$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa File: ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa (raw, json) Hash identifier: 8qvmAO9KdxnRKHPYXBTyZ5TSxYoDv7ECjkyLdVfxaTM= Subject key identifier: 7E:A5:4D:59:60:63:E7:29:DE:7A:57:B7:0A:26:89:9B:13:E7:90:F8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF9579964681EE4DE1D580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.28.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:95:79:96:46:81:ee:4d:e1:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=def50af2-9747-493e-961b-40088ad0cdcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:7a:e6:17:2c:aa:5a:18:f4:0a:6b:e7:e0: 68:e4:86:9d:93:9e:87:ff:2e:a1:fa:56:b4:a1:6c: 8b:0b:73:df:73:58:8e:10:6d:2c:e7:e9:c3:e9:6e: 57:21:80:37:48:75:c6:d1:f1:99:b9:59:d7:f2:11: b4:d3:91:70:5e:ca:20:c3:56:e3:33:6f:92:6d:7d: 0b:65:a2:09:9f:04:ea:d3:9f:4e:36:82:6b:a4:9a: 2f:da:8f:50:fb:39:6f:3b:ad:92:5c:b7:f0:c7:0c: a4:34:13:d5:20:32:80:e4:d2:da:f2:57:ed:f3:60: 8b:49:b9:88:1f:94:40:9a:30:24:8f:f1:6e:fc:4e: 89:c1:1d:e2:2a:e1:88:d9:d1:83:fa:4b:af:ca:5f: 80:06:73:d7:fd:19:d7:b5:ba:b2:80:d7:ec:7b:1f: 82:ec:e7:87:96:b2:62:2f:04:6e:7b:e0:fd:02:44: 06:5e:8b:3d:54:f8:89:05:dd:bc:f3:cb:a5:19:94: b3:75:54:89:68:fc:9c:04:2a:8e:eb:46:8f:3b:f5: 16:f1:40:c9:c1:5f:3f:31:cb:3d:7e:ce:eb:ea:2c: 3b:a7:07:af:9f:a0:dc:d8:b5:5b:a8:ba:82:9d:d9: d2:53:a5:26:69:d4:da:7d:7d:0a:43:50:33:b2:90: b0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A5:4D:59:60:63:E7:29:DE:7A:57:B7:0A:26:89:9B:13:E7:90:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d3:e1:37:30:05:a0:84:5a:84:5c:75:1d:5f:ca:c8:ff:ae: b9:b9:ef:e4:b1:43:ad:65:ed:1d:86:6f:f1:5c:9c:a1:76:e5: 0e:54:9c:c3:08:55:2c:0e:59:50:42:57:c4:8e:60:f5:f4:8b: 38:fd:00:11:4f:46:72:3f:ef:0a:62:fe:bf:92:b1:3a:de:17: 6d:c5:e4:5f:4a:1a:fb:46:fe:65:18:b9:37:4f:2f:cd:df:7d: bd:8a:7b:3d:b4:bd:43:e3:a6:a4:9d:44:5b:46:25:50:1e:2d: b8:db:bd:6e:03:46:dc:7b:f2:68:e6:e2:b4:0e:82:cc:8c:8f: 97:0a:6f:3d:19:9c:a0:17:f8:28:91:c7:61:72:84:3f:bc:22: 47:e3:4a:37:a2:29:29:4e:2c:32:2d:89:04:89:a5:bf:f4:84: 9c:37:ce:66:ab:e1:3e:30:52:b8:50:0b:43:04:27:79:ec:09: 71:6c:52:43:40:cc:16:52:48:3a:65:cf:6a:08:bb:58:fd:d9: 6d:11:31:62:0e:c5:e1:7b:f8:43:af:86:16:f9:93:a8:59:4c: 7b:8a:a5:b6:5b:94:e9:cd:66:d6:14:08:d0:aa:73:eb:27:d8: c5:22:7e:38:44:dc:a1:f9:fd:3b:2f:2d:2b:a1:93:d3:85:14: dd:67:81:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35V5lkaB7k3h1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGVmNTBhZjItOTc0Ny00OTNlLTk2MWItNDAwODhhZDBjZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Yl65hcsqloY9Apr5+Bo5Iadk56H/y6h+la0 oWyLC3Pfc1iOEG0s5+nD6W5XIYA3SHXG0fGZuVnX8hG005FwXsogw1bjM2+SbX0L ZaIJnwTq059ONoJrpJov2o9Q+zlvO62SXLfwxwykNBPVIDKA5NLa8lft82CLSbmI H5RAmjAkj/Fu/E6JwR3iKuGI2dGD+kuvyl+ABnPX/RnXtbqygNfsex+C7OeHlrJi LwRue+D9AkQGXos9VPiJBd2888ulGZSzdVSJaPycBCqO60aPO/UW8UDJwV8/Mcs9 fs7r6iw7pwevn6Dc2LVbqLqCndnSU6UmadTafX0KQ1AzspCwLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6lTVlgY+cp3npXtwomiZsT55D4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWY3ZjEwZWQtNGRkYy0z NWI4LTg2ZjctM2NlMjE5OTU3YzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzT4TcwBaCEWoRcdR1fysj/rrm57+SxQ61l7R2Gb/FcnKF25Q5UnMMI VSwOWVBCV8SOYPX0izj9ABFPRnI/7wpi/r+SsTreF23F5F9KGvtG/mUYuTdPL83f fb2Kez20vUPjpqSdRFtGJVAeLbjbvW4DRtx78mjm4rQOgsyMj5cKbz0ZnKAX+CiR x2FyhD+8IkfjSjeiKSlOLDItiQSJpb/0hJw3zmar4T4wUrhQC0MEJ3nsCXFsUkNA zBZSSDplz2oIu1j92W0RMWIOxeF7+EOvhhb5k6hZTHuKpbZblOnNZtYUCNCqc+sn 2MUifjhE3KH5/TsvLSuhk9OFFN1ngVI= -----END CERTIFICATE-----Generated at Thu Mar 26 07:40:00 2026 by rpki-client