$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7eb1cc7b-8aca-3968-9684-0b6d63ab63d2.roa File: 7eb1cc7b-8aca-3968-9684-0b6d63ab63d2.roa (raw, json) Hash identifier: 4xCOLBwPd8cJKqg2MKGbNj2B2EyEvJhHBXz7FoQsUMo= Subject key identifier: 1C:A6:C4:3B:43:7C:46:7C:C6:06:A6:C4:DC:99:76:8F:F2:B1:5A:01 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A206CD31A030B9B579780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7eb1cc7b-8aca-3968-9684-0b6d63ab63d2.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.22.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:20:6c:d3:1a:03:0b:9b:57:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=80bce62e-b0ad-47f3-b014-b851ae816be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8f:11:23:95:90:6f:ad:61:9e:c9:1b:4a:ae: fb:46:79:47:55:83:06:cf:0a:ec:76:a6:63:c6:04: dd:0d:ac:69:76:98:dc:93:0a:e4:b6:bd:e1:82:c1: f2:cc:c9:34:10:84:ea:34:f0:59:62:d9:a7:19:b9: 46:68:f5:5e:34:d9:4e:ab:2a:e1:95:3b:6a:a2:7a: 24:b5:8a:8f:81:3d:50:3a:06:a0:a8:c7:63:22:f2: c1:97:48:fd:b6:d0:50:b9:d2:e9:89:21:56:43:54: ac:6c:cf:56:14:83:51:96:40:d0:70:8d:52:97:8d: 38:0c:65:d5:19:bc:cb:1d:d2:38:65:5a:97:80:bc: e6:84:d9:35:d7:cf:78:02:21:5f:d9:a5:2c:2a:61: 7b:71:fb:bd:0e:24:9e:e7:1a:b1:58:d5:bd:fc:fb: bd:79:a5:49:62:c4:bf:67:e2:20:57:36:0e:1b:41: a2:ef:c3:04:17:6b:99:d9:19:17:d4:ec:50:74:fa: 07:e9:97:df:3d:55:3b:7b:24:ca:b5:e4:12:ce:b3: 6d:2a:86:1f:f1:b9:8a:eb:7d:4e:43:60:33:43:3e: ca:23:a7:5c:06:c5:80:24:48:b2:9d:71:4f:72:c7: ef:21:cd:0e:dd:80:8d:03:85:7c:09:4d:f5:36:e2: 79:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A6:C4:3B:43:7C:46:7C:C6:06:A6:C4:DC:99:76:8F:F2:B1:5A:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7eb1cc7b-8aca-3968-9684-0b6d63ab63d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c7:c0:dc:c7:e2:3f:fc:56:57:bc:c1:75:75:a5:f4:cb:92: d0:38:70:f8:e4:b8:db:23:e1:73:ed:1c:ad:0c:d3:77:b6:f8: ec:a6:cd:5a:4e:98:85:2b:61:d3:c0:f7:fd:d8:71:0e:e2:90: cd:d5:6f:60:cc:cf:43:3c:2d:6c:8c:4a:03:f6:c0:0e:01:88: d3:0c:c4:c8:59:25:bc:4a:f2:01:b8:e6:18:79:91:18:d4:20: 5c:b8:27:16:cf:c7:f0:59:0d:94:10:56:b5:28:30:ef:b7:0a: 32:de:75:a9:da:f1:96:14:4d:90:1a:97:3d:20:fe:e4:b1:89: 4c:fe:9e:33:f8:08:b1:ee:1a:b7:19:df:16:2d:d3:46:f9:eb: 42:28:6b:c7:73:a9:73:0e:c0:40:2a:54:fd:ca:21:7a:58:47: 38:88:b6:4c:5e:94:2c:fa:07:d9:7d:aa:ea:89:45:ba:c3:ab: 3b:27:16:6a:9d:47:57:bb:0a:07:2d:9b:f7:71:12:3c:ec:9b: fe:68:2d:c4:99:74:f3:9f:3e:d1:d8:0f:bf:5c:8c:d6:a9:8f: e4:0f:3a:a3:80:7b:11:7c:bd:32:19:91:67:b1:e1:2f:7a:1b: 16:64:81:fb:5a:1d:0a:f0:2c:2e:da:e5:e4:39:a5:ba:bb:22: 0f:6a:e2:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiBs0xoDC5tXl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODBiY2U2MmUtYjBhZC00N2YzLWIwMTQtYjg1MWFlODE2YmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI8RI5WQb61hnskbSq77RnlHVYMGzwrsdqZj xgTdDaxpdpjckwrktr3hgsHyzMk0EITqNPBZYtmnGblGaPVeNNlOqyrhlTtqonok tYqPgT1QOgagqMdjIvLBl0j9ttBQudLpiSFWQ1SsbM9WFINRlkDQcI1Sl404DGXV GbzLHdI4ZVqXgLzmhNk11894AiFf2aUsKmF7cfu9DiSe5xqxWNW9/Pu9eaVJYsS/ Z+IgVzYOG0Gi78MEF2uZ2RkX1OxQdPoH6ZffPVU7eyTKteQSzrNtKoYf8bmK631O Q2AzQz7KI6dcBsWAJEiynXFPcsfvIc0O3YCNA4V8CU31NuJ5RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBymxDtDfEZ8xgamxNyZdo/ysVoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2ViMWNjN2ItOGFjYS0z OTY4LTk2ODQtMGI2ZDYzYWI2M2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPHwNzH4j/8Vle8wXV1pfTLktA4cPjkuNsj4XPtHK0M03e2+OymzVpO mIUrYdPA9/3YcQ7ikM3Vb2DMz0M8LWyMSgP2wA4BiNMMxMhZJbxK8gG45hh5kRjU IFy4JxbPx/BZDZQQVrUoMO+3CjLedana8ZYUTZAalz0g/uSxiUz+njP4CLHuGrcZ 3xYt00b560Ioa8dzqXMOwEAqVP3KIXpYRziItkxelCz6B9l9quqJRbrDqzsnFmqd R1e7Cgctm/dxEjzsm/5oLcSZdPOfPtHYD79cjNapj+QPOqOAexF8vTIZkWex4S96 GxZkgftaHQrwLC7a5eQ5pbq7Ig9q4g0= -----END CERTIFICATE-----Generated at Thu Mar 12 05:03:48 2026 by rpki-client