$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3df9ccdc-67c8-3624-92fe-71a135423673.roa File: 3df9ccdc-67c8-3624-92fe-71a135423673.roa (raw, json) Hash identifier: li1Uuk8FFe/bukHFBDbbOHLQV+DTASS3dMgBOWsZSoo= Subject key identifier: EC:50:EC:5B:1E:FF:83:FA:13:CF:4C:AA:BB:89:02:E4:98:EB:8C:CF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D143D33ED26E4640DF985B500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3df9ccdc-67c8-3624-92fe-71a135423673.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.22.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:33:ed:26:e4:64:0d:f9:85:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=01ec355a-7bf8-4208-af6c-6ccf0ecd07e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f6:19:da:06:8c:1e:26:62:e7:ad:6e:08:d0: 8f:a2:12:57:6c:a8:b7:ce:df:85:b6:00:cc:5c:9b: 84:38:be:ba:75:d0:16:a5:84:71:31:63:78:b9:88: af:a0:d1:36:a3:1f:ec:b4:25:00:75:0c:97:39:f6: c4:e6:a7:56:c1:e7:d8:6b:9e:07:14:93:d9:da:a9: 44:48:0e:bc:bb:cc:64:e0:66:d4:0a:6d:ff:dc:2a: 34:94:db:00:c0:bd:49:8d:85:87:6a:e6:52:07:31: 4a:07:80:26:e1:72:6f:55:77:4f:0b:71:e2:91:e5: 5c:04:c0:da:29:ce:75:7a:31:f3:da:68:8d:40:4f: 8b:f3:e3:2a:fe:58:30:8a:02:21:cb:72:30:04:a0: a6:28:b7:1e:06:2a:f4:b0:a8:0f:ab:73:6d:17:d7: 16:87:d7:ca:26:7f:0a:7a:8a:44:ce:71:ba:91:4b: 06:63:a1:f3:60:cf:b2:8b:62:d6:0d:7b:10:fc:bd: 20:bf:9b:3e:e6:66:c2:1e:37:a7:31:95:11:0d:f7: 0e:e8:ec:31:1d:c4:fa:06:ba:9f:3e:fb:f3:b3:8d: 68:95:f8:7a:b2:ab:b9:f1:21:05:87:bc:92:7c:39: a5:27:31:1d:a1:84:d6:49:cd:9e:8f:7b:84:0b:9a: 89:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:50:EC:5B:1E:FF:83:FA:13:CF:4C:AA:BB:89:02:E4:98:EB:8C:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3df9ccdc-67c8-3624-92fe-71a135423673.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:41:a8:04:e6:87:3d:3a:3c:ee:84:eb:aa:8d:1c:b7:a7:6b: 31:d5:33:3d:a6:d2:8a:0d:39:cf:70:5f:a1:a1:e4:f9:a9:01: 4c:9d:f0:13:03:70:b8:6f:7a:ff:86:05:0d:bf:f4:3f:e2:d2: 02:29:13:cc:51:58:39:9d:b8:e4:fb:7b:36:a0:2f:22:b4:8b: 43:8a:7d:eb:9d:18:3f:ca:02:7e:1c:06:08:4e:48:67:17:2e: 15:56:7e:55:bd:ec:48:4b:0e:f7:08:c7:fd:82:97:e2:5d:88: 3a:ab:c4:df:60:7e:a8:ee:94:4f:93:2f:f4:8c:33:07:d3:ef: 28:5f:f3:1d:43:e7:c9:87:39:c5:68:db:6c:b0:bf:67:e1:b4: af:28:25:35:75:b7:55:96:aa:2c:f0:64:f5:0e:37:0d:01:06: 7c:2a:6a:a0:4b:7e:f1:d2:9c:16:3c:9b:67:b7:18:cc:87:8e: ea:c5:7e:4d:dc:e7:bb:db:05:8b:c6:a7:40:10:cd:78:d1:c7: 53:62:0e:23:ce:e1:58:b5:54:cb:75:83:1b:17:13:24:ac:6d: af:30:6c:83:25:be:fc:91:3a:0f:8b:81:40:84:1e:67:44:0a: 25:8c:0b:23:3f:27:c6:50:77:d4:16:2c:23:7c:d0:b7:6d:bd: ed:51:1b:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPTPtJuRkDfmFtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MDFlYzM1NWEtN2JmOC00MjA4LWFmNmMtNmNjZjBlY2QwN2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfYZ2gaMHiZi561uCNCPohJXbKi3zt+FtgDM XJuEOL66ddAWpYRxMWN4uYivoNE2ox/stCUAdQyXOfbE5qdWwefYa54HFJPZ2qlE SA68u8xk4GbUCm3/3Co0lNsAwL1JjYWHauZSBzFKB4Am4XJvVXdPC3HikeVcBMDa Kc51ejHz2miNQE+L8+Mq/lgwigIhy3IwBKCmKLceBir0sKgPq3NtF9cWh9fKJn8K eopEznG6kUsGY6HzYM+yi2LWDXsQ/L0gv5s+5mbCHjenMZURDfcO6OwxHcT6Brqf Pvvzs41olfh6squ58SEFh7ySfDmlJzEdoYTWSc2ej3uEC5qJ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxQ7Fse/4P6E89MqruJAuSY64zPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2RmOWNjZGMtNjdjOC0z NjI0LTkyZmUtNzFhMTM1NDIzNjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhBqATmhz06PO6E66qNHLenazHVMz2m0ooNOc9wX6Gh5PmpAUyd8BMD cLhvev+GBQ2/9D/i0gIpE8xRWDmduOT7ezagLyK0i0OKfeudGD/KAn4cBghOSGcX LhVWflW97EhLDvcIx/2Cl+JdiDqrxN9gfqjulE+TL/SMMwfT7yhf8x1D58mHOcVo 22ywv2fhtK8oJTV1t1WWqizwZPUONw0BBnwqaqBLfvHSnBY8m2e3GMyHjurFfk3c 57vbBYvGp0AQzXjRx1NiDiPO4Vi1VMt1gxsXEySsba8wbIMlvvyROg+LgUCEHmdE CiWMCyM/J8ZQd9QWLCN80Ldtve1RG+s= -----END CERTIFICATE-----Generated at Thu Mar 12 03:44:35 2026 by rpki-client