$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2592244-3972-351d-a9b2-bcae5ff67549.roa File: f2592244-3972-351d-a9b2-bcae5ff67549.roa (raw, json) Hash identifier: 1zkLNQ8e+0Hlr5yqrLDfztFcga1gjhE4+MCYIySaSCY= Subject key identifier: 6A:CA:55:26:E3:76:FC:BF:DC:72:C6:9D:8B:7F:B8:25:7F:23:8D:0B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E11F1C37A926FDF1E00500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2592244-3972-351d-a9b2-bcae5ff67549.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.21.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:1f:1c:37:a9:26:fd:f1:e0:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=5017feb0-0bd8-4cf9-a3bc-a9a5d99acf25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e9:03:bf:74:29:26:5b:65:d3:78:28:a1:2e: 66:b8:84:9d:92:76:00:de:f6:28:19:3b:87:04:88: db:36:f2:91:d8:c9:8a:9a:d7:ba:cd:20:90:e3:69: b3:d0:4e:57:60:b7:f2:d0:c8:21:56:d0:51:0c:6b: aa:24:30:d2:3d:e0:da:95:12:53:a6:5d:0a:e4:e5: 33:a7:8c:72:15:a0:08:94:58:13:86:bc:fb:e5:28: 42:05:69:16:36:6b:b9:f2:11:d9:da:07:71:f9:0c: 8f:cf:83:62:7c:0b:a3:fa:b4:99:0c:dd:c0:09:a5: 23:6c:d5:6e:79:c7:63:e4:1a:c4:bd:33:d6:94:9a: 64:4a:e2:d4:44:62:e0:18:54:f4:18:ee:96:84:6d: fa:d2:65:92:84:8e:91:3e:99:27:15:bc:f5:f0:d8: e9:83:1e:47:c1:f7:2d:48:0a:6a:a3:2c:cb:0b:ed: 25:f9:97:09:75:a9:94:38:16:bd:2c:e4:4b:6b:b7: 91:57:27:95:9e:61:be:f5:57:6c:42:6b:dc:e4:01: 82:2e:a8:83:d8:c3:35:c4:5e:12:ab:bd:a7:64:79: cc:7e:22:7c:6b:a1:9c:54:88:d3:f8:7f:15:26:01: 92:2d:11:11:4b:a9:21:1c:dd:04:d2:30:7e:8e:15: 13:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CA:55:26:E3:76:FC:BF:DC:72:C6:9D:8B:7F:B8:25:7F:23:8D:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2592244-3972-351d-a9b2-bcae5ff67549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a8:f5:3d:13:34:f4:27:2c:91:56:ee:17:88:65:8c:ba:fd: be:a0:d5:ab:3d:19:9b:db:44:63:c1:07:08:e5:94:32:89:33: ca:ab:ec:52:9a:c8:f2:01:e0:2f:b3:c0:44:7f:e0:0d:88:1c: be:a3:8d:35:67:a4:37:63:89:e3:ea:10:b1:33:e7:0c:36:c2: 61:8d:79:4d:19:2f:c4:4e:64:ea:9c:4f:06:5b:07:36:1b:58: 92:56:f4:b9:03:1e:44:c1:3a:45:e5:9b:4b:74:fd:66:15:8c: 23:ec:e0:fd:6b:15:2a:c6:3c:81:7c:54:88:a6:ea:1c:df:bf: 88:10:4d:cd:17:b0:79:ff:fd:ab:19:bf:aa:38:a4:04:b6:e8: 26:a6:91:70:69:87:87:0b:8e:ae:7b:80:b5:4d:e0:c8:fa:a9: c1:16:4a:f3:50:1d:00:45:70:62:53:84:98:3d:1c:e7:9a:cb: 65:f3:ea:2e:25:a3:87:20:50:43:46:5a:e0:1e:72:49:b2:b0: ff:49:0b:d2:df:35:f0:62:9a:48:68:7b:c7:ea:15:55:7a:83: 51:b6:29:e5:2a:aa:1c:8b:74:2d:7c:7a:24:98:92:bb:38:fa: ea:09:ed:70:94:96:ca:55:33:fd:24:13:14:85:78:ab:a3:e8: 7a:81:2c:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4R8cN6km/fHgBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NTAxN2ZlYjAtMGJkOC00Y2Y5LWEzYmMtYTlhNWQ5OWFjZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+kDv3QpJltl03gooS5muISdknYA3vYoGTuH BIjbNvKR2MmKmte6zSCQ42mz0E5XYLfy0MghVtBRDGuqJDDSPeDalRJTpl0K5OUz p4xyFaAIlFgThrz75ShCBWkWNmu58hHZ2gdx+QyPz4NifAuj+rSZDN3ACaUjbNVu ecdj5BrEvTPWlJpkSuLURGLgGFT0GO6WhG360mWShI6RPpknFbz18Njpgx5Hwfct SApqoyzLC+0l+ZcJdamUOBa9LORLa7eRVyeVnmG+9VdsQmvc5AGCLqiD2MM1xF4S q72nZHnMfiJ8a6GcVIjT+H8VJgGSLRERS6khHN0E0jB+jhUTXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrKVSbjdvy/3HLGnYt/uCV/I40LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjI1OTIyNDQtMzk3Mi0z NTFkLWE5YjItYmNhZTVmZjY3NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKo9T0TNPQnLJFW7heIZYy6/b6g1as9GZvbRGPBBwjllDKJM8qr7FKa yPIB4C+zwER/4A2IHL6jjTVnpDdjiePqELEz5ww2wmGNeU0ZL8ROZOqcTwZbBzYb WJJW9LkDHkTBOkXlm0t0/WYVjCPs4P1rFSrGPIF8VIim6hzfv4gQTc0XsHn//asZ v6o4pAS26CamkXBph4cLjq57gLVN4Mj6qcEWSvNQHQBFcGJThJg9HOeay2Xz6i4l o4cgUENGWuAeckmysP9JC9LfNfBimkhoe8fqFVV6g1G2KeUqqhyLdC18eiSYkrs4 +uoJ7XCUlspVM/0kExSFeKuj6HqBLP8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:17 2026 by rpki-client