$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b265247-9563-319b-85d7-b24107caa5f8.roa File: 3b265247-9563-319b-85d7-b24107caa5f8.roa (raw, json) Hash identifier: bYy5iCO5l571wcFOTEFWMZACDGgaVhdTc9Rtf18QfJA= Subject key identifier: 29:D3:7C:1C:C0:A6:6A:32:E6:51:E2:97:5A:93:4E:60:BC:0E:F8:31 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A3E064C69BB26ACAAE0C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b265247-9563-319b-85d7-b24107caa5f8.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.17.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3e:06:4c:69:bb:26:ac:aa:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=f99acff6-cc6c-4350-9e52-2ac151c959b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:90:6c:cc:3f:a4:93:18:af:fc:fe:6a:7e:18: 4e:65:04:62:ce:6c:0c:ba:18:8a:ea:aa:bd:cb:ea: e1:6a:ab:43:a9:f5:f5:e2:19:c6:3f:43:7e:b8:67: 9d:b3:0e:0a:33:2f:80:8a:ed:5c:d5:11:7e:8c:cf: 4f:a5:7d:a6:9a:cf:33:37:80:f2:06:8c:69:56:ff: 96:72:84:3b:6b:b6:10:3c:65:2d:b2:66:69:a4:f4: 36:07:43:0b:e5:c6:54:94:ac:48:da:98:99:0a:d4: 8e:fa:f0:59:01:89:82:8e:42:08:34:ae:1e:ac:25: ad:7c:b7:c4:86:d3:0e:30:56:2c:78:ef:ae:8c:d4: 72:6f:b2:16:88:a7:06:c6:37:b8:04:fa:1e:ce:ae: 39:74:7e:8c:0c:c3:2e:24:bd:20:f7:e0:b0:17:71: 83:c8:7d:7e:89:88:48:c2:a7:11:d7:a9:81:d8:ab: e9:a9:9b:9d:b3:de:63:4c:ed:4b:fc:46:6e:f0:41: ce:e0:9d:3f:f1:1a:f2:c3:d6:8f:2a:f7:8f:92:13: 7c:83:66:7e:b1:fd:ea:0a:f0:23:bf:6a:fa:54:7e: df:2a:e1:de:ae:de:25:cc:e4:e3:8c:19:35:7d:f8: 74:7a:86:f4:52:00:aa:1b:ee:1c:94:46:8c:a0:73: 1c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D3:7C:1C:C0:A6:6A:32:E6:51:E2:97:5A:93:4E:60:BC:0E:F8:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b265247-9563-319b-85d7-b24107caa5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:0b:32:b1:6b:1b:71:06:b0:8e:bd:47:2f:ea:07:17:66:d1: 73:96:e1:7e:74:79:84:48:90:b1:14:8d:f5:af:0c:a0:2f:66: 10:ec:87:9e:e4:b4:76:a3:cb:2a:6d:a6:c0:cc:f9:74:cd:42: 15:b2:d0:7d:b4:5a:ee:61:e5:1b:7d:ac:88:00:b4:5a:01:43: 6f:68:46:c8:1d:ae:6b:dc:d0:96:df:bd:45:6a:e9:d1:c7:28: 07:c7:f9:af:0f:74:46:37:49:0b:97:f3:94:d9:6d:ce:ac:0c: 33:06:e9:54:7a:c9:88:77:79:ce:62:1c:e9:b3:cf:57:14:6a: c5:e9:1f:fd:a7:67:43:e0:5f:84:ee:b2:fb:e2:b2:09:5e:3b: bf:eb:0a:c4:cf:04:9e:2d:fa:96:2b:45:0d:66:e4:b7:71:15: 91:2f:88:89:ee:70:a1:40:a9:36:e5:60:9f:3e:9b:48:49:28: 2c:7b:13:33:a8:74:db:9e:e9:1d:cf:3b:17:21:0a:30:af:c1: ba:8e:df:53:3a:d2:31:8e:37:4a:39:7c:00:f1:25:45:ca:42: 38:da:d6:e1:1b:cb:a3:c6:c0:6c:e7:ba:e2:da:8e:37:7f:db: 0f:7a:49:6d:1f:36:02:f2:9e:44:46:eb:56:1a:60:da:43:7d: 96:0b:9d:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jej4GTGm7Jqyq4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk Zjk5YWNmZjYtY2M2Yy00MzUwLTllNTItMmFjMTUxYzk1OWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJBszD+kkxiv/P5qfhhOZQRizmwMuhiK6qq9 y+rhaqtDqfX14hnGP0N+uGedsw4KMy+Aiu1c1RF+jM9PpX2mms8zN4DyBoxpVv+W coQ7a7YQPGUtsmZppPQ2B0ML5cZUlKxI2piZCtSO+vBZAYmCjkIINK4erCWtfLfE htMOMFYseO+ujNRyb7IWiKcGxje4BPoezq45dH6MDMMuJL0g9+CwF3GDyH1+iYhI wqcR16mB2KvpqZuds95jTO1L/EZu8EHO4J0/8Rryw9aPKvePkhN8g2Z+sf3qCvAj v2r6VH7fKuHert4lzOTjjBk1ffh0eob0UgCqG+4clEaMoHMcswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnTfBzApmoy5lHil1qTTmC8DvgxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2IyNjUyNDctOTU2My0z MTliLTg1ZDctYjI0MTA3Y2FhNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArREmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFALMrFrG3EGsI69Ry/qBxdm0XOW4X50eYRIkLEUjfWvDKAvZhDsh57k tHajyyptpsDM+XTNQhWy0H20Wu5h5Rt9rIgAtFoBQ29oRsgdrmvc0JbfvUVq6dHH KAfH+a8PdEY3SQuX85TZbc6sDDMG6VR6yYh3ec5iHOmzz1cUasXpH/2nZ0PgX4Tu svvisgleO7/rCsTPBJ4t+pYrRQ1m5LdxFZEviInucKFAqTblYJ8+m0hJKCx7EzOo dNue6R3POxchCjCvwbqO31M60jGON0o5fADxJUXKQjja1uEby6PGwGznuuLajjd/ 2w96SW0fNgLynkRG61YaYNpDfZYLnRA= -----END CERTIFICATE-----Generated at Thu Mar 12 03:44:20 2026 by rpki-client