$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/653be4d7-a460-3355-9824-3a25e54a7b42.roa File: 653be4d7-a460-3355-9824-3a25e54a7b42.roa (raw, json) Hash identifier: pxS2sNgEgj1E6QCBCVE/VbvG5wZb4MYj8P9WWqVZXkc= Subject key identifier: 06:E0:42:D2:D2:A0:A3:F2:14:CF:11:95:C5:E5:12:71:6E:81:D5:45 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D8EF9991A122D302DFB62A400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/653be4d7-a460-3355-9824-3a25e54a7b42.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 30036 IP address blocks: 173.28.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:99:1a:12:2d:30:2d:fb:62:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=acf6e1cf-d146-4098-a84f-884ad12f3a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:fb:d8:0f:40:79:9e:0c:f8:79:6a:68:27: 33:22:b8:f2:66:3b:e0:49:fe:d4:13:9b:30:f2:8c: 67:96:23:de:01:11:00:83:f5:26:07:46:5a:e2:76: 74:51:aa:05:ec:5f:5d:57:a8:28:45:51:73:f2:c9: 0e:91:0e:8c:a7:94:ac:38:0f:9f:f5:6a:ce:76:31: c2:70:c6:4a:4b:e8:83:17:d8:34:b3:13:b9:52:81: 8e:03:cc:a7:49:94:4b:50:aa:3c:05:f1:9f:48:8e: f6:a7:43:ce:99:34:3f:96:fc:ef:7a:60:88:ce:8c: 57:31:16:2d:a4:4b:9f:78:c2:ad:a9:09:23:64:19: 6c:2b:b8:65:6c:6e:a0:3a:81:95:f1:db:65:95:49: 7d:b4:75:b3:08:dc:92:58:9d:ac:e1:7e:aa:9d:8e: fd:9f:b4:14:54:e6:c7:d4:57:41:ab:d3:50:00:a9: eb:62:95:f0:2c:42:3f:1a:98:27:b6:6f:86:e2:42: 4c:b9:0b:d7:4f:16:ae:a4:92:6f:e1:12:1a:64:31: 94:20:e2:46:85:ef:c6:ab:21:0b:5b:3f:97:0e:1e: d7:d3:20:45:f0:aa:01:e8:1b:41:53:c1:ed:63:98: 7b:b4:d5:18:c6:6f:11:56:ef:85:b8:4a:4c:b5:6a: 5f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E0:42:D2:D2:A0:A3:F2:14:CF:11:95:C5:E5:12:71:6E:81:D5:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/653be4d7-a460-3355-9824-3a25e54a7b42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:29:6e:48:4b:fa:ba:ae:29:4d:c1:e8:28:73:57:af:ff:f1: ea:35:97:17:61:6c:ac:be:dd:6b:96:cd:fe:42:56:15:1d:0b: 84:b4:88:46:7d:24:d3:b1:e3:f0:45:7c:ae:3a:d3:27:2c:83: 6e:04:ee:19:dd:a7:23:3e:db:35:69:1e:fd:59:81:bb:64:3e: 4b:96:cb:3a:49:65:26:77:5e:e1:26:34:70:85:d4:8d:09:ae: cd:47:9e:8c:1e:64:13:b0:e4:7a:e5:2c:b5:a0:8b:1e:24:17: 47:11:b3:43:d4:b0:91:3e:cd:98:1d:cb:c1:6a:e7:8d:c4:34: 37:93:0b:fc:26:b1:8c:e6:a4:c5:f1:e4:1a:f4:8b:b2:e1:59: ab:e2:1d:bc:85:27:00:85:d4:9e:4a:f7:60:cd:9b:88:fd:13: 6d:d4:b7:e9:d7:68:90:47:64:0c:6d:d2:6c:f7:28:a5:51:9b: 77:4c:d4:e6:76:42:de:83:ec:50:64:ec:8f:36:00:48:89:da: 66:b2:f1:c2:c5:70:0c:ef:70:65:d4:27:77:bd:e3:5f:cc:56: fe:4b:3e:37:50:74:cf:ef:23:8d:07:99:a3:e9:4f:5b:cf:ea: 4e:17:e4:6a:6a:f1:d8:4e:64:7a:59:0f:04:2f:e5:07:91:9e: 0a:4c:7c:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+ZkaEi0wLftipAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YWNmNmUxY2YtZDE0Ni00MDk4LWE4NGYtODg0YWQxMmYzYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCX72A9AeZ4M+HlqaCczIrjyZjvgSf7UE5sw 8oxnliPeAREAg/UmB0Za4nZ0UaoF7F9dV6goRVFz8skOkQ6Mp5SsOA+f9WrOdjHC cMZKS+iDF9g0sxO5UoGOA8ynSZRLUKo8BfGfSI72p0POmTQ/lvzvemCIzoxXMRYt pEufeMKtqQkjZBlsK7hlbG6gOoGV8dtllUl9tHWzCNySWJ2s4X6qnY79n7QUVObH 1FdBq9NQAKnrYpXwLEI/Gpgntm+G4kJMuQvXTxaupJJv4RIaZDGUIOJGhe/GqyEL Wz+XDh7X0yBF8KoB6BtBU8HtY5h7tNUYxm8RVu+FuEpMtWpf3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbgQtLSoKPyFM8RlcXlEnFugdVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjUzYmU0ZDctYTQ2MC0z MzU1LTk4MjQtM2EyNWU1NGE3YjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUpbkhL+rquKU3B6ChzV6//8eo1lxdhbKy+3WuWzf5CVhUdC4S0iEZ9 JNOx4/BFfK460ycsg24E7hndpyM+2zVpHv1ZgbtkPkuWyzpJZSZ3XuEmNHCF1I0J rs1HnoweZBOw5HrlLLWgix4kF0cRs0PUsJE+zZgdy8Fq543ENDeTC/wmsYzmpMXx 5Br0i7LhWaviHbyFJwCF1J5K92DNm4j9E23Ut+nXaJBHZAxt0mz3KKVRm3dM1OZ2 Qt6D7FBk7I82AEiJ2may8cLFcAzvcGXUJ3e941/MVv5LPjdQdM/vI40HmaPpT1vP 6k4X5Gpq8dhOZHpZDwQv5QeRngpMfAY= -----END CERTIFICATE-----Generated at Fri May 8 18:26:05 2026 by rpki-client