$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5649878e-e982-39bb-9d15-912d6b1f027b.roa File: 5649878e-e982-39bb-9d15-912d6b1f027b.roa (raw, json) Hash identifier: 3lktIppLRrQIslaoYkT9VFP6IcBJMIc8ypmUer9ys/Y= Subject key identifier: B7:45:67:AD:83:02:5E:84:EB:E0:9B:E6:39:FB:13:4A:71:0E:63:E6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A771DE727BA2C24C53880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5649878e-e982-39bb-9d15-912d6b1f027b.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.29.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:77:1d:e7:27:ba:2c:24:c5:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=7ba426f5-0d96-4295-8d3a-ab1f3a209875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9c:0f:54:c3:2e:e1:74:c6:76:c1:ee:e4:e4: fb:ad:ea:1c:24:1a:26:fd:8a:e8:31:57:eb:d2:b2: c7:64:6a:29:96:0d:ba:42:ae:56:e6:cb:2b:32:43: e3:d3:0d:5a:05:b5:06:3c:a6:61:83:6d:c1:6d:8d: ec:ca:9f:15:68:ec:0e:d8:93:6e:f7:c7:e2:f9:bb: 1c:9e:86:b9:42:18:7d:2c:9b:23:5e:89:93:35:ca: ef:d0:6a:87:b4:1f:dc:08:7a:7d:df:d2:63:71:f2: ff:10:28:8e:5c:00:d4:a2:7f:5e:dc:da:eb:4b:34: 12:d0:9a:b6:bb:8c:71:cc:2b:97:37:1e:22:a2:6b: 4a:1a:2b:14:3f:9b:0e:c8:3b:12:b3:40:36:ba:a4: 78:5e:8d:df:b9:66:68:8d:1f:35:38:52:cf:14:80: 3b:c3:67:6d:2c:2f:93:8a:d5:ae:fc:fb:cb:5c:57: 14:24:23:00:f2:cb:6f:08:88:e5:13:8d:96:35:8c: 2f:95:58:c3:0e:c4:98:30:b9:12:fb:85:6d:4e:9d: 14:e0:fc:11:ab:32:c6:61:f9:52:ac:6f:e9:7d:a5: 0a:16:d6:bb:e8:95:89:6d:77:a2:2e:6c:f9:22:72: 1f:e7:38:9a:66:c4:1d:5e:60:8a:59:1f:b0:62:40: 5e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:45:67:AD:83:02:5E:84:EB:E0:9B:E6:39:FB:13:4A:71:0E:63:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5649878e-e982-39bb-9d15-912d6b1f027b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:cf:a2:67:4e:53:e0:06:8d:a6:84:f1:69:64:9f:56:94:19: 2c:a6:1c:fc:81:3f:8f:e5:1a:08:ba:1b:08:02:6c:d8:da:11: dd:89:6c:95:b1:2a:b4:70:61:df:99:25:0b:f2:ae:ba:1d:1b: 09:c2:04:b2:12:28:df:2a:fd:1b:31:92:ce:f6:5c:2b:0b:aa: b1:b9:6c:55:be:93:7f:d5:20:c8:f0:b4:df:41:7f:b0:8b:b0: 0b:82:a1:b3:04:7f:d7:f2:99:db:29:d8:ed:6d:0a:b0:d0:60: f3:a0:56:62:d3:02:ee:73:d3:6b:f9:2c:fa:f1:0f:53:6a:ad: a9:2b:0b:f6:9b:9c:9a:19:7f:f2:6e:cb:e1:cb:22:ba:76:2d: eb:2f:eb:87:14:83:4a:72:c0:fa:b2:ab:18:e0:89:5b:3a:0d: ce:86:29:ea:cc:df:2c:48:7d:1b:ec:7c:20:10:ab:83:8b:70: 7b:85:83:aa:d3:5a:ce:46:08:28:95:d4:fb:c1:a3:8f:eb:59: e7:f0:86:6f:9e:1f:07:5c:72:29:21:90:60:b2:2f:82:c2:d8: 46:43:5e:ae:6b:8a:c9:0b:ed:8f:44:b4:60:80:0e:6e:ac:42: a4:d1:f5:97:12:dd:9a:78:e3:5b:c8:3b:95:e8:61:36:f8:e5: bb:c7:12:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jencd5ye6LCTFOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk N2JhNDI2ZjUtMGQ5Ni00Mjk1LThkM2EtYWIxZjNhMjA5ODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpwPVMMu4XTGdsHu5OT7reocJBom/YroMVfr 0rLHZGoplg26Qq5W5ssrMkPj0w1aBbUGPKZhg23BbY3syp8VaOwO2JNu98fi+bsc noa5Qhh9LJsjXomTNcrv0GqHtB/cCHp939JjcfL/ECiOXADUon9e3NrrSzQS0Jq2 u4xxzCuXNx4iomtKGisUP5sOyDsSs0A2uqR4Xo3fuWZojR81OFLPFIA7w2dtLC+T itWu/PvLXFcUJCMA8stvCIjlE42WNYwvlVjDDsSYMLkS+4VtTp0U4PwRqzLGYflS rG/pfaUKFta76JWJbXeiLmz5InIf5ziaZsQdXmCKWR+wYkBeOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdFZ62DAl6E6+Cb5jn7E0pxDmPmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTY0OTg3OGUtZTk4Mi0z OWJiLTlkMTUtOTEyZDZiMWYwMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfPomdOU+AGjaaE8Wlkn1aUGSymHPyBP4/lGgi6GwgCbNjaEd2JbJWx KrRwYd+ZJQvyrrodGwnCBLISKN8q/Rsxks72XCsLqrG5bFW+k3/VIMjwtN9Bf7CL sAuCobMEf9fymdsp2O1tCrDQYPOgVmLTAu5z02v5LPrxD1NqrakrC/abnJoZf/Ju y+HLIrp2Lesv64cUg0pywPqyqxjgiVs6Dc6GKerM3yxIfRvsfCAQq4OLcHuFg6rT Ws5GCCiV1PvBo4/rWefwhm+eHwdccikhkGCyL4LC2EZDXq5riskL7Y9EtGCADm6s QqTR9ZcS3Zp441vIO5XoYTb45bvHEkI= -----END CERTIFICATE-----Generated at Thu Mar 12 03:41:10 2026 by rpki-client