$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/337df950-6eaf-3e9d-936b-d50519c2dbd8.roa File: 337df950-6eaf-3e9d-936b-d50519c2dbd8.roa (raw, json) Hash identifier: avL+S2Et4wJfKZGTdIAlyWklZZyqE8ywl/GdRPIDSL0= Subject key identifier: F5:9F:D8:60:35:ED:A7:E2:47:89:2F:E5:B8:27:2C:A3:E2:BC:95:6E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A40DE5BC13D7E6B56DB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/337df950-6eaf-3e9d-936b-d50519c2dbd8.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.16.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:40:de:5b:c1:3d:7e:6b:56:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=86cd2960-04af-45ec-9a0b-428c8afa386f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:99:18:df:60:5c:b2:33:e3:e6:b2:93:88:da: d0:6a:ec:19:57:83:64:9e:e1:27:cf:d4:b9:ea:5a: 62:c3:0b:74:7d:ec:52:bc:5f:09:25:fc:12:c0:2f: 50:64:d8:7e:3d:e3:54:97:29:9d:ae:b6:20:b4:d1: 64:06:2a:eb:af:b0:ad:69:f4:77:43:15:db:80:b7: 6a:45:7b:1c:5c:1a:85:73:0a:36:e3:51:18:a2:09: 0d:1f:68:57:08:32:40:78:90:08:2c:5d:3c:54:b2: 9c:de:8c:17:ed:45:91:7e:df:82:e0:90:a6:a6:a9: 2f:16:60:04:66:c2:90:65:af:75:9e:09:04:34:a8: 35:b2:66:e8:51:48:31:01:f9:da:60:a8:b2:48:30: af:6f:e2:9e:1b:c4:d9:81:13:eb:85:56:16:95:32: 09:e8:80:21:48:20:30:63:3e:94:0e:b8:34:09:69: f5:6d:f1:cf:11:c0:b8:4a:fe:8e:a4:02:15:19:b6: bf:79:39:21:1c:21:fc:de:60:e3:66:90:17:fd:44: 24:2f:8f:de:c1:4d:81:3b:6f:34:ce:e8:3b:5f:95: 72:13:ee:0f:bb:9f:25:4e:b7:94:ff:e7:68:d7:8a: ec:4b:e5:aa:ef:0a:a6:08:c4:18:80:c3:49:70:01: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9F:D8:60:35:ED:A7:E2:47:89:2F:E5:B8:27:2C:A3:E2:BC:95:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/337df950-6eaf-3e9d-936b-d50519c2dbd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e4:c3:7a:d4:41:4f:04:19:77:ab:1b:bf:28:1f:7c:3f:51: 4b:50:f2:d4:71:4d:30:fc:dd:71:8e:0d:bc:2a:dd:13:8d:de: 52:e4:85:3f:22:a3:de:59:06:85:c0:f6:66:d2:8f:62:a5:1a: 77:93:1a:3f:99:e6:06:7b:7f:0d:82:05:94:20:6a:c7:3d:22: d5:c9:62:b1:10:ec:0e:1a:35:df:47:bc:f3:c9:67:65:5c:6f: 99:43:f0:34:e8:d1:b4:35:84:c1:b8:f4:a6:f4:58:9a:c1:4c: 58:53:a3:9f:78:88:6c:8d:e3:68:49:5e:c1:23:5a:ec:73:5c: 4f:cf:5b:7c:41:17:70:f3:f8:e1:32:ea:75:97:1c:e6:d4:40: 1c:f1:45:32:ff:69:fe:8c:82:a6:2f:4a:4e:5d:70:76:ed:16: a0:d3:60:00:a6:3c:43:ff:70:5c:1a:42:59:6e:ce:97:2a:4e: 1a:f1:f6:1f:88:b7:9a:9d:dd:f9:85:ea:e7:66:0c:4c:95:84: 9e:eb:7a:e0:f8:fd:cf:c9:dc:3e:60:f7:eb:c1:5f:8f:a5:b5: f5:19:ca:d3:f9:0e:21:8b:46:9c:08:58:63:ba:4d:2d:d5:91: c1:c9:bf:35:53:68:e8:fa:48:f7:24:1b:e8:93:9e:82:9c:79: a4:1e:1b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekDeW8E9fmtW2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODZjZDI5NjAtMDRhZi00NWVjLTlhMGItNDI4YzhhZmEzODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5kY32BcsjPj5rKTiNrQauwZV4NknuEnz9S5 6lpiwwt0fexSvF8JJfwSwC9QZNh+PeNUlymdrrYgtNFkBirrr7CtafR3QxXbgLdq RXscXBqFcwo241EYogkNH2hXCDJAeJAILF08VLKc3owX7UWRft+C4JCmpqkvFmAE ZsKQZa91ngkENKg1smboUUgxAfnaYKiySDCvb+KeG8TZgRPrhVYWlTIJ6IAhSCAw Yz6UDrg0CWn1bfHPEcC4Sv6OpAIVGba/eTkhHCH83mDjZpAX/UQkL4/ewU2BO280 zug7X5VyE+4Pu58lTreU/+do14rsS+Wq7wqmCMQYgMNJcAHWmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWf2GA17afiR4kv5bgnLKPivJVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzM3ZGY5NTAtNmVhZi0z ZTlkLTkzNmItZDUwNTE5YzJkYmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRDbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDkw3rUQU8EGXerG78oH3w/UUtQ8tRxTTD83XGODbwq3RON3lLkhT8i o95ZBoXA9mbSj2KlGneTGj+Z5gZ7fw2CBZQgasc9ItXJYrEQ7A4aNd9HvPPJZ2Vc b5lD8DTo0bQ1hMG49Kb0WJrBTFhTo594iGyN42hJXsEjWuxzXE/PW3xBF3Dz+OEy 6nWXHObUQBzxRTL/af6MgqYvSk5dcHbtFqDTYACmPEP/cFwaQlluzpcqThrx9h+I t5qd3fmF6udmDEyVhJ7reuD4/c/J3D5g9+vBX4+ltfUZytP5DiGLRpwIWGO6TS3V kcHJvzVTaOj6SPckG+iTnoKceaQeG6M= -----END CERTIFICATE-----Generated at Thu Mar 12 03:42:04 2026 by rpki-client