$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/597393ed-62d8-35f7-9f2a-6137f0af3ac9.roa File: 597393ed-62d8-35f7-9f2a-6137f0af3ac9.roa (raw, json) Hash identifier: tGN7EEAZWpA8G5rw2Kd+or/6gu/MnsaLxJSBdD289nk= Subject key identifier: 93:DB:96:9C:4E:C2:D9:72:42:09:A2:BE:25:40:62:01:C1:30:81:46 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2379F226D4BC77D7072BA880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/597393ed-62d8-35f7-9f2a-6137f0af3ac9.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.21.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f2:26:d4:bc:77:d7:07:2b:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=aec1aac5-3789-4a28-85db-16c430736826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:6e:e1:12:ff:c5:d7:ee:85:54:7e:32:47: cc:52:ac:b0:90:7d:e6:2a:6f:4e:94:05:5f:ee:bc: e8:f3:00:9c:c5:26:af:3c:4d:4c:a0:f8:06:ca:02: 35:d9:08:e4:34:60:a8:9b:63:74:2d:02:02:ac:9f: 04:27:66:4d:64:10:3c:00:e3:74:c1:96:1c:e1:fe: 19:1e:fd:3a:b3:6c:3d:14:90:3b:21:93:2e:8a:c3: 7b:2d:f3:16:bf:e7:e2:83:b6:6f:5a:10:17:a4:01: 5b:e9:ce:14:70:b2:29:44:79:dc:93:f6:6a:21:76: 8c:f5:2c:6d:c8:6d:b6:76:df:70:d0:7d:6f:3c:42: 1d:68:f1:f6:c5:66:f3:58:a0:b2:03:ee:99:6c:b3: 17:0e:1a:3a:de:64:43:c3:c4:ea:65:b6:92:d5:f8: 7c:b1:29:20:2b:1d:b8:a5:9b:7a:c0:e1:7b:38:83: e0:06:7d:1f:8b:0f:2a:8b:b6:31:e8:ab:4b:00:dc: 07:93:41:dc:b1:0d:3c:4f:02:63:3a:99:ca:24:f9: 55:e0:d0:87:e5:08:0a:ee:ac:61:f2:b1:ba:fc:dd: a8:22:27:79:28:43:9f:50:0c:10:07:c2:95:ae:97: 8a:d6:1e:1a:2b:fa:c7:e8:5c:b2:0d:dc:ea:b2:e3: 6d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DB:96:9C:4E:C2:D9:72:42:09:A2:BE:25:40:62:01:C1:30:81:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/597393ed-62d8-35f7-9f2a-6137f0af3ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:05:3f:21:c8:f5:8c:cd:9f:78:15:51:3b:61:66:e5:3e:b5: fd:16:09:7f:ca:ef:7d:26:b9:29:51:04:76:04:c8:a2:59:6b: ae:4b:75:ef:04:e9:4a:ba:34:5d:4b:cc:ec:54:fa:f3:a0:35: a0:e2:58:24:d4:5f:3c:2c:be:9b:33:00:02:11:33:d4:c9:22: e8:2a:45:05:b0:f0:2b:52:4a:bf:5d:6a:df:eb:71:82:61:2b: 16:3f:f6:22:d9:f6:cd:c2:f8:e7:11:66:90:b8:3b:9f:8f:02: 00:66:26:96:97:99:70:d1:5b:af:8d:b3:77:5a:e5:8d:ab:8d: 1e:ea:d6:0d:d9:fe:13:29:22:fe:4a:62:f8:d4:c8:48:4f:be: 9f:4e:05:67:8d:4e:7e:7a:60:ac:72:f0:b1:ff:91:8b:72:90: d6:ef:dd:f3:cc:65:81:05:dd:e7:77:46:52:7f:9c:a6:cf:48: 6a:82:9e:c3:e7:a0:46:e7:dd:bb:54:9c:60:10:0b:2f:8d:86: f7:ae:b4:a6:bb:57:3a:6e:25:95:ff:bc:2e:d1:7c:1d:17:91: ea:4a:46:2e:91:84:d9:cc:a5:79:ea:33:ff:f5:dd:1e:c7:d4: f5:bc:c7:3a:63:74:80:41:7b:69:e8:60:fb:74:6c:62:0f:fd: 25:a9:f5:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefIm1Lx31wcrqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YWVjMWFhYzUtMzc4OS00YTI4LTg1ZGItMTZjNDMwNzM2ODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6lu4RL/xdfuhVR+MkfMUqywkH3mKm9OlAVf 7rzo8wCcxSavPE1MoPgGygI12QjkNGCom2N0LQICrJ8EJ2ZNZBA8AON0wZYc4f4Z Hv06s2w9FJA7IZMuisN7LfMWv+fig7ZvWhAXpAFb6c4UcLIpRHnck/ZqIXaM9Sxt yG22dt9w0H1vPEIdaPH2xWbzWKCyA+6ZbLMXDho63mRDw8TqZbaS1fh8sSkgKx24 pZt6wOF7OIPgBn0fiw8qi7Yx6KtLANwHk0HcsQ08TwJjOpnKJPlV4NCH5QgK7qxh 8rG6/N2oIid5KEOfUAwQB8KVrpeK1h4aK/rH6FyyDdzqsuNt/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPblpxOwtlyQgmiviVAYgHBMIFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTk3MzkzZWQtNjJkOC0z NWY3LTlmMmEtNjEzN2YwYWYzYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0FPyHI9YzNn3gVUTthZuU+tf0WCX/K730muSlRBHYEyKJZa65Lde8E 6Uq6NF1LzOxU+vOgNaDiWCTUXzwsvpszAAIRM9TJIugqRQWw8CtSSr9dat/rcYJh KxY/9iLZ9s3C+OcRZpC4O5+PAgBmJpaXmXDRW6+Ns3da5Y2rjR7q1g3Z/hMpIv5K YvjUyEhPvp9OBWeNTn56YKxy8LH/kYtykNbv3fPMZYEF3ed3RlJ/nKbPSGqCnsPn oEbn3btUnGAQCy+NhveutKa7VzpuJZX/vC7RfB0XkepKRi6RhNnMpXnqM//13R7H 1PW8xzpjdIBBe2noYPt0bGIP/SWp9Ss= -----END CERTIFICATE-----Generated at Thu Mar 12 05:07:21 2026 by rpki-client