$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e3f1639-f24c-3623-9a90-168231cde9ac.roa File: 3e3f1639-f24c-3623-9a90-168231cde9ac.roa (raw, json) Hash identifier: 5msJqr0ajJkd+zy7dzaQNyxmFPND3st+Y6tSU5ZCMEA= Subject key identifier: 30:C3:13:D6:4F:B5:36:57:5B:28:CF:83:24:3D:BD:FC:90:8B:86:34 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2379FFAD3D7F378202FA6880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e3f1639-f24c-3623-9a90-168231cde9ac.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.17.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:ff:ad:3d:7f:37:82:02:fa:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=7bac37db-ca7d-411f-aed2-78a87268bff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f8:3d:f3:26:17:97:c3:27:63:8f:e2:d3:ae: 65:98:e8:fa:82:9c:05:cb:4c:d8:20:73:d6:1b:01: 19:8f:7b:19:11:4a:80:2d:51:a5:21:e9:f0:39:d5: 76:a5:66:33:d7:41:26:8c:e6:89:84:b7:67:85:70: 86:aa:30:33:05:cd:33:d1:c8:ba:cc:88:6e:dd:e8: f4:36:3e:0c:19:f6:be:fb:03:f9:e3:d0:3b:00:21: 0c:bb:54:4f:31:c2:0b:4c:46:d2:b0:a8:78:61:ce: d0:37:10:6b:3b:e4:d7:59:50:0d:0c:a3:2c:02:3a: c3:ac:c1:4f:6d:0a:c2:87:3c:7c:40:91:85:69:4b: d6:ae:e1:e6:47:f8:b5:4f:a6:8e:aa:6e:41:19:f3: db:ae:bc:ec:a4:04:3a:39:c5:9d:3c:91:81:12:c7: 5b:7b:bb:ce:05:97:88:cc:79:1e:f7:81:1b:ac:27: fc:f2:dc:76:1c:85:4b:c9:9b:cd:0c:91:16:d4:28: 01:67:70:71:b3:7c:6a:7e:7d:dd:22:81:9b:cc:ef: 00:a6:e4:6d:94:d1:e2:77:aa:22:ee:4a:58:16:53: f6:98:6c:9d:db:a7:08:d6:aa:68:49:7e:3f:49:38: 00:6e:dc:88:49:ee:5f:ed:85:f4:3b:24:69:2b:07: 24:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C3:13:D6:4F:B5:36:57:5B:28:CF:83:24:3D:BD:FC:90:8B:86:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e3f1639-f24c-3623-9a90-168231cde9ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:40:14:dd:90:83:7f:c5:23:90:19:77:d3:79:b8:83:df:00: fb:09:4f:fb:eb:f3:0b:9a:22:38:71:32:a2:1f:23:72:e9:18: e9:41:ca:af:a1:5f:e6:cb:1a:d7:cf:7c:91:45:de:1c:89:ca: 98:4f:e9:f3:f7:2d:72:fd:2d:bc:d3:42:aa:4f:f2:ab:d3:38: 67:c2:c8:d1:d7:da:73:78:2e:1a:ac:cc:ad:42:d0:29:9f:9f: 11:f0:c1:e1:a2:f4:a2:c6:72:67:f0:75:18:67:27:76:dd:6b: d7:df:93:61:8e:52:96:95:0b:1a:96:3a:f8:52:d0:e8:22:94: 09:71:a8:5f:fe:f2:7a:8e:53:d3:21:cb:e2:4b:ff:9d:8f:d5: 34:2a:f6:d2:8b:93:16:2a:da:4c:d7:63:f2:ea:57:1b:d6:d4: 3a:3c:8f:be:16:8b:80:c2:cd:a4:c9:76:da:da:e9:1a:ca:dc: d4:f6:20:5f:ed:6f:db:15:73:18:09:a1:b1:5c:b6:26:0a:20: f1:7c:22:22:e7:c2:08:6d:e4:f6:cd:c3:19:c2:9c:39:9e:a9: 9f:1b:ce:18:4f:1b:c4:91:0c:10:e2:cb:52:f8:89:5a:77:be: b1:2c:2c:30:2d:4b:50:24:48:5e:a4:08:91:18:dd:da:1d:6c: bc:6c:03:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jef+tPX83ggL6aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk N2JhYzM3ZGItY2E3ZC00MTFmLWFlZDItNzhhODcyNjhiZmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvg98yYXl8MnY4/i065lmOj6gpwFy0zYIHPW GwEZj3sZEUqALVGlIenwOdV2pWYz10EmjOaJhLdnhXCGqjAzBc0z0ci6zIhu3ej0 Nj4MGfa++wP549A7ACEMu1RPMcILTEbSsKh4Yc7QNxBrO+TXWVANDKMsAjrDrMFP bQrChzx8QJGFaUvWruHmR/i1T6aOqm5BGfPbrrzspAQ6OcWdPJGBEsdbe7vOBZeI zHke94EbrCf88tx2HIVLyZvNDJEW1CgBZ3Bxs3xqfn3dIoGbzO8ApuRtlNHid6oi 7kpYFlP2mGyd26cI1qpoSX4/STgAbtyISe5f7YX0OyRpKwckowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDDE9ZPtTZXWyjPgyQ9vfyQi4Y0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2UzZjE2MzktZjI0Yy0z NjIzLTlhOTAtMTY4MjMxY2RlOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlAFN2Qg3/FI5AZd9N5uIPfAPsJT/vr8wuaIjhxMqIfI3LpGOlByq+h X+bLGtfPfJFF3hyJyphP6fP3LXL9LbzTQqpP8qvTOGfCyNHX2nN4LhqszK1C0Cmf nxHwweGi9KLGcmfwdRhnJ3bda9ffk2GOUpaVCxqWOvhS0OgilAlxqF/+8nqOU9Mh y+JL/52P1TQq9tKLkxYq2kzXY/LqVxvW1Do8j74Wi4DCzaTJdtra6RrK3NT2IF/t b9sVcxgJobFctiYKIPF8IiLnwght5PbNwxnCnDmeqZ8bzhhPG8SRDBDiy1L4iVp3 vrEsLDAtS1AkSF6kCJEY3dodbLxsAyQ= -----END CERTIFICATE-----Generated at Thu Mar 12 03:44:49 2026 by rpki-client