$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d7bec0f-ee4b-3964-ad48-1ad2d12af08d.roa File: 4d7bec0f-ee4b-3964-ad48-1ad2d12af08d.roa (raw, json) Hash identifier: x7lRapmF3rYaKFJPPYXaGg/KeVOViKSDBV8NCbs6T/0= Subject key identifier: F6:F9:2D:DB:86:D9:AC:EB:03:2F:ED:A6:98:DE:E7:FD:78:58:34:64 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A3BA60CBBE9A7EE030940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d7bec0f-ee4b-3964-ad48-1ad2d12af08d.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.16.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:3b:a6:0c:bb:e9:a7:ee:03:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=294cfb7a-6b67-434a-8f4f-7a61eee6443c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:74:ab:ea:01:84:11:6c:f2:3b:17:b2:d4:9a: 54:ab:5a:d4:70:29:21:c0:98:3b:97:f5:ea:2f:87: 10:a8:9f:7e:c9:83:f2:37:5d:36:78:3d:3c:ad:20: 57:67:57:82:75:2e:8d:57:d4:17:9f:b9:53:1f:c0: 17:1b:a8:28:b6:39:1f:b6:ae:c2:58:e4:b5:17:b9: 57:f3:ff:ce:20:0d:d5:85:ae:81:ef:66:38:08:4e: 8c:f8:ea:83:e0:f0:9c:7e:2a:c7:2c:2b:d9:89:68: 37:7a:c4:5e:86:26:3e:45:1e:b6:66:12:c3:29:c0: 12:90:d7:e2:c3:cc:13:d5:6a:40:8a:15:5c:74:07: 87:67:42:51:a5:d6:8e:4d:77:00:da:82:3f:75:50: 59:10:55:fd:0c:10:58:e4:71:33:ed:e5:ee:ac:f1: 71:fa:fd:6a:c1:0c:79:33:11:e4:e2:7c:63:78:e3: 89:46:a2:1a:97:6f:98:07:da:bb:e7:3b:f4:77:82: 61:8c:cf:01:65:c3:f1:d2:f7:0e:53:8b:08:ab:37: 91:67:7c:90:69:26:99:5d:6e:7e:03:0d:04:c5:20: e1:26:7a:d4:13:bd:00:e2:40:10:8c:a2:36:ba:95: d1:ec:09:3e:7c:25:ad:0b:0e:46:1b:01:15:6d:ec: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F9:2D:DB:86:D9:AC:EB:03:2F:ED:A6:98:DE:E7:FD:78:58:34:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4d7bec0f-ee4b-3964-ad48-1ad2d12af08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:14:e6:f3:47:33:18:54:64:2d:b1:02:03:81:9d:20:1d:e6: 95:8b:67:b7:05:97:bc:ba:20:cc:f0:b6:8f:d9:a2:73:e0:2d: 73:9a:46:5e:85:6f:a6:d8:8c:db:c3:03:ed:af:d0:ed:c5:c1: ab:23:2d:43:b4:29:cf:ef:23:22:f9:8b:95:1a:e3:09:02:55: a9:5f:13:92:68:d2:0b:be:24:e0:ed:a1:d2:99:11:27:3e:7a: 3a:8b:80:80:63:09:ae:f2:61:a7:01:39:d8:d4:75:11:1d:54: 3f:eb:0d:0d:ad:7c:8b:60:7d:93:be:a3:e9:f4:b9:c2:0f:ce: 13:6f:2f:51:98:1b:87:38:30:63:9f:c5:39:e7:79:3f:58:83: 0c:64:3e:d1:37:8c:98:a9:d6:43:b6:84:41:ce:d4:b1:26:e9: d1:2d:6e:1e:9b:0c:7e:57:9d:65:c6:08:1d:89:ec:b1:bc:57: 67:6e:1b:ae:54:ad:8d:75:f8:8f:4e:43:c5:1a:d2:8a:80:99: fb:4b:e8:6a:49:fa:48:6b:63:3b:10:e9:b9:7c:a5:19:4a:d1: 06:96:56:df:5e:38:fa:7b:e8:dd:24:df:25:38:91:68:3a:bd: 7d:ba:d3:ac:6f:5d:99:15:d0:23:bd:0e:d0:90:5f:fd:4e:93: 93:42:5c:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejumDLvpp+4DCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk Mjk0Y2ZiN2EtNmI2Ny00MzRhLThmNGYtN2E2MWVlZTY0NDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HSr6gGEEWzyOxey1JpUq1rUcCkhwJg7l/Xq L4cQqJ9+yYPyN102eD08rSBXZ1eCdS6NV9QXn7lTH8AXG6gotjkftq7CWOS1F7lX 8//OIA3Vha6B72Y4CE6M+OqD4PCcfirHLCvZiWg3esRehiY+RR62ZhLDKcASkNfi w8wT1WpAihVcdAeHZ0JRpdaOTXcA2oI/dVBZEFX9DBBY5HEz7eXurPFx+v1qwQx5 MxHk4nxjeOOJRqIal2+YB9q75zv0d4JhjM8BZcPx0vcOU4sIqzeRZ3yQaSaZXW5+ Aw0ExSDhJnrUE70A4kAQjKI2upXR7Ak+fCWtCw5GGwEVbezyOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPb5LduG2azrAy/tppje5/14WDRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGQ3YmVjMGYtZWU0Yi0z OTY0LWFkNDgtMWFkMmQxMmFmMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoU5vNHMxhUZC2xAgOBnSAd5pWLZ7cFl7y6IMzwto/ZonPgLXOaRl6F b6bYjNvDA+2v0O3FwasjLUO0Kc/vIyL5i5Ua4wkCValfE5Jo0gu+JODtodKZESc+ ejqLgIBjCa7yYacBOdjUdREdVD/rDQ2tfItgfZO+o+n0ucIPzhNvL1GYG4c4MGOf xTnneT9YgwxkPtE3jJip1kO2hEHO1LEm6dEtbh6bDH5XnWXGCB2J7LG8V2duG65U rY11+I9OQ8Ua0oqAmftL6GpJ+khrYzsQ6bl8pRlK0QaWVt9eOPp76N0k3yU4kWg6 vX2606xvXZkV0CO9DtCQX/1Ok5NCXKA= -----END CERTIFICATE-----Generated at Thu Mar 12 03:46:05 2026 by rpki-client