$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/068781a8-e032-3979-adfe-4399056a3136.roa File: 068781a8-e032-3979-adfe-4399056a3136.roa (raw, json) Hash identifier: 1kprhoB0dkwrZ95oVKXIRJ7YWxsc5SD2pBtCTvK4i4o= Subject key identifier: B1:3C:02:98:A6:7D:FA:C9:1E:16:13:C0:B9:72:84:DE:0F:AA:79:65 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D8AC53E87698BB80E5BB560C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/068781a8-e032-3979-adfe-4399056a3136.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 173.28.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:3e:87:69:8b:b8:0e:5b:b5:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=5a54d09c-e36f-4303-8320-80cfd04bb7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:66:b9:7a:bd:47:61:6c:d7:b0:61:02:c4:9e: 34:96:b1:1c:8d:fc:c6:f4:49:a9:f5:cc:f5:48:78: ec:a3:66:0d:8e:55:ab:a2:f2:42:55:b8:a7:a9:1d: 02:d6:ff:fc:69:16:45:95:af:fa:ff:f0:4e:fb:21: 16:b5:b3:d2:d3:33:d4:2a:b4:88:d3:cd:fa:64:60: 70:1d:54:5f:b6:e7:87:ce:77:0f:c0:0b:eb:ba:26: 7b:d0:e0:86:74:12:72:b6:d4:e3:6c:16:29:07:e0: 1e:ba:ae:1b:2c:e1:70:21:cd:3f:ea:e1:8e:4f:7b: 02:1f:76:a2:27:b1:7a:6e:08:15:1c:87:4e:61:7f: 34:91:03:ce:ac:4a:80:fa:e8:4d:66:30:15:e3:7c: 23:4a:1f:22:63:e5:10:ed:b5:04:03:2b:3c:36:fb: 9d:95:9c:92:cb:24:6f:1d:53:02:83:6e:cc:9f:ba: 8c:55:ea:df:97:b2:98:f7:78:42:fa:d0:5f:b8:9b: 92:45:55:c3:f3:05:2a:42:92:95:6e:d6:ab:24:9f: f7:45:9d:a7:69:bd:27:fa:01:fa:d9:88:ac:90:e0: 40:97:82:ee:97:0b:4b:62:d7:c7:b9:f6:74:15:c0: 82:47:11:f7:24:19:b5:b6:63:79:fe:70:8c:6c:21: b3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3C:02:98:A6:7D:FA:C9:1E:16:13:C0:B9:72:84:DE:0F:AA:79:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/068781a8-e032-3979-adfe-4399056a3136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f7:b5:9f:ec:e3:1c:79:b6:a9:1f:6d:39:42:60:43:40:a8: 71:73:e8:2e:46:a8:5c:39:34:ce:f6:ab:83:bd:d4:6f:3a:75: 04:08:2a:69:c2:70:23:ae:c8:09:fd:c5:1e:59:bf:7d:de:e3: 2d:cd:af:55:b2:bc:b1:78:33:6a:6d:29:03:bf:47:1d:52:03: 5a:73:63:8e:a7:0b:3b:a9:57:fc:a2:09:77:e9:a1:2b:4d:e0: f5:f8:01:c0:5b:66:ae:41:19:bc:f6:29:76:ed:e7:8c:eb:cc: aa:3d:37:73:28:e4:61:f8:db:a6:dd:e3:c2:9b:79:78:3a:41: 26:2b:28:26:04:7a:78:9e:83:19:d1:27:19:fc:dd:81:c4:a5: 9e:ee:c6:41:1c:b1:e9:6f:fe:4d:e2:eb:a8:5b:ee:4b:80:2a: 7e:3f:dc:77:12:4d:49:c3:cf:82:1e:4f:ee:a6:7a:c5:d6:c2: 8c:45:7d:a1:74:23:a8:2f:0c:7b:81:c1:0a:f3:00:35:c8:9d: 46:b4:f2:ee:d4:f3:8a:e1:fd:b1:bf:02:d2:c9:34:df:c8:ea: 3b:0d:36:2c:5c:cf:6b:49:bc:1a:67:c0:d6:3b:ac:d5:c6:91: 67:f0:11:14:ff:78:be:b4:d5:1d:0e:94:1c:ec:73:60:f2:61: 6b:db:ff:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxT6HaYu4Dlu1YMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk NWE1NGQwOWMtZTM2Zi00MzAzLTgzMjAtODBjZmQwNGJiN2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhma5er1HYWzXsGECxJ40lrEcjfzG9Emp9cz1 SHjso2YNjlWrovJCVbinqR0C1v/8aRZFla/6//BO+yEWtbPS0zPUKrSI0836ZGBw HVRftueHzncPwAvruiZ70OCGdBJyttTjbBYpB+Aeuq4bLOFwIc0/6uGOT3sCH3ai J7F6bggVHIdOYX80kQPOrEqA+uhNZjAV43wjSh8iY+UQ7bUEAys8NvudlZySyyRv HVMCg27Mn7qMVerfl7KY93hC+tBfuJuSRVXD8wUqQpKVbtarJJ/3RZ2nab0n+gH6 2YiskOBAl4LulwtLYtfHufZ0FcCCRxH3JBm1tmN5/nCMbCGzFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE8ApimffrJHhYTwLlyhN4PqnllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDY4NzgxYTgtZTAzMi0z OTc5LWFkZmUtNDM5OTA1NmEzMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv3tZ/s4xx5tqkfbTlCYENAqHFz6C5GqFw5NM72q4O91G86dQQIKmnC cCOuyAn9xR5Zv33e4y3Nr1WyvLF4M2ptKQO/Rx1SA1pzY46nCzupV/yiCXfpoStN 4PX4AcBbZq5BGbz2KXbt54zrzKo9N3Mo5GH426bd48KbeXg6QSYrKCYEeniegxnR Jxn83YHEpZ7uxkEcselv/k3i66hb7kuAKn4/3HcSTUnDz4IeT+6mesXWwoxFfaF0 I6gvDHuBwQrzADXInUa08u7U84rh/bG/AtLJNN/I6jsNNixcz2tJvBpnwNY7rNXG kWfwERT/eL601R0OlBzsc2DyYWvb/+k= -----END CERTIFICATE-----Generated at Fri May 8 18:24:26 2026 by rpki-client