$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f60ea378-24c2-345c-a499-9160b004d9e9.roa File: f60ea378-24c2-345c-a499-9160b004d9e9.roa (raw, json) Hash identifier: 9FFA+KacESyIpwZI0nR+TUsjkQYzftNcd+B4mGix0pg= Subject key identifier: 35:C9:3D:1D:37:40:F8:DF:55:03:C7:A1:78:96:21:CE:9C:A4:CF:6C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2644BDF47F51835CB4C24A10 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f60ea378-24c2-345c-a499-9160b004d9e9.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 30036 IP address blocks: 173.22.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:bd:f4:7f:51:83:5c:b4:c2:4a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=368769b3-b4ed-408b-bbbc-6648b6450dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:55:04:60:8e:98:de:5f:76:0a:33:0d:9b:f3: df:17:35:f6:e9:98:41:a5:41:be:23:4b:ef:c3:1f: ac:33:3d:ee:69:f5:ab:3b:6c:49:9e:2d:a1:9d:b4: 90:67:b6:a8:57:e5:ec:6d:a7:62:9c:d9:14:d1:b4: 20:09:9a:90:86:9e:3c:a0:ab:bf:a5:06:34:72:03: 52:fc:50:af:e3:b9:55:79:38:c7:54:0b:36:3a:74: 02:31:74:b1:e5:bb:14:2a:62:24:09:d1:e5:b2:38: df:a0:9b:6e:83:2e:34:b6:71:a4:61:ae:1e:6a:cf: b4:e4:7d:e0:f9:ed:c5:39:78:4c:97:a1:7f:9e:65: d4:33:34:37:9f:ca:e9:64:53:8c:6d:0c:0b:61:15: 81:6f:a4:63:93:cb:fd:a5:fe:ee:31:be:1b:79:0f: c1:9a:3c:f2:1e:d1:a3:91:f5:20:42:7c:74:a0:85: 76:01:45:47:69:67:31:b8:01:3e:1c:a3:b0:1d:8f: ab:ea:5f:75:4a:5e:7f:70:8d:d9:60:b5:fd:ad:1e: c5:5e:af:8e:38:29:da:5a:15:c3:d8:6d:4c:90:03: 0b:af:a7:d6:b4:b2:b9:9f:81:c1:6c:36:99:88:2c: 63:4c:c5:a4:6b:38:c7:a6:76:1b:4c:05:55:cc:03: 27:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C9:3D:1D:37:40:F8:DF:55:03:C7:A1:78:96:21:CE:9C:A4:CF:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f60ea378-24c2-345c-a499-9160b004d9e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2d:bd:7e:cb:b0:fc:6c:35:1b:ae:e8:63:71:fe:37:b6:40: 4f:95:6f:d8:ca:45:5b:82:ab:2b:8a:d6:11:3a:d6:f9:0c:7b: 5c:50:4a:d8:b6:7d:56:b6:48:3d:a2:e1:db:d0:a4:b0:50:95: ad:ba:4b:60:0c:9e:de:11:1a:d1:a9:ed:ec:41:cd:68:dc:9d: 7c:21:54:8a:87:f7:52:06:b6:2a:32:2e:06:60:c6:b1:3a:69: 55:3d:83:b5:06:71:5e:b3:40:63:94:67:c3:e5:ac:a3:fd:f6: 20:ef:30:10:ba:a7:a5:dd:a6:dd:83:c6:25:a0:ac:30:ec:58: 66:7e:00:63:cc:69:2a:c3:be:76:32:c1:af:6e:20:75:b5:22: 52:e9:de:ab:ba:e0:5d:4a:30:63:4a:a6:94:09:40:d1:ab:20: 25:2d:26:3c:2f:a4:e9:27:83:92:f0:f6:b0:11:74:c9:76:77: cf:e0:2c:6a:83:08:98:54:7f:91:5b:2b:9e:f8:ab:5c:d1:34: 6e:ba:a6:8c:98:95:07:80:76:48:b5:c2:45:34:3d:e7:7b:12: 2e:39:78:1e:47:ef:4a:fb:7d:31:24:5f:f7:41:56:c5:8f:53: cf:1d:74:80:dc:e0:62:e9:bf:57:36:22:c2:ce:b9:ea:09:ae: a8:a2:b4:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRL30f1GDXLTCShAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk MzY4NzY5YjMtYjRlZC00MDhiLWJiYmMtNjY0OGI2NDUwZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglUEYI6Y3l92CjMNm/PfFzX26ZhBpUG+I0vv wx+sMz3uafWrO2xJni2hnbSQZ7aoV+XsbadinNkU0bQgCZqQhp48oKu/pQY0cgNS /FCv47lVeTjHVAs2OnQCMXSx5bsUKmIkCdHlsjjfoJtugy40tnGkYa4eas+05H3g +e3FOXhMl6F/nmXUMzQ3n8rpZFOMbQwLYRWBb6Rjk8v9pf7uMb4beQ/BmjzyHtGj kfUgQnx0oIV2AUVHaWcxuAE+HKOwHY+r6l91Sl5/cI3ZYLX9rR7FXq+OOCnaWhXD 2G1MkAMLr6fWtLK5n4HBbDaZiCxjTMWkazjHpnYbTAVVzAMnKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXJPR03QPjfVQPHoXiWIc6cpM9sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjYwZWEzNzgtMjRjMi0z NDVjLWE0OTktOTE2MGIwMDRkOWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0tvX7LsPxsNRuu6GNx/je2QE+Vb9jKRVuCqyuK1hE61vkMe1xQSti2 fVa2SD2i4dvQpLBQla26S2AMnt4RGtGp7exBzWjcnXwhVIqH91IGtioyLgZgxrE6 aVU9g7UGcV6zQGOUZ8PlrKP99iDvMBC6p6Xdpt2DxiWgrDDsWGZ+AGPMaSrDvnYy wa9uIHW1IlLp3qu64F1KMGNKppQJQNGrICUtJjwvpOkng5Lw9rARdMl2d8/gLGqD CJhUf5FbK574q1zRNG66poyYlQeAdki1wkU0Ped7Ei45eB5H70r7fTEkX/dBVsWP U88ddIDc4GLpv1c2IsLOueoJrqiitP8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:40:05 2026 by rpki-client