$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa File: 3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa (raw, json) Hash identifier: iMip12XXZaIxJONolp8byOg1vPAv4rVd4KtQVZiXi+M= Subject key identifier: A6:2F:E3:08:1B:9A:31:8A:5C:D8:46:95:58:68:6A:61:F0:BF:7D:EA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D1707CC9238CA420E80D0F840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 30036 IP address blocks: 173.21.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:cc:92:38:ca:42:0e:80:d0:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=0f6a4bd5-2b40-419e-bc35-d28ab1b499fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:40:b6:c5:fc:e1:9d:62:01:77:70:7a:02: 9d:60:9d:fb:49:d4:99:de:c4:c0:98:78:e4:94:71: 13:03:8d:f8:ba:10:2a:4a:83:06:84:f4:23:10:69: 74:59:ef:ac:bb:95:a9:e5:cc:4e:c7:5b:2f:4e:e4: 9d:61:63:1b:70:eb:02:66:7f:70:50:be:9a:df:0c: 31:46:9d:43:f5:7b:85:39:78:d7:1a:33:84:f4:bf: ef:17:5e:04:f4:ed:f1:ac:52:bf:f6:4b:76:da:f6: bc:93:98:ce:7c:33:fd:08:0d:af:85:53:d4:c8:31: ad:28:3e:9a:78:ce:f0:f1:e8:5d:89:4d:d0:11:8c: b9:b3:0b:2e:9a:c3:87:37:91:ab:e9:5a:23:e9:0b: f0:ca:d1:be:8b:00:40:8e:26:62:f1:f3:a3:3e:c9: 94:ab:dd:73:46:49:99:73:41:53:61:d6:7d:bb:f3: fb:34:3d:6e:c7:18:e6:35:44:db:67:63:16:34:38: 65:da:7d:c0:8b:2b:02:be:df:59:cb:4b:5e:23:f0: 02:36:c6:c2:79:55:16:c3:78:67:fc:41:79:16:f8: 0f:29:ff:30:16:8f:52:69:de:c0:3a:ba:72:48:61: c4:b8:84:06:9a:31:fe:40:b3:85:39:62:75:0e:79: 80:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2F:E3:08:1B:9A:31:8A:5C:D8:46:95:58:68:6A:61:F0:BF:7D:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:63:9f:bb:63:b5:d7:99:fc:87:81:14:13:c8:b9:5b:c9:27: cf:08:88:24:a7:d6:4b:e4:42:98:e2:b8:c5:75:70:d0:ee:88: ad:b6:bd:9e:1f:78:81:73:fa:6e:bb:a6:cb:6e:5c:30:eb:f6: f7:12:db:a9:62:f2:2f:fa:98:4b:b1:d2:81:ea:01:7b:fc:4a: 0a:c6:58:d7:21:68:e5:f0:cc:e1:21:6a:d3:59:23:58:56:66: 45:57:13:61:52:82:a0:b5:2e:75:9b:06:cd:7e:9f:64:40:64: 8e:57:f2:89:06:a6:b4:41:90:51:72:5d:8b:91:67:7a:95:ec: ad:ac:aa:e6:91:82:3b:a2:52:0d:aa:27:6d:1f:ec:65:2e:36: 39:ce:82:ba:67:64:96:f3:60:52:44:dc:1a:d9:38:79:28:c6: 66:95:fb:2c:53:82:7c:41:7a:fd:f1:ae:0b:72:20:3f:d8:a6: 5d:10:79:db:5c:80:f1:96:e3:66:d0:da:ca:c4:d6:a0:54:fd: d4:b9:ce:75:a6:a5:71:20:77:13:15:75:52:c7:fa:1e:ae:03: 6c:70:35:2e:91:1d:4c:a5:c6:57:8c:f8:78:e4:39:61:2c:0f: 6f:09:3f:df:71:5e:c1:98:47:d8:b8:08:c4:82:c8:3e:45:ab: 12:6b:11:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB8ySOMpCDoDQ+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk MGY2YTRiZDUtMmI0MC00MTllLWJjMzUtZDI4YWIxYjQ5OWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDFAtsX84Z1iAXdwegKdYJ37SdSZ3sTAmHjk lHETA434uhAqSoMGhPQjEGl0We+su5Wp5cxOx1svTuSdYWMbcOsCZn9wUL6a3wwx Rp1D9XuFOXjXGjOE9L/vF14E9O3xrFK/9kt22va8k5jOfDP9CA2vhVPUyDGtKD6a eM7w8ehdiU3QEYy5swsumsOHN5Gr6Voj6QvwytG+iwBAjiZi8fOjPsmUq91zRkmZ c0FTYdZ9u/P7ND1uxxjmNUTbZ2MWNDhl2n3AiysCvt9Zy0teI/ACNsbCeVUWw3hn /EF5FvgPKf8wFo9Sad7AOrpySGHEuIQGmjH+QLOFOWJ1DnmAWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYv4wgbmjGKXNhGlVhoamHwv33qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2RjMWY2NzEtMjg4My0z Y2E3LTgzNGQtY2E0YWQ2YThjMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhjn7tjtdeZ/IeBFBPIuVvJJ88IiCSn1kvkQpjiuMV1cNDuiK22vZ4f eIFz+m67pstuXDDr9vcS26li8i/6mEux0oHqAXv8SgrGWNchaOXwzOEhatNZI1hW ZkVXE2FSgqC1LnWbBs1+n2RAZI5X8okGprRBkFFyXYuRZ3qV7K2squaRgjuiUg2q J20f7GUuNjnOgrpnZJbzYFJE3BrZOHkoxmaV+yxTgnxBev3xrgtyID/Ypl0Qedtc gPGW42bQ2srE1qBU/dS5znWmpXEgdxMVdVLH+h6uA2xwNS6RHUylxleM+HjkOWEs D28JP99xXsGYR9i4CMSCyD5FqxJrEWo= -----END CERTIFICATE-----Generated at Thu Mar 12 03:42:41 2026 by rpki-client