$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f7d552d-11ea-3bd9-9e60-370222ef7fae.roa File: 3f7d552d-11ea-3bd9-9e60-370222ef7fae.roa (raw, json) Hash identifier: OnXb2Fx1aICGyQIWIvmIr+4nlKayFignRAMiDLcXqA4= Subject key identifier: A3:AF:07:6E:BE:3F:50:E8:21:01:39:5C:ED:A3:D1:DF:8D:D5:D6:4C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A0D3D60B7477516FE23C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f7d552d-11ea-3bd9-9e60-370222ef7fae.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.29.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:0d:3d:60:b7:47:75:16:fe:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=66f864e9-7faa-4fa1-b2cf-446413c84c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:b5:27:a2:35:45:96:9d:d2:fd:44:cc:ff: 37:6c:fe:c5:45:7b:09:2b:c3:f0:57:98:1e:f9:65: 92:b5:06:c4:4d:73:64:e3:6f:20:c5:91:4a:8b:b0: fe:4f:da:00:82:08:90:6c:07:73:7f:7c:b0:72:9a: 0c:d0:15:0f:19:f4:d4:20:d9:e5:d3:3f:e7:e8:c2: f6:ab:44:a2:24:53:70:74:f9:70:2b:7b:4f:e2:94: 62:6c:0e:07:fc:98:32:7a:7d:a2:2c:77:ff:88:dd: 9a:a3:35:0f:37:f5:95:25:20:31:f3:65:45:47:f2: 62:0e:cb:8c:83:c8:70:24:dc:c4:05:d6:5f:db:c7: e6:2d:0d:84:d2:48:55:b4:71:8e:0e:b1:5c:ad:bc: 48:f4:bc:ce:72:7b:06:99:43:f1:35:ba:c4:a2:e3: 48:f3:61:57:ba:cb:1a:68:25:c0:4c:8c:a1:cd:ff: 0a:51:42:55:d4:29:32:8a:1e:06:df:c7:a9:8a:bc: cc:53:05:6a:35:15:d6:0e:73:af:d3:91:b6:84:92: 87:49:25:b1:a2:c4:61:f8:42:7c:23:18:7d:8f:6d: 67:95:c1:5f:78:98:cd:67:da:1c:02:d9:c5:d0:46: 82:b4:48:ab:9f:04:8d:79:dd:cd:8d:ae:82:d0:1b: 22:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AF:07:6E:BE:3F:50:E8:21:01:39:5C:ED:A3:D1:DF:8D:D5:D6:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f7d552d-11ea-3bd9-9e60-370222ef7fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:17:30:61:90:ec:23:59:90:46:db:12:02:78:87:ea:a3:6d: 39:7a:8f:26:f8:2e:45:d8:06:15:72:91:ee:2d:f1:b2:52:a6: 0f:48:42:6a:91:d4:e3:72:cb:11:a8:6e:f6:88:b5:d0:17:4b: e9:44:8e:5f:02:60:92:d9:26:4b:03:01:53:ba:0b:79:fd:cb: 71:ea:ac:12:78:c5:19:f6:e8:ce:e4:f9:98:a4:ca:ba:29:7a: fb:e7:fe:6d:c7:82:c0:90:f3:60:98:34:85:eb:a8:a8:a8:b9: 80:51:32:1e:37:4f:33:28:b8:c3:e2:58:41:ec:56:30:e8:77: be:01:42:0b:c0:a6:43:5f:30:15:32:fe:4d:fe:b7:89:88:da: 00:e9:bb:db:30:04:4d:4a:72:ed:30:7d:37:72:1a:29:26:29: 86:8f:c1:1c:9c:c6:0c:c3:7b:fc:0e:9c:51:e9:d5:33:1c:12: e3:2e:6f:17:72:bd:8d:6a:b9:54:ed:8c:0f:b8:81:36:7b:a3: 45:ea:5b:87:59:87:42:68:cd:02:0a:b5:af:ca:15:f4:a8:c6: 38:fe:24:bb:2a:ab:32:7d:3b:53:aa:7a:4d:a8:05:06:65:9a: ba:01:4d:b0:00:a2:63:52:b6:d4:b5:0a:75:4e:66:f6:c4:6d: 1f:33:94:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeg09YLdHdRb+I8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NjZmODY0ZTktN2ZhYS00ZmExLWIyY2YtNDQ2NDEzYzg0YzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLa1J6I1RZad0v1EzP83bP7FRXsJK8PwV5ge +WWStQbETXNk428gxZFKi7D+T9oAggiQbAdzf3ywcpoM0BUPGfTUINnl0z/n6ML2 q0SiJFNwdPlwK3tP4pRibA4H/Jgyen2iLHf/iN2aozUPN/WVJSAx82VFR/JiDsuM g8hwJNzEBdZf28fmLQ2E0khVtHGODrFcrbxI9LzOcnsGmUPxNbrEouNI82FXussa aCXATIyhzf8KUUJV1Ckyih4G38epirzMUwVqNRXWDnOv05G2hJKHSSWxosRh+EJ8 Ixh9j21nlcFfeJjNZ9ocAtnF0EaCtEirnwSNed3Nja6C0BsiFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOvB26+P1DoIQE5XO2j0d+N1dZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Y3ZDU1MmQtMTFlYS0z YmQ5LTllNjAtMzcwMjIyZWY3ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMXMGGQ7CNZkEbbEgJ4h+qjbTl6jyb4LkXYBhVyke4t8bJSpg9IQmqR 1ONyyxGobvaItdAXS+lEjl8CYJLZJksDAVO6C3n9y3HqrBJ4xRn26M7k+Zikyrop evvn/m3HgsCQ82CYNIXrqKiouYBRMh43TzMouMPiWEHsVjDod74BQgvApkNfMBUy /k3+t4mI2gDpu9swBE1Kcu0wfTdyGikmKYaPwRycxgzDe/wOnFHp1TMcEuMubxdy vY1quVTtjA+4gTZ7o0XqW4dZh0JozQIKta/KFfSoxjj+JLsqqzJ9O1Oqek2oBQZl mroBTbAAomNSttS1CnVOZvbEbR8zlC0= -----END CERTIFICATE-----Generated at Thu Mar 12 03:41:37 2026 by rpki-client