$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/306320fe-c4ac-3876-b8cb-681801e1cc1b.roa File: 306320fe-c4ac-3876-b8cb-681801e1cc1b.roa (raw, json) Hash identifier: hrYsnrAwALwG5K4by8+n20LsWScNItYh+tQmdm2+TOw= Subject key identifier: 00:4A:C6:45:E8:C4:B7:B9:1C:FE:85:A6:EF:13:E2:42:2C:DB:FB:D9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A1EB27C6C7E785F247280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/306320fe-c4ac-3876-b8cb-681801e1cc1b.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.22.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1e:b2:7c:6c:7e:78:5f:24:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=30dfd28d-1fb0-4b8d-ada1-17e5187a6ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6d:81:27:d3:eb:c3:97:b8:0c:de:cf:f7:77: 03:ae:cf:92:ba:a4:77:75:e0:5f:12:75:65:8a:dc: 21:20:55:a6:9a:3f:01:a1:70:05:46:f1:bc:b4:9c: f7:a0:ca:ef:cb:18:c7:86:55:0a:71:e7:44:17:ea: aa:0b:50:1a:07:f4:90:92:e0:d4:da:f5:15:d2:e0: 19:7c:f3:18:de:62:5f:12:e7:08:05:8f:30:05:0b: 60:62:38:e3:0c:fc:6f:af:8c:0f:b6:cd:e7:52:c3: f1:ea:65:1d:31:96:ae:76:71:33:81:50:fe:d0:c6: ec:88:ae:a6:5f:3c:91:39:ce:91:b4:b2:b5:94:1d: 2c:d1:ba:66:75:97:03:03:67:71:cc:21:3c:c9:59: f0:49:d7:e8:ba:53:d7:e2:4d:8e:27:a2:87:10:66: ba:d0:ce:c7:6e:b9:b5:7f:48:21:59:ba:10:60:65: 1c:8a:87:5a:84:42:49:95:6a:b5:43:16:e6:87:12: 40:b1:42:e7:33:e2:b3:f1:df:d7:60:f1:ec:a8:e6: 47:b1:d5:d1:8b:e4:bb:b2:7b:c5:56:95:4e:12:bc: c5:65:8c:ab:0a:34:ce:6b:8f:d1:cd:14:cd:d5:4f: f5:8b:6a:5c:0b:f8:cd:23:02:e5:50:b0:39:dc:59: 27:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4A:C6:45:E8:C4:B7:B9:1C:FE:85:A6:EF:13:E2:42:2C:DB:FB:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/306320fe-c4ac-3876-b8cb-681801e1cc1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9d:5a:b1:26:50:38:5b:6d:1d:21:49:bb:fe:f2:ac:7d:51: 24:2d:26:28:cf:87:bb:a9:a5:b3:b7:55:bf:be:11:c3:3c:3a: a2:d2:6f:f0:57:06:14:e2:ba:63:97:00:0e:a5:48:25:58:e0: 54:ef:b4:4d:9c:1d:b6:54:a5:0c:55:57:54:9e:60:a1:c4:37: cb:d9:5a:31:26:f1:11:c4:ed:41:85:6a:da:28:7b:79:de:5c: 13:91:12:3a:af:97:2a:78:e4:b0:25:08:9f:4f:7b:1e:99:d0: ed:44:05:b7:76:97:7b:6e:0c:5a:33:c5:e1:19:ae:01:d3:e8: 12:7b:09:f5:d3:24:0d:95:6e:d8:63:aa:36:6f:72:23:b3:a3: 32:35:57:d8:0b:db:74:8e:c0:37:c5:e6:f8:1d:3d:16:f6:14: 54:2b:32:1b:a8:9d:ba:de:83:f5:be:8d:3c:ca:98:22:7f:e1: c7:69:1c:d9:6d:a4:29:d3:41:fc:81:36:a4:60:55:a6:fa:ee: 36:4d:aa:2f:30:16:b9:2e:c2:cf:0e:2b:98:a4:ca:bc:28:c3: f9:6f:78:70:44:21:db:52:7a:74:89:28:85:4c:d9:e6:24:81: 9e:65:77:6b:d2:88:86:74:74:f2:0a:c4:0e:65:38:32:78:59: ed:39:e3:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeh6yfGx+eF8kcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MzBkZmQyOGQtMWZiMC00YjhkLWFkYTEtMTdlNTE4N2E2Y2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6W2BJ9Prw5e4DN7P93cDrs+SuqR3deBfEnVl itwhIFWmmj8BoXAFRvG8tJz3oMrvyxjHhlUKcedEF+qqC1AaB/SQkuDU2vUV0uAZ fPMY3mJfEucIBY8wBQtgYjjjDPxvr4wPts3nUsPx6mUdMZaudnEzgVD+0MbsiK6m XzyROc6RtLK1lB0s0bpmdZcDA2dxzCE8yVnwSdfoulPX4k2OJ6KHEGa60M7Hbrm1 f0ghWboQYGUciodahEJJlWq1QxbmhxJAsULnM+Kz8d/XYPHsqOZHsdXRi+S7snvF VpVOErzFZYyrCjTOa4/RzRTN1U/1i2pcC/jNIwLlULA53FknAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABKxkXoxLe5HP6Fpu8T4kIs2/vZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzA2MzIwZmUtYzRhYy0z ODc2LWI4Y2ItNjgxODAxZTFjYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEudWrEmUDhbbR0hSbv+8qx9USQtJijPh7uppbO3Vb++EcM8OqLSb/BX BhTiumOXAA6lSCVY4FTvtE2cHbZUpQxVV1SeYKHEN8vZWjEm8RHE7UGFatooe3ne XBOREjqvlyp45LAlCJ9Pex6Z0O1EBbd2l3tuDFozxeEZrgHT6BJ7CfXTJA2Vbthj qjZvciOzozI1V9gL23SOwDfF5vgdPRb2FFQrMhuonbreg/W+jTzKmCJ/4cdpHNlt pCnTQfyBNqRgVab67jZNqi8wFrkuws8OK5ikyrwow/lveHBEIdtSenSJKIVM2eYk gZ5ld2vSiIZ0dPIKxA5lODJ4We05474= -----END CERTIFICATE-----Generated at Thu Mar 12 05:04:43 2026 by rpki-client