$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cadc838-e2d5-3829-9597-fac86002cc7b.roa File: 2cadc838-e2d5-3829-9597-fac86002cc7b.roa (raw, json) Hash identifier: xpjIpJwhy7QjWskAqZAkr2A1VZiyeX1mIZym4aU2GIg= Subject key identifier: B8:74:15:6A:C9:38:9E:F7:F7:55:24:98:F6:8E:19:BE:89:1A:97:0D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A555168F28E57757277C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cadc838-e2d5-3829-9597-fac86002cc7b.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.16.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:55:51:68:f2:8e:57:75:72:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=a4839d7a-e417-42ac-9648-c00c25378084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a3:e6:ba:88:e1:2a:1a:08:af:c9:32:9d:41: 67:bc:7d:c3:00:5b:ea:5d:bf:13:b5:5f:89:4a:c2: f4:ed:59:6e:94:1c:ce:cf:93:e5:4a:64:9d:6c:49: 9b:50:15:b3:d1:b1:51:53:8c:7d:7e:13:f3:dd:b1: 6a:36:40:95:5c:f3:47:bf:c7:2a:2e:eb:f4:f7:a6: c9:58:ef:74:46:70:ba:45:3b:d9:4a:6d:ef:15:e4: b0:64:97:be:fb:b9:90:b8:a0:45:04:82:b4:ef:8d: 45:9d:a9:d2:3d:01:e7:60:4a:e4:d3:37:c1:51:c7: 6b:35:cb:ff:e3:a4:6f:2a:b7:f4:06:0b:0f:19:9e: 03:c6:ec:d8:d0:ee:70:b7:df:77:6d:b8:74:5b:df: 8a:8b:b5:cd:4b:62:b3:67:78:b3:5e:6d:a6:87:5a: 1c:37:82:b9:f8:40:bc:71:62:43:a8:53:2c:07:f9: b3:47:5e:a3:4b:09:53:c4:29:3e:bc:74:49:83:16: 7f:b4:61:be:5f:1c:13:a1:31:90:5e:49:5a:fc:87: dc:f2:94:16:ed:03:b7:38:1a:03:eb:47:d3:f0:94: 6f:50:22:33:af:04:28:16:bf:ec:c2:1d:9c:84:0e: ec:37:aa:73:b6:4e:93:28:63:ae:f9:86:3b:c2:9b: 7a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:74:15:6A:C9:38:9E:F7:F7:55:24:98:F6:8E:19:BE:89:1A:97:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cadc838-e2d5-3829-9597-fac86002cc7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:4f:42:35:bd:7f:c1:78:28:e5:57:ce:88:7c:ce:7f:e2:0c: fd:a7:4e:d2:de:75:00:07:16:f1:c0:58:d6:d3:1a:94:cc:46: f9:49:a8:50:ec:71:13:88:c3:46:85:9f:13:17:6d:55:07:86: a9:4c:08:67:16:bf:21:f1:0f:dd:ac:5c:e4:86:f1:9d:31:d3: 65:28:69:18:a0:f5:f8:54:09:09:a7:07:cf:76:6b:9f:28:5c: 14:ef:ff:fd:fe:3f:26:03:9b:e3:a7:6c:61:a9:9f:db:96:59: 1c:41:4d:c1:24:16:d3:04:0a:5a:52:b1:3e:e3:6a:2b:7b:29: 1d:58:bb:c4:39:c8:f3:36:ce:ed:50:9f:c9:76:1f:73:9b:92: eb:97:bc:28:6a:0a:74:07:47:0c:52:63:ac:d8:fe:b9:6f:e7: 09:a2:27:ca:30:70:8a:1e:53:0f:94:63:b8:eb:f4:23:a7:c0: ca:84:f7:7c:91:b4:cd:28:fb:9e:0b:08:a5:a4:c2:b9:1c:ee: 2f:4e:3f:cc:e7:b6:46:dc:1a:f9:5f:c3:8b:49:cb:fe:d6:b1: d5:40:d9:15:0f:01:12:5e:09:63:61:df:0a:a4:f8:1b:a1:fc: 1b:04:33:28:d6:fb:88:e0:14:ee:52:b8:7d:6e:ff:8d:76:20: a0:60:86:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelVRaPKOV3Vyd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YTQ4MzlkN2EtZTQxNy00MmFjLTk2NDgtYzAwYzI1Mzc4MDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqPmuojhKhoIr8kynUFnvH3DAFvqXb8TtV+J SsL07VlulBzOz5PlSmSdbEmbUBWz0bFRU4x9fhPz3bFqNkCVXPNHv8cqLuv096bJ WO90RnC6RTvZSm3vFeSwZJe++7mQuKBFBIK0741FnanSPQHnYErk0zfBUcdrNcv/ 46RvKrf0BgsPGZ4DxuzY0O5wt993bbh0W9+Ki7XNS2KzZ3izXm2mh1ocN4K5+EC8 cWJDqFMsB/mzR16jSwlTxCk+vHRJgxZ/tGG+XxwToTGQXkla/Ifc8pQW7QO3OBoD 60fT8JRvUCIzrwQoFr/swh2chA7sN6pztk6TKGOu+YY7wpt6zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLh0FWrJOJ7391UkmPaOGb6JGpcNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmNhZGM4MzgtZTJkNS0z ODI5LTk1OTctZmFjODYwMDJjYzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFPQjW9f8F4KOVXzoh8zn/iDP2nTtLedQAHFvHAWNbTGpTMRvlJqFDs cROIw0aFnxMXbVUHhqlMCGcWvyHxD92sXOSG8Z0x02UoaRig9fhUCQmnB892a58o XBTv//3+PyYDm+OnbGGpn9uWWRxBTcEkFtMEClpSsT7jait7KR1Yu8Q5yPM2zu1Q n8l2H3ObkuuXvChqCnQHRwxSY6zY/rlv5wmiJ8owcIoeUw+UY7jr9COnwMqE93yR tM0o+54LCKWkwrkc7i9OP8zntkbcGvlfw4tJy/7WsdVA2RUPARJeCWNh3wqk+Buh /BsEMyjW+4jgFO5SuH1u/412IKBghrA= -----END CERTIFICATE-----Generated at Thu Mar 12 03:41:17 2026 by rpki-client