27:96: 60:6e:04:10:2e:10:fa:27:ae:60:c6:f4:18:c3:f3: 7e:b2:2d:66:97:38:25:30:b2:a5:8a:62:86:7a:d4: 35:6e:b2:0b:81:53:2a:e9:d8:77:ae:3c:ae:89:d4: 4e:10:06:1c:b0:5f:72:b7:6d:c3:8b:35:71:6c:3c: 07:8e:c6:e7:77:40:0e:e1:b6:e7:e7:d4:b2:ce:0f: 4c:7b:64:76:c9:53:67:3c:b4:9f:78:72:80:29:4e: fc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:51:4D:E3:74:24:F9:1A:5A:4E:37:C5:73:ED:37:A6:87:EA:FC:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e70cd449-30a3-3b2b-a48c-52c8fcc9b2b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:70:54:c7:f6:1c:a4:51:79:1c:a4:21:23:d3:c6:29:b4:34: 13:7b:90:c4:e6:0a:5e:bf:ee:3c:8c:f1:e6:f0:c7:47:00:89: 70:80:73:10:d5:83:9f:cc:d9:95:c6:7e:6d:ba:a2:4c:c2:68: 72:6c:5a:38:ec:f3:b7:b6:bb:37:13:d9:8c:28:ce:f7:04:1b: ca:ac:af:83:d2:e7:69:6b:16:1c:00:67:84:ba:a0:28:bc:ac: 7e:12:2e:3e:41:8d:71:4d:24:1d:e1:72:45:5d:5e:79:fb:0c: 64:21:16:f8:4b:da:ec:9c:7a:3e:01:42:54:d8:37:95:10:61: d1:0a:87:73:39:cd:a0:77:49:43:82:7c:e4:b7:df:b1:14:ee: a2:57:21:bd:a4:ec:a8:9c:ed:88:aa:e3:da:cb:33:6a:0b:82: 4a:dd:4c:b8:5b:a7:d8:cc:e5:b5:1f:ac:82:00:30:40:68:30: 21:b2:fa:70:40:13:1a:3f:b8:e2:2d:a8:a6:20:8d:d8:43:27: 9d:97:66:00:20:1d:f2:4a:6e:5e:c5:1b:69:84:8c:a3:e0:04: e5:89:f5:64:b1:5c:85:6c:72:51:f3:b2:f5:9f:22:1c:6b:b1: 54:a8:4e:9a:3e:eb:fa:14:fe:06:b2:b5:92:24:ef:f0:fe:e5: 0f:34:56:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLvDbkTeQd2DL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk MTYwNzcxOWMtN2VmZi00MGQyLTlmNWUtMzUxOTNmMjlmYmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArysjnoVtOxBdK3hiHACXdoIz996oYBZQRztE ye8n4njtkUFFlmbP6pVtWTp/pwOa9zH5dlIYyuwkLCY67fWQltzVzShnh9GdhrMp n2JW3qH8S4mHcCZx3efI5OsE3/vIxU7OF26XKkeETtcSKEX8kkScLWmm9dqLpd6f rxxQ18YsZg1raMeBUWLh2dYM0q7d9+4oBAtglDdzBLVoj3y3donPJ5ZgbgQQLhD6 J65gxvQYw/N+si1mlzglMLKlimKGetQ1brILgVMq6dh3rjyuidROEAYcsF9yt23D izVxbDwHjsbnd0AO4bbn59Syzg9Me2R2yVNnPLSfeHKAKU78yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVRTeN0JPkaWk43xXPtN6aH6vy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTcwY2Q0NDktMzBhMy0z YjJiLWE0OGMtNTJjOGZjYzliMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpwVMf2HKRReRykISPTxim0NBN7kMTmCl6/7jyM8ebwx0cAiXCAcxDV g5/M2ZXGfm26okzCaHJsWjjs87e2uzcT2YwozvcEG8qsr4PS52lrFhwAZ4S6oCi8 rH4SLj5BjXFNJB3hckVdXnn7DGQhFvhL2uycej4BQlTYN5UQYdEKh3M5zaB3SUOC fOS337EU7qJXIb2k7Kic7Yiq49rLM2oLgkrdTLhbp9jM5bUfrIIAMEBoMCGy+nBA Exo/uOItqKYgjdhDJ52XZgAgHfJKbl7FG2mEjKPgBOWJ9WSxXIVsclHzsvWfIhxr sVSoTpo+6/oU/gaytZIk7/D+5Q80Vl4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:08:27 2026 by rpki-client