$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa File: 34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa (raw, json) Hash identifier: T04QHTiDJBtHqSI+cFnk6ZvZv7LqhhI3TjZVdFp8Hxk= Subject key identifier: 8A:DA:A9:F0:22:81:D5:D0:40:71:8C:48:19:48:FD:77:85:A4:E6:D4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A1F0702BA4B0F3872F7A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.29.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1f:07:02:ba:4b:0f:38:72:f7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=b61eb21c-c0cf-4b19-87fc-1d8468972177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4a:5c:fe:19:43:03:4a:d5:7d:1e:75:a1:c9: a6:71:ef:f1:85:59:8c:3e:38:d0:c7:17:d1:94:bb: 73:8c:b1:59:04:fe:d4:37:fc:07:0b:9e:51:be:6a: 50:83:9f:f9:cc:03:b6:49:87:25:b5:4d:52:03:bd: ab:e3:38:77:99:9d:e0:15:1f:e7:ca:ef:93:95:2a: c3:33:0b:33:f3:9a:23:64:da:f0:ba:85:37:aa:eb: a1:a8:f7:98:04:c0:04:76:d6:e5:00:3e:bb:4c:58: ec:90:04:f6:fb:13:73:86:b9:26:be:c0:23:fa:39: 66:11:f0:ab:e5:44:55:cc:ea:19:a6:3a:e8:3f:65: 2c:9d:37:45:b2:3b:4d:f1:75:ec:e2:6d:f4:b5:82: 92:13:75:97:d8:5e:84:7b:0d:95:a6:fc:7d:6f:c2: 45:a0:f2:74:e2:62:82:5e:3c:36:a9:d7:12:c2:aa: b7:ed:df:8e:59:a9:e8:df:9c:a9:0e:24:a4:2c:e5: 62:94:71:a7:ed:19:99:77:59:a0:ec:66:55:78:d1: 23:78:c2:26:54:19:b4:93:f0:e8:c8:b8:1c:c4:6f: 44:47:d6:0d:fe:49:ab:7b:e6:3a:db:ae:88:7a:ce: 12:7d:6e:0d:e2:47:ed:db:f2:ea:03:7d:59:94:c7: 4d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DA:A9:F0:22:81:D5:D0:40:71:8C:48:19:48:FD:77:85:A4:E6:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34dde0a0-6363-3d3a-aad7-4a29a59a1e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:8c:8a:4d:1c:d0:6b:6e:df:21:b3:58:55:ea:1e:e7:eb:25: c4:ba:95:59:20:a2:78:7f:2f:57:df:21:1a:34:cd:5e:ee:3c: 46:b1:09:d5:90:78:79:2e:45:4a:36:28:cf:23:4e:42:63:00: c1:84:3d:4f:df:d3:07:f9:fe:70:2f:db:b6:2c:ad:99:52:66: 3c:9d:16:bc:19:cd:fc:c2:c3:dd:90:54:42:60:a2:6b:18:f1: 58:68:5f:47:49:cf:5f:1a:b0:ec:61:b5:15:d5:ab:0b:86:13: 6b:7c:fb:ab:50:8c:82:ee:96:c5:6d:82:0c:11:05:95:9f:7b: 14:69:ef:2e:ea:fe:0c:15:48:94:2c:f5:84:bb:2a:a2:9c:8e: 5c:35:89:c8:7f:b9:22:40:e2:dd:0b:df:ba:43:7b:ab:46:11: 8d:ed:ec:7c:66:55:a4:59:ec:44:41:42:aa:47:54:ab:4d:12: 9f:cb:9d:d5:5f:e3:97:16:89:07:fb:eb:84:b9:6c:d6:57:cc: 2d:74:77:88:5a:6a:dc:a0:e7:a0:02:47:68:aa:cd:1c:08:cc: 7e:5f:8e:51:e7:99:c1:d5:9c:29:ec:ab:e6:cb:b8:9a:2b:1a: 4d:11:4b:ec:83:fd:b4:d3:0a:ff:85:ac:4b:c9:16:a0:96:8d: b4:d9:e1:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeh8HArpLDzhy96AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YjYxZWIyMWMtYzBjZi00YjE5LTg3ZmMtMWQ4NDY4OTcyMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEpc/hlDA0rVfR51ocmmce/xhVmMPjjQxxfR lLtzjLFZBP7UN/wHC55RvmpQg5/5zAO2SYcltU1SA72r4zh3mZ3gFR/nyu+TlSrD Mwsz85ojZNrwuoU3quuhqPeYBMAEdtblAD67TFjskAT2+xNzhrkmvsAj+jlmEfCr 5URVzOoZpjroP2UsnTdFsjtN8XXs4m30tYKSE3WX2F6Eew2Vpvx9b8JFoPJ04mKC Xjw2qdcSwqq37d+OWano35ypDiSkLOVilHGn7RmZd1mg7GZVeNEjeMImVBm0k/Do yLgcxG9ER9YN/kmre+Y6266Ies4SfW4N4kft2/LqA31ZlMdNxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIraqfAigdXQQHGMSBlI/XeFpObUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzRkZGUwYTAtNjM2My0z ZDNhLWFhZDctNGEyOWE1OWExZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmMik0c0Gtu3yGzWFXqHufrJcS6lVkgonh/L1ffIRo0zV7uPEaxCdWQ eHkuRUo2KM8jTkJjAMGEPU/f0wf5/nAv27YsrZlSZjydFrwZzfzCw92QVEJgomsY 8VhoX0dJz18asOxhtRXVqwuGE2t8+6tQjILulsVtggwRBZWfexRp7y7q/gwVSJQs 9YS7KqKcjlw1ich/uSJA4t0L37pDe6tGEY3t7HxmVaRZ7ERBQqpHVKtNEp/LndVf 45cWiQf764S5bNZXzC10d4haatyg56ACR2iqzRwIzH5fjlHnmcHVnCnsq+bLuJor Gk0RS+yD/bTTCv+FrEvJFqCWjbTZ4Z0= -----END CERTIFICATE-----Generated at Thu Mar 12 03:46:08 2026 by rpki-client