$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/088057c9-ae1d-339e-a8fd-ce606d190c40.roa File: 088057c9-ae1d-339e-a8fd-ce606d190c40.roa (raw, json) Hash identifier: 3s2X3/2A5ZlIJDi4VVj7Ad7wNAvrabIPRX0dGxbUrFU= Subject key identifier: 64:E6:DC:1A:7F:EF:09:1F:AE:9B:13:5B:CD:28:1C:84:03:D4:90:60 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D1707E93964AAE682F0ACE880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/088057c9-ae1d-339e-a8fd-ce606d190c40.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 30036 IP address blocks: 173.17.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:e9:39:64:aa:e6:82:f0:ac:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=571e59e1-11e9-42d1-a880-8d770af6eaf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:71:ac:a9:a2:0e:39:07:31:1d:a8:f1:22:85: 95:aa:47:bd:96:17:f3:11:c6:43:a8:94:fa:f8:7b: ef:7a:da:ca:e8:c8:c5:3e:88:64:25:e7:af:40:51: 43:4f:40:2a:f6:98:5a:6e:b3:6d:73:26:4c:cc:91: 72:7c:4d:82:d1:ae:ea:ac:cd:81:a8:79:ce:25:77: 5a:53:af:22:a0:bc:c6:53:26:c4:d0:5b:a6:b0:59: d3:60:1d:8b:8b:ba:b6:c1:5a:39:97:1a:79:86:83: 33:88:e6:d9:50:c7:f8:fe:a9:cf:5d:34:9d:17:ab: 0a:f9:4b:53:bd:0a:93:c9:44:d8:9b:5f:9a:c2:43: f5:c2:46:97:d6:5c:01:00:9a:ac:2d:d0:1c:44:bf: ca:45:d1:f2:63:2c:b1:96:ec:48:a7:14:ec:cf:ed: e7:c7:e7:c4:40:e0:e1:62:86:15:45:78:10:4c:5d: 15:df:0d:93:67:fc:ba:e3:8a:f7:88:63:ca:d5:17: 30:9d:02:91:71:64:ac:97:a5:c4:24:33:5a:0a:4c: 15:dc:2d:bf:05:94:25:e5:a3:99:9f:bd:56:a2:2b: 33:ac:65:a1:26:3a:f4:0b:af:a6:5d:28:da:38:30: a3:ec:95:09:08:d6:0c:05:dd:07:43:da:68:ad:af: f2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E6:DC:1A:7F:EF:09:1F:AE:9B:13:5B:CD:28:1C:84:03:D4:90:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/088057c9-ae1d-339e-a8fd-ce606d190c40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:0e:54:74:09:4a:3f:cd:69:a1:8a:a1:a5:93:6a:cd:c0:41: 3f:a2:1c:3c:89:10:c1:17:a7:ad:31:00:42:a6:eb:4c:a7:4f: 7f:74:be:16:a3:68:5a:23:59:6a:12:c6:50:58:b5:bd:1f:c5: 5a:fa:d2:96:c0:09:b6:e5:68:7f:74:df:dc:6e:7d:18:96:9a: 96:8e:91:c6:ac:74:9c:0e:cc:7a:9b:41:af:b5:d0:65:0b:bf: 1f:79:62:2f:de:48:f7:84:ff:93:a3:9c:a3:81:ae:96:1a:dc: 29:c9:80:6f:12:86:c0:28:c7:de:0a:56:f3:5a:f3:a3:c1:5f: 71:7e:84:b9:ab:81:cc:15:f4:82:8e:2e:5d:c6:2f:51:8d:4b: 3a:67:30:14:ec:55:fa:4f:5d:81:d6:f9:fb:2c:b3:97:bd:19: a7:9b:32:9f:1c:58:24:13:00:b4:63:f2:e0:73:94:16:70:5d: d2:18:bc:96:74:73:e9:ac:ae:04:aa:ef:11:63:b3:44:4a:02: b7:a1:06:01:19:e1:f0:17:1f:f7:e7:15:18:05:eb:98:11:80: 5b:bb:fc:81:dd:69:9e:39:52:a0:16:02:97:7f:54:5e:d1:4e: 8e:c4:62:a2:b1:13:3b:85:2d:83:1a:47:97:e3:2b:6a:83:68: 93:cd:77:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB+k5ZKrmgvCs6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk NTcxZTU5ZTEtMTFlOS00MmQxLWE4ODAtOGQ3NzBhZjZlYWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHGsqaIOOQcxHajxIoWVqke9lhfzEcZDqJT6 +HvvetrK6MjFPohkJeevQFFDT0Aq9phabrNtcyZMzJFyfE2C0a7qrM2BqHnOJXda U68ioLzGUybE0FumsFnTYB2Li7q2wVo5lxp5hoMziObZUMf4/qnPXTSdF6sK+UtT vQqTyUTYm1+awkP1wkaX1lwBAJqsLdAcRL/KRdHyYyyxluxIpxTsz+3nx+fEQODh YoYVRXgQTF0V3w2TZ/y644r3iGPK1RcwnQKRcWSsl6XEJDNaCkwV3C2/BZQl5aOZ n71WoiszrGWhJjr0C6+mXSjaODCj7JUJCNYMBd0HQ9pora/yiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTm3Bp/7wkfrpsTW80oHIQD1JBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDg4MDU3YzktYWUxZC0z MzllLWE4ZmQtY2U2MDZkMTkwYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrREIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4OVHQJSj/NaaGKoaWTas3AQT+iHDyJEMEXp60xAEKm60ynT390vhaj aFojWWoSxlBYtb0fxVr60pbACbblaH9039xufRiWmpaOkcasdJwOzHqbQa+10GUL vx95Yi/eSPeE/5OjnKOBrpYa3CnJgG8ShsAox94KVvNa86PBX3F+hLmrgcwV9IKO Ll3GL1GNSzpnMBTsVfpPXYHW+fsss5e9GaebMp8cWCQTALRj8uBzlBZwXdIYvJZ0 c+msrgSq7xFjs0RKArehBgEZ4fAXH/fnFRgF65gRgFu7/IHdaZ45UqAWApd/VF7R To7EYqKxEzuFLYMaR5fjK2qDaJPNdyw= -----END CERTIFICATE-----Generated at Thu Mar 12 03:44:36 2026 by rpki-client