$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2f51365-51a1-360d-9629-bff61c17c6e8.roa File: f2f51365-51a1-360d-9629-bff61c17c6e8.roa (raw, json) Hash identifier: nwQDHdqlHAqJGCG7m6TgIdoVazZdpgryB+WeoWO9XCI= Subject key identifier: FD:74:4D:0A:8B:B9:CF:80:A4:53:4A:21:95:4A:61:BB:D9:34:FB:19 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2644BD257236A30EF5374100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2f51365-51a1-360d-9629-bff61c17c6e8.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 30036 IP address blocks: 173.28.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:bd:25:72:36:a3:0e:f5:37:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=f64e6a8b-7d94-42d0-9903-c27c7655f172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:db:86:79:e9:cf:ed:5a:62:f4:81:1d:58:0b: 33:03:4b:46:5b:d2:88:b1:f8:34:ee:0e:4d:95:d1: b5:c0:c1:a5:cf:66:19:d2:04:8f:28:49:d5:46:7b: e2:b3:22:65:59:96:84:70:58:ad:ce:b7:c6:58:87: 06:40:f0:cf:72:c6:11:b5:12:b3:85:16:ad:1c:90: 06:35:de:63:51:45:03:17:e6:bf:ed:3c:52:8f:ae: 51:b5:f1:91:e6:40:99:58:da:f4:14:db:da:f4:65: 05:3c:56:5c:6d:a8:a6:2a:09:03:78:fd:c1:84:3f: 4c:79:4a:94:d6:c2:be:be:d1:c6:12:ab:55:a8:de: d3:6c:a4:72:b4:f7:71:45:09:e1:50:76:f8:c6:12: 6c:55:c2:3d:7e:e6:02:df:43:c6:5b:31:2c:8d:a3: ee:88:0b:f2:0b:fe:28:94:34:df:1f:fb:7a:29:64: 10:db:73:ff:01:e5:91:0f:a6:23:e3:58:61:94:14: 8c:8c:9f:d2:4b:2c:f9:e8:5f:c4:b7:00:43:b4:d0: c1:da:67:e2:32:1f:27:12:37:67:14:16:20:e3:d9: c6:00:d1:8e:a8:d5:b3:3e:41:7e:95:ba:9f:e4:1e: 72:bb:99:47:43:bb:55:9c:37:e7:da:7d:ed:54:28: 32:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:74:4D:0A:8B:B9:CF:80:A4:53:4A:21:95:4A:61:BB:D9:34:FB:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2f51365-51a1-360d-9629-bff61c17c6e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:07:78:c4:d5:25:65:9e:fd:6a:1a:48:0c:a0:2c:e6:ed:fe: 88:e9:f2:2c:98:0b:62:37:97:3e:82:8c:76:15:95:0a:c0:86: c5:96:8b:ab:24:bf:50:e6:b5:71:60:7f:ab:6c:a5:7f:1d:36: d6:6c:3a:01:18:91:83:ec:df:de:24:56:a0:d5:dd:88:11:e9: 43:86:42:22:d0:2a:93:af:b4:c8:91:a7:6d:30:de:9c:20:4b: bc:41:78:d1:62:78:a1:10:dd:fe:6e:a7:57:a3:91:7c:97:1f: 56:f2:9c:b5:9a:05:3e:66:f6:af:df:95:74:80:99:bc:fe:bd: c5:80:30:94:25:3d:3c:a4:3e:0a:a6:35:1f:20:7b:5a:b1:2c: 61:a8:2f:9d:91:2e:cc:96:f0:86:9a:5c:b9:84:c8:e9:c2:db: ca:45:e0:1c:ed:cf:fc:76:f7:5b:3a:ec:ed:0d:e8:c8:35:e9: 58:5b:fe:0d:1e:e2:20:b1:fb:a5:ba:fc:69:68:0e:bc:42:34: 2f:41:a9:88:dc:7c:d7:36:65:1d:16:5f:86:3f:ee:d5:4d:d1: 35:19:c7:4a:d4:45:f3:5a:3a:a6:9c:d7:20:2f:9b:20:9e:63: 15:26:2a:25:2f:4c:56:25:9a:bc:42:9c:2d:29:b7:bf:4a:29: f8:d9:ff:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRL0lcjajDvU3QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk ZjY0ZTZhOGItN2Q5NC00MmQwLTk5MDMtYzI3Yzc2NTVmMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmduGeenP7Vpi9IEdWAszA0tGW9KIsfg07g5N ldG1wMGlz2YZ0gSPKEnVRnvisyJlWZaEcFitzrfGWIcGQPDPcsYRtRKzhRatHJAG Nd5jUUUDF+a/7TxSj65RtfGR5kCZWNr0FNva9GUFPFZcbaimKgkDeP3BhD9MeUqU 1sK+vtHGEqtVqN7TbKRytPdxRQnhUHb4xhJsVcI9fuYC30PGWzEsjaPuiAvyC/4o lDTfH/t6KWQQ23P/AeWRD6Yj41hhlBSMjJ/SSyz56F/EtwBDtNDB2mfiMh8nEjdn FBYg49nGANGOqNWzPkF+lbqf5B5yu5lHQ7tVnDfn2n3tVCgyMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP10TQqLuc+ApFNKIZVKYbvZNPsZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjJmNTEzNjUtNTFhMS0z NjBkLTk2MjktYmZmNjFjMTdjNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4HeMTVJWWe/WoaSAygLObt/ojp8iyYC2I3lz6CjHYVlQrAhsWWi6sk v1DmtXFgf6tspX8dNtZsOgEYkYPs394kVqDV3YgR6UOGQiLQKpOvtMiRp20w3pwg S7xBeNFieKEQ3f5up1ejkXyXH1bynLWaBT5m9q/flXSAmbz+vcWAMJQlPTykPgqm NR8ge1qxLGGoL52RLsyW8IaaXLmEyOnC28pF4Bztz/x291s67O0N6Mg16Vhb/g0e 4iCx+6W6/GloDrxCNC9BqYjcfNc2ZR0WX4Y/7tVN0TUZx0rURfNaOqac1yAvmyCe YxUmKiUvTFYlmrxCnC0pt79KKfjZ/7U= -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:20 2026 by rpki-client