$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa File: 85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa (raw, json) Hash identifier: QhqmCdR2EwhtfV+y9CqZQiJXLkuZAIeA75ehSelns2o= Subject key identifier: 53:3B:F5:64:59:3C:F7:85:50:A5:46:DD:C6:16:62:6A:38:A1:EC:15 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D1B1A03ED9A8D062D384A4800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.25.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:03:ed:9a:8d:06:2d:38:4a:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=786dc872-f6b1-420c-9b29-0f3ee3dc4e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f4:d9:0e:8f:5f:1e:c7:9f:65:57:60:f6:db: b9:82:df:76:15:14:2f:1e:ad:c6:47:89:13:aa:e5: 28:6b:40:ee:75:94:fb:75:ba:42:18:a8:19:ae:da: 2b:7f:7f:52:49:4f:95:c8:c7:ce:ec:8c:34:b9:1a: 03:f8:f6:af:14:c4:de:a9:8d:17:8d:51:52:e5:ef: 47:8a:b1:99:aa:f7:de:61:ea:17:6d:dd:34:d8:05: 4e:d4:0a:0a:5d:44:3f:e7:62:19:3c:c6:f7:52:ef: 07:dc:0b:f1:08:9e:73:cf:aa:2a:7b:35:7e:25:c8: 72:64:2a:05:c8:61:c5:c0:48:f6:3a:1a:a9:00:6c: 3e:18:93:07:47:a6:87:a3:96:08:24:e0:2a:c9:da: 19:47:c6:5e:e6:35:1e:0f:9a:15:70:5c:79:a3:ce: 2a:48:d2:7c:9b:4e:fc:6a:91:5a:52:29:8c:06:fe: 51:1c:81:e4:e8:af:fc:1a:78:9f:ed:7c:db:fc:84: 31:c2:87:5f:4a:44:40:c9:8e:ca:12:2d:94:d6:91: 5a:2b:f7:b6:4d:9b:ac:dd:e7:0d:01:bc:64:92:e7: d4:f8:de:30:38:52:29:34:3f:e5:e6:a5:9f:b8:8a: 07:f7:5c:d4:32:99:d9:79:2e:60:ca:8d:e5:49:0e: 86:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3B:F5:64:59:3C:F7:85:50:A5:46:DD:C6:16:62:6A:38:A1:EC:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85fb29dc-17e2-38f7-9aa8-6adfa1094b68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:93:54:f2:77:9c:93:31:7d:4e:28:e5:cb:7b:67:eb:21:68: 29:e2:08:6a:6d:2a:dd:c3:56:9b:94:d4:fe:39:e2:e8:c5:60: 4a:41:4b:04:b0:a9:ff:81:5d:97:c6:ad:2f:b8:5b:aa:85:71: 09:d6:f4:dc:c1:64:5e:b7:4f:2b:97:2d:e6:f2:db:19:2d:05: 75:ad:77:f5:0a:62:64:6b:79:87:52:84:a1:30:f2:46:54:21: 1c:2c:58:71:84:58:00:50:5e:b6:ee:f9:57:0b:b8:09:d1:21: 44:5f:79:09:99:b8:ce:af:68:60:b5:60:e8:21:bd:df:80:ce: 23:c9:61:81:8d:02:15:d4:71:06:db:a6:0e:31:2f:ac:ea:de: cc:67:52:99:60:b7:e2:ed:90:ad:7a:cd:f4:6a:90:13:e4:9d: bd:4f:5f:6b:70:a9:f7:e8:f9:d8:27:48:15:96:c4:d2:7e:f7: dc:2b:b3:38:1f:8e:85:f5:7d:d0:73:80:4f:8c:98:f5:a2:23: cd:67:0f:b0:74:4f:db:71:77:f3:04:d7:3f:bc:71:d5:52:2b: bf:bd:ac:48:09:5c:4d:30:08:01:a6:e3:7f:61:ed:8a:a8:a2: bf:d1:02:83:54:a4:ea:c4:49:f3:0f:2a:ec:06:1c:f5:43:91: 1a:39:2c:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGgPtmo0GLThKSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk Nzg2ZGM4NzItZjZiMS00MjBjLTliMjktMGYzZWUzZGM0ZTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PTZDo9fHsefZVdg9tu5gt92FRQvHq3GR4kT quUoa0DudZT7dbpCGKgZrtorf39SSU+VyMfO7Iw0uRoD+PavFMTeqY0XjVFS5e9H irGZqvfeYeoXbd002AVO1AoKXUQ/52IZPMb3Uu8H3AvxCJ5zz6oqezV+JchyZCoF yGHFwEj2OhqpAGw+GJMHR6aHo5YIJOAqydoZR8Ze5jUeD5oVcFx5o84qSNJ8m078 apFaUimMBv5RHIHk6K/8Gnif7Xzb/IQxwodfSkRAyY7KEi2U1pFaK/e2TZus3ecN AbxkkufU+N4wOFIpND/l5qWfuIoH91zUMpnZeS5gyo3lSQ6GSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFM79WRZPPeFUKVG3cYWYmo4oewVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVmYjI5ZGMtMTdlMi0z OGY3LTlhYTgtNmFkZmExMDk0YjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+TVPJ3nJMxfU4o5ct7Z+shaCniCGptKt3DVpuU1P454ujFYEpBSwSw qf+BXZfGrS+4W6qFcQnW9NzBZF63TyuXLeby2xktBXWtd/UKYmRreYdShKEw8kZU IRwsWHGEWABQXrbu+VcLuAnRIURfeQmZuM6vaGC1YOghvd+AziPJYYGNAhXUcQbb pg4xL6zq3sxnUplgt+LtkK16zfRqkBPknb1PX2twqffo+dgnSBWWxNJ+99wrszgf joX1fdBzgE+MmPWiI81nD7B0T9txd/ME1z+8cdVSK7+9rEgJXE0wCAGm439h7Yqo or/RAoNUpOrESfMPKuwGHPVDkRo5LAo= -----END CERTIFICATE-----Generated at Thu Mar 12 03:41:21 2026 by rpki-client