$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa File: ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa (raw, json) Hash identifier: vPjoA0eDz9XDfv4sdrBF5cvARYtpb+HO1rS78BZOxEk= Subject key identifier: 80:A8:E0:95:ED:B3:49:55:E1:63:17:2F:7C:EF:A9:7B:D1:DD:B2:EB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E1111077325FA47266BD00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.28.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:11:10:77:32:5f:a4:72:66:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=34c8d83a-3651-40cd-8d5c-0c718ffafe85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:54:60:1b:4a:3e:77:05:55:6c:f0:8d:9e: d5:02:06:8e:ce:f6:5b:2a:8e:01:4a:6f:1a:a2:d6: 8f:85:59:c4:9d:0c:df:b6:8c:6e:4f:a4:05:6d:b1: 69:32:ab:1e:11:40:1f:ce:2d:a2:54:87:42:68:71: fa:01:42:45:44:74:94:ea:c7:69:f2:0c:10:68:63: f5:c8:82:b8:ab:ed:30:be:a5:ee:9d:e1:76:e6:83: 6c:e2:9f:b1:ce:fa:b8:bf:db:21:08:99:b7:18:82: fa:e6:b8:e6:bd:19:0b:1e:de:d3:1a:52:6a:e9:77: d2:3a:b6:6e:e6:2e:20:ad:68:bf:5f:94:2f:cf:14: 4e:00:df:f9:c2:d1:8d:7d:a4:de:34:9c:d9:84:ab: b5:fc:81:97:91:e2:39:71:c2:7f:41:5d:c2:e4:ab: 7c:e0:8c:2f:11:99:e5:4d:7d:0a:d1:27:74:af:e0: d3:a4:dd:d6:15:ba:59:2c:93:06:dc:83:94:64:18: 0a:f2:be:a9:c8:b9:3e:7a:cb:ce:db:4c:55:ec:34: f5:f9:26:45:18:e6:00:14:88:6d:70:ea:b6:07:db: 8b:fb:54:14:25:5f:ab:fa:25:fc:45:9b:cb:ce:ac: fe:fe:48:a7:44:06:3c:eb:87:80:18:61:e5:7d:50: ab:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A8:E0:95:ED:B3:49:55:E1:63:17:2F:7C:EF:A9:7B:D1:DD:B2:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ed67d5f7-25ab-3965-b617-25aa4f7810f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:9a:8f:37:48:2f:cf:d0:1c:dd:e2:e8:da:09:08:d2:8b:33: 7c:30:85:3f:60:50:7e:a2:3e:4a:4e:c3:cb:9c:d6:e2:4b:07: 88:3d:4a:bb:fe:45:3f:17:f1:dd:81:17:c9:85:6b:a0:69:01: 75:72:00:3e:8b:f4:f6:6a:ed:79:f1:16:ff:4a:5e:14:5e:c2: 01:2e:63:19:a2:92:e5:6e:c4:da:c7:6f:6b:7a:16:39:3d:c8: 7a:4c:d0:48:e8:1d:72:5c:3f:16:d7:d7:55:44:fe:89:ad:c5: 62:1f:a2:84:22:d4:5d:ea:b6:38:e7:2a:9e:dc:4e:2e:0b:22: 76:6a:21:5c:46:25:99:65:4f:1e:fb:ed:d2:2c:08:f2:73:92: 11:9b:a3:08:3e:53:e6:d8:1e:80:de:6a:61:d2:f2:5f:1f:35: a0:0e:44:6e:ed:3e:53:ae:10:ee:24:1a:21:5e:21:a8:a6:9b: 23:09:51:42:38:a9:a3:9a:86:f3:54:b6:73:96:41:40:27:c4: b7:8e:17:42:a5:64:06:dc:c6:fc:36:3c:b6:56:c6:77:33:21: 7f:a5:48:3b:90:19:f5:db:46:33:07:bd:21:55:06:05:8e:e5: b7:49:54:3c:7a:e4:52:f5:5f:f4:9a:a4:0b:9e:95:31:74:6d: f8:90:2a:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4REQdzJfpHJmvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzRjOGQ4M2EtMzY1MS00MGNkLThkNWMtMGM3MThmZmFmZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+hUYBtKPncFVWzwjZ7VAgaOzvZbKo4BSm8a otaPhVnEnQzftoxuT6QFbbFpMqseEUAfzi2iVIdCaHH6AUJFRHSU6sdp8gwQaGP1 yIK4q+0wvqXuneF25oNs4p+xzvq4v9shCJm3GIL65rjmvRkLHt7TGlJq6XfSOrZu 5i4grWi/X5QvzxROAN/5wtGNfaTeNJzZhKu1/IGXkeI5ccJ/QV3C5Kt84IwvEZnl TX0K0Sd0r+DTpN3WFbpZLJMG3IOUZBgK8r6pyLk+esvO20xV7DT1+SZFGOYAFIht cOq2B9uL+1QUJV+r+iX8RZvLzqz+/kinRAY864eAGGHlfVCr+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICo4JXts0lV4WMXL3zvqXvR3bLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWQ2N2Q1ZjctMjVhYi0z OTY1LWI2MTctMjVhYTRmNzgxMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWajzdIL8/QHN3i6NoJCNKLM3wwhT9gUH6iPkpOw8uc1uJLB4g9Srv+ RT8X8d2BF8mFa6BpAXVyAD6L9PZq7XnxFv9KXhRewgEuYxmikuVuxNrHb2t6Fjk9 yHpM0EjoHXJcPxbX11VE/omtxWIfooQi1F3qtjjnKp7cTi4LInZqIVxGJZllTx77 7dIsCPJzkhGbowg+U+bYHoDeamHS8l8fNaAORG7tPlOuEO4kGiFeIaimmyMJUUI4 qaOahvNUtnOWQUAnxLeOF0KlZAbcxvw2PLZWxnczIX+lSDuQGfXbRjMHvSFVBgWO 5bdJVDx65FL1X/SapAuelTF0bfiQKoc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:40:26 2026 by rpki-client