$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/003bb33c-ad3e-30f2-9d94-3184c62367fd.roa File: 003bb33c-ad3e-30f2-9d94-3184c62367fd.roa (raw, json) Hash identifier: FApIwr+n5BOVV2ULUgzGubTXzFbvuQbw9hH8njsEumc= Subject key identifier: AC:A4:44:7E:1D:83:20:37:D7:E2:A6:D4:2D:5E:E8:53:5B:51:FF:AD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D8AC535D95CFED1A1EBD8FE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/003bb33c-ad3e-30f2-9d94-3184c62367fd.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 19905 IP address blocks: 173.28.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:35:d9:5c:fe:d1:a1:eb:d8:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=86c3698a-1442-4146-b6d9-2d45fe41706a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:42:05:8e:72:61:79:1d:b1:c8:09:11:e8:2f: bc:2f:36:7a:06:c2:eb:9d:08:ab:7a:01:05:74:c1: 9f:04:6a:04:d2:c8:32:8b:32:97:22:12:69:99:75: c7:4a:f5:15:49:1d:bf:4c:1a:35:56:69:24:ae:b7: fa:e8:04:35:25:5c:f4:4b:a2:0c:9c:8c:d1:26:16: 02:09:89:07:a1:f1:c0:63:62:08:d5:84:98:a2:2f: 31:12:a5:20:45:02:5e:1a:31:a9:07:c9:0f:e4:0b: f5:e5:32:6a:35:53:02:cf:91:d2:32:12:ce:1c:9f: ba:a0:6e:d5:59:05:49:5f:b0:00:d4:03:7f:52:70: a1:fc:db:71:b9:71:f0:ed:a9:ae:35:96:32:51:08: 68:01:6e:62:e6:cf:5c:5d:0d:8a:aa:76:94:9b:d8: fe:6b:2a:5d:83:72:94:e4:a6:d4:92:a1:52:93:91: eb:ea:6e:a2:08:70:3b:26:b7:5d:99:17:28:a4:b8: e6:d7:ff:a8:88:16:68:a6:37:38:7a:ef:61:97:f6: c7:87:ba:02:96:60:22:bc:90:0a:55:af:58:8a:99: 70:9b:a1:70:22:cb:ed:6f:0d:d9:b2:17:d7:48:7b: ea:d0:62:50:cf:d2:9d:d5:83:e7:ba:3a:f6:90:77: 9e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A4:44:7E:1D:83:20:37:D7:E2:A6:D4:2D:5E:E8:53:5B:51:FF:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/003bb33c-ad3e-30f2-9d94-3184c62367fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3b:09:9f:12:b3:d2:01:70:1a:06:a3:95:06:ec:10:3e:71: 6d:01:ab:a7:09:9c:c6:59:82:51:13:40:8a:66:de:8b:bc:7e: 13:34:1a:aa:a1:94:05:c5:08:1e:c9:e6:6c:f5:f8:03:40:7f: 1d:a1:6c:bd:e5:3c:5c:1e:bd:4f:20:96:4e:dd:33:b5:dd:70: d5:bf:71:95:0e:cc:39:3b:64:60:22:fa:c5:d6:2c:31:04:0b: a6:ae:11:20:a2:b2:34:47:e9:ff:99:c8:cc:07:f6:4c:a0:fd: 6e:35:4d:ac:b6:10:4a:10:39:b9:7b:96:11:7a:0a:73:08:51: 47:08:85:e2:e5:08:6f:2d:62:32:b6:45:f6:23:98:07:c3:07: 4d:4e:94:1d:20:74:8d:48:c3:d4:c8:1f:19:5e:21:2d:04:22: 93:87:9c:7b:f4:97:de:49:57:85:e7:48:19:f9:57:96:b6:ed: 62:fe:d7:1e:f8:d0:cd:a8:34:75:79:16:b9:5b:6d:a7:a3:ab: 94:04:c4:15:24:e7:ba:6b:76:35:01:d6:ef:55:da:bf:66:da: 12:d8:de:7c:a6:c5:a4:92:c1:00:b3:f4:7a:8f:85:41:09:89: f4:04:df:0c:09:d0:12:7b:56:42:91:92:e5:c9:a1:a7:15:4c: 75:e8:44:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTXZXP7RoevY/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk ODZjMzY5OGEtMTQ0Mi00MTQ2LWI2ZDktMmQ0NWZlNDE3MDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUIFjnJheR2xyAkR6C+8LzZ6BsLrnQiregEF dMGfBGoE0sgyizKXIhJpmXXHSvUVSR2/TBo1Vmkkrrf66AQ1JVz0S6IMnIzRJhYC CYkHofHAY2II1YSYoi8xEqUgRQJeGjGpB8kP5Av15TJqNVMCz5HSMhLOHJ+6oG7V WQVJX7AA1AN/UnCh/NtxuXHw7amuNZYyUQhoAW5i5s9cXQ2KqnaUm9j+aypdg3KU 5KbUkqFSk5Hr6m6iCHA7JrddmRcopLjm1/+oiBZopjc4eu9hl/bHh7oClmAivJAK Va9Yiplwm6FwIsvtbw3ZshfXSHvq0GJQz9Kd1YPnujr2kHeeawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKykRH4dgyA31+Km1C1e6FNbUf+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDAzYmIzM2MtYWQzZS0z MGYyLTlkOTQtMzE4NGM2MjM2N2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEc7CZ8Ss9IBcBoGo5UG7BA+cW0Bq6cJnMZZglETQIpm3ou8fhM0Gqqh lAXFCB7J5mz1+ANAfx2hbL3lPFwevU8glk7dM7XdcNW/cZUOzDk7ZGAi+sXWLDEE C6auESCisjRH6f+ZyMwH9kyg/W41Tay2EEoQObl7lhF6CnMIUUcIheLlCG8tYjK2 RfYjmAfDB01OlB0gdI1Iw9TIHxleIS0EIpOHnHv0l95JV4XnSBn5V5a27WL+1x74 0M2oNHV5Frlbbaejq5QExBUk57prdjUB1u9V2r9m2hLY3nymxaSSwQCz9HqPhUEJ ifQE3wwJ0BJ7VkKRkuXJoacVTHXoROI= -----END CERTIFICATE-----Generated at Fri May 8 20:27:23 2026 by rpki-client