$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa File: f1b86a0a-93ba-368e-9650-058271f8c2a3.roa (raw, json) Hash identifier: mUeEBybFeDb1HHq7N/L+gnQlGrykpIxV4FfiS9MCZkk= Subject key identifier: 5A:EE:1D:D6:E5:81:D2:04:28:C6:59:B5:EE:C7:D7:EA:19:5E:38:8A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E11CE7DFD5DF19B9CB21C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:1c:e7:df:d5:df:19:b9:cb:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2e1530ca-ba12-40f8-8bb8-8cd65476a60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1d:eb:5a:ae:af:91:6c:b7:72:2d:59:7a:16: 08:06:24:dc:d8:61:29:03:cb:27:8f:52:49:e1:57: 90:19:01:f7:b5:e4:12:53:86:1a:bb:ad:ec:4c:1c: c7:34:ad:e0:af:a6:98:f7:a9:e5:d1:70:0c:f5:5f: a2:fe:41:02:e1:60:ec:f0:98:5e:b4:5a:e0:76:e6: 40:80:c7:d6:ba:99:65:6b:2d:f5:05:28:f1:a1:5b: cd:db:5e:73:1a:1a:85:b4:96:83:01:bd:c3:de:1c: 2d:6d:72:44:95:c5:d7:b7:dd:c6:ad:59:aa:c5:23: 7b:a1:f3:8d:57:f8:03:4c:fe:13:02:71:f2:55:b3: 78:c2:c8:5a:47:95:6c:70:9f:0f:0c:c0:5b:0d:04: 13:7a:aa:36:bf:b1:ca:85:58:18:0c:e4:c4:ff:16: 70:94:71:1b:c2:a5:4b:a1:2c:5b:29:5b:5c:f4:72: ea:af:9c:43:d5:20:42:dc:f4:cc:22:a3:0c:ec:73: ff:6c:83:76:2e:94:74:9a:dd:b3:4d:ad:de:2c:9d: f9:c2:9e:bc:a2:b9:0d:1a:bc:d2:95:9a:3d:e0:7e: 44:66:89:9a:54:46:f7:8d:46:74:d5:65:88:0a:87: 42:f7:e5:31:c0:d9:30:bb:ff:44:f7:b4:a0:d1:14: 80:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EE:1D:D6:E5:81:D2:04:28:C6:59:B5:EE:C7:D7:EA:19:5E:38:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f1b86a0a-93ba-368e-9650-058271f8c2a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:70:da:db:87:b8:d9:51:6d:17:e9:fa:3c:70:d4:99:9c:0e: 9d:b3:23:9a:ce:10:2f:16:3d:32:06:bf:58:b8:d2:4d:32:40: ae:05:8b:c0:ef:e2:a6:9b:1a:72:65:93:a2:2d:08:47:08:93: 9d:24:c3:20:d4:72:ea:60:b3:0f:b9:6f:5d:3a:f0:b2:2b:09: b1:a1:39:c4:ed:65:7d:ba:0c:31:39:82:4d:07:a0:d5:b8:64: 43:1c:fe:42:e6:f2:7b:62:30:fd:7a:05:40:76:42:a3:45:69: ef:24:f5:0a:61:67:68:e0:63:2c:4a:14:0f:fa:fd:f9:35:5e: e4:de:a5:bd:4b:f1:ba:42:0d:39:44:46:bc:0e:f2:ea:84:c1: 9c:f5:cb:9f:5f:7c:9c:9c:54:d7:5d:c7:37:a1:4b:ec:a4:ed: b6:56:5d:c5:fa:cf:df:8c:94:1a:99:17:5b:95:b9:10:d7:32: ce:45:0c:36:43:e5:73:dd:f5:34:10:18:f5:e9:e6:a3:07:8e: 0e:85:ea:9b:cf:7c:09:28:03:c5:2a:40:14:e5:d0:f8:e1:00: 43:67:f8:28:48:22:d8:41:af:b3:28:7c:fd:46:a3:1a:3a:b4: 5a:d8:07:43:0f:8c:19:93:47:38:79:b3:5b:20:10:0c:e9:d2: 93:a4:e1:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Rzn39XfGbnLIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MmUxNTMwY2EtYmExMi00MGY4LThiYjgtOGNkNjU0NzZhNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx3rWq6vkWy3ci1ZehYIBiTc2GEpA8snj1JJ 4VeQGQH3teQSU4Yau63sTBzHNK3gr6aY96nl0XAM9V+i/kEC4WDs8JhetFrgduZA gMfWupllay31BSjxoVvN215zGhqFtJaDAb3D3hwtbXJElcXXt93GrVmqxSN7ofON V/gDTP4TAnHyVbN4wshaR5VscJ8PDMBbDQQTeqo2v7HKhVgYDOTE/xZwlHEbwqVL oSxbKVtc9HLqr5xD1SBC3PTMIqMM7HP/bIN2LpR0mt2zTa3eLJ35wp68orkNGrzS lZo94H5EZomaVEb3jUZ01WWICodC9+UxwNkwu/9E97Sg0RSA3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFruHdblgdIEKMZZte7H1+oZXjiKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjFiODZhMGEtOTNiYS0z NjhlLTk2NTAtMDU4MjcxZjhjMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZw2tuHuNlRbRfp+jxw1JmcDp2zI5rOEC8WPTIGv1i40k0yQK4Fi8Dv 4qabGnJlk6ItCEcIk50kwyDUcupgsw+5b1068LIrCbGhOcTtZX26DDE5gk0HoNW4 ZEMc/kLm8ntiMP16BUB2QqNFae8k9QphZ2jgYyxKFA/6/fk1XuTepb1L8bpCDTlE RrwO8uqEwZz1y59ffJycVNddxzehS+yk7bZWXcX6z9+MlBqZF1uVuRDXMs5FDDZD 5XPd9TQQGPXp5qMHjg6F6pvPfAkoA8UqQBTl0PjhAENn+ChIIthBr7MofP1Goxo6 tFrYB0MPjBmTRzh5s1sgEAzp0pOk4aM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:04 2026 by rpki-client