$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f886a291-9a36-3e88-9206-9d8eda09913b.roa File: f886a291-9a36-3e88-9206-9d8eda09913b.roa (raw, json) Hash identifier: M+kEQyC/L7UdM9y5VIGqtmtPqPWfn6SEfojklU8qV1w= Subject key identifier: CE:14:9A:5D:D3:39:E5:B2:5D:78:86:1F:4F:AF:E3:53:19:4D:8F:F2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF86F82C07C8292A3BEC20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f886a291-9a36-3e88-9206-9d8eda09913b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.21.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:86:f8:2c:07:c8:29:2a:3b:ec:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=cb0b1b07-4f2e-4a27-84e1-7440c7203054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7b:fc:9f:06:af:95:37:7a:c5:c7:0d:e4:d3: 7d:e1:66:7d:97:a7:1f:56:67:69:c6:99:d0:b0:79: 46:63:9b:0b:45:de:05:75:d8:1b:bf:af:5b:42:6d: d7:49:0e:58:0f:bb:b7:e8:a1:50:18:d2:49:57:25: b4:59:d9:93:e9:c6:b3:a2:49:f1:8a:88:85:f0:26: d5:eb:cf:47:a7:60:25:94:66:07:4c:78:ca:95:94: 30:30:99:b1:09:e6:31:78:98:45:4a:f5:f4:f7:56: bf:8e:dc:55:41:d0:7d:ef:b2:40:3a:67:8a:2d:f7: 3b:6f:97:2f:90:f7:9e:07:10:88:16:93:d4:ef:cc: 7b:a9:f6:f3:38:bb:b6:25:be:61:66:ff:4f:91:d3: 60:45:7e:ea:a0:50:22:62:ad:15:c8:be:dd:37:72: 6e:b8:e6:7d:5a:37:90:57:65:15:cd:85:c0:c4:75: f5:c0:6d:d6:75:94:72:3a:f5:9a:4e:5c:3a:1c:c1: 4c:3b:f7:af:e5:1e:0d:c3:15:ad:ef:0b:02:06:d5: 92:83:3a:c4:9b:9c:4e:ca:be:20:95:d1:d1:1a:94: 6e:a3:f6:f8:dc:39:d7:80:65:9f:ec:73:7f:1b:c2: 2e:c3:86:5b:0d:97:7d:bd:4b:38:b0:c8:bb:5d:71: b5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:14:9A:5D:D3:39:E5:B2:5D:78:86:1F:4F:AF:E3:53:19:4D:8F:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f886a291-9a36-3e88-9206-9d8eda09913b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c0:52:47:bc:5a:c8:55:10:53:ae:f9:47:fd:a5:49:cc:75: 56:e3:a1:a7:a7:99:c5:6f:f0:0a:0f:1d:5d:71:30:e3:3e:f9: e4:8d:70:78:b7:86:f0:81:a7:37:8e:bb:15:0a:a8:c8:4d:dd: d1:49:1e:8b:cf:38:90:d5:28:01:a3:d9:ec:b7:7f:1f:47:02: 62:3a:d7:3a:cb:02:d4:48:11:ae:30:96:62:21:f8:f6:1a:86: 45:ca:f4:1b:8e:9e:1d:c7:e2:fd:b2:78:dc:4f:d8:81:2c:55: 9f:b7:44:71:ef:a4:de:11:38:67:41:99:ce:c4:c8:6a:e4:ac: 99:16:e0:3f:09:f2:78:f9:df:ab:5d:4f:83:d9:2d:3a:9d:be: 58:d6:23:f5:41:ef:e0:f5:7a:bd:36:44:95:f2:1e:38:9f:b3: 80:12:e1:78:65:e5:1a:f1:7d:03:ae:0c:0d:21:e2:24:d7:72: e2:a3:5e:8b:b4:90:41:7a:9c:96:21:d0:de:e2:4d:4a:ff:35: dc:7b:76:02:10:53:b1:be:2f:49:b7:ee:17:1d:e1:10:41:15: 57:a4:13:39:7c:11:49:38:55:57:29:f0:95:71:31:ec:7e:19: 74:b6:5b:ab:84:98:ae:68:ed:33:9c:24:11:41:cc:57:3e:0a: cc:96:fc:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k34b4LAfIKSo77CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2IwYjFiMDctNGYyZS00YTI3LTg0ZTEtNzQ0MGM3MjAzMDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHv8nwavlTd6xccN5NN94WZ9l6cfVmdpxpnQ sHlGY5sLRd4Fddgbv69bQm3XSQ5YD7u36KFQGNJJVyW0WdmT6cazoknxioiF8CbV 689Hp2AllGYHTHjKlZQwMJmxCeYxeJhFSvX091a/jtxVQdB977JAOmeKLfc7b5cv kPeeBxCIFpPU78x7qfbzOLu2Jb5hZv9PkdNgRX7qoFAiYq0VyL7dN3JuuOZ9WjeQ V2UVzYXAxHX1wG3WdZRyOvWaTlw6HMFMO/ev5R4NwxWt7wsCBtWSgzrEm5xOyr4g ldHRGpRuo/b43DnXgGWf7HN/G8Iuw4ZbDZd9vUs4sMi7XXG1GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4Uml3TOeWyXXiGH0+v41MZTY/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjg4NmEyOTEtOWEzNi0z ZTg4LTkyMDYtOWQ4ZWRhMDk5MTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrAUke8WshVEFOu+Uf9pUnMdVbjoaenmcVv8AoPHV1xMOM++eSNcHi3 hvCBpzeOuxUKqMhN3dFJHovPOJDVKAGj2ey3fx9HAmI61zrLAtRIEa4wlmIh+PYa hkXK9BuOnh3H4v2yeNxP2IEsVZ+3RHHvpN4ROGdBmc7EyGrkrJkW4D8J8nj536td T4PZLTqdvljWI/VB7+D1er02RJXyHjifs4AS4Xhl5RrxfQOuDA0h4iTXcuKjXou0 kEF6nJYh0N7iTUr/Ndx7dgIQU7G+L0m37hcd4RBBFVekEzl8EUk4VVcp8JVxMex+ GXS2W6uEmK5o7TOcJBFBzFc+CsyW/BU= -----END CERTIFICATE-----Generated at Thu Mar 26 18:23:53 2026 by rpki-client