$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5790fe-671f-3fb2-acc2-af37819929ac.roa File: 8e5790fe-671f-3fb2-acc2-af37819929ac.roa (raw, json) Hash identifier: 1/+xGVBRCiSuCBI91u0zgEpsygszWc4T7bap1eQgDfM= Subject key identifier: B3:FF:A1:CE:FC:A0:0E:ED:B4:E4:38:F3:0D:E8:84:F2:87:DA:36:F3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A462C4EC24E00B65B1480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5790fe-671f-3fb2-acc2-af37819929ac.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.17.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:46:2c:4e:c2:4e:00:b6:5b:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=6b286e89-8d21-42a3-b86b-06a1fba48f4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:14:70:54:26:20:36:22:5e:12:8e:ee:31:00: cc:08:a8:07:b8:81:01:ea:00:15:33:b2:2f:b1:c7: e0:29:89:77:09:bc:64:b5:49:1d:12:4d:93:6c:ae: 50:62:cc:9a:06:a6:b5:bf:a9:d8:b5:15:90:ff:9c: 50:d6:32:a8:f9:35:96:05:0c:18:36:32:c2:6c:f9: 3b:71:5e:ed:78:33:fb:c2:de:dc:08:0d:34:b8:21: 23:69:2f:74:05:db:38:13:94:88:78:c1:1c:c4:bf: 1c:77:53:54:c1:62:a8:9f:4a:4e:6f:25:50:df:6b: ea:03:b4:4a:67:f2:89:2f:09:76:12:df:98:e5:d0: d8:e8:98:3e:0e:6e:4d:c8:ab:cc:77:f8:7b:73:c7: 2e:de:16:3e:e3:15:c0:a4:0c:1e:0c:41:0b:48:cb: 39:80:0d:f0:c7:3c:ec:1b:4e:fa:67:f2:90:aa:bd: a8:f4:45:9d:50:31:00:c5:67:53:b5:ba:26:dd:4f: 9f:cd:1e:d1:9a:52:50:23:10:7f:42:5f:66:05:4e: 04:3c:b6:6f:cb:b4:7e:ff:65:67:24:49:5f:64:3f: 8f:f3:cd:bf:60:27:c7:40:58:80:e1:8f:67:0d:1f: 4b:48:0b:c2:bb:68:48:2f:ba:1f:be:39:49:4e:ad: b5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FF:A1:CE:FC:A0:0E:ED:B4:E4:38:F3:0D:E8:84:F2:87:DA:36:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e5790fe-671f-3fb2-acc2-af37819929ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:20:a9:7f:92:58:f0:11:ed:d3:1d:71:fa:fa:8c:7a:f0:a2: 25:d2:ac:13:5e:c7:5b:3f:ce:1a:36:a6:77:d4:ce:44:6b:ac: 13:45:ac:ac:33:b1:11:25:07:c0:d6:c7:15:d9:7a:87:9e:d5: 94:74:d8:15:59:5e:d5:b6:57:aa:c6:ae:57:05:16:91:df:33: de:5e:c1:a7:1b:83:09:a1:bb:97:4c:27:b9:6c:7d:16:85:7a: 1a:09:3e:b1:1f:7d:d3:68:b1:b8:00:a6:8d:55:f4:22:b3:f2: 8a:31:b7:22:b9:f7:50:6b:e4:7c:b8:ff:73:76:ca:0f:5f:24: 33:72:55:b0:e0:15:08:c6:ab:a8:1f:cd:b3:13:b5:40:2b:41: 6c:d1:21:1d:24:48:54:f7:c9:5d:eb:94:a5:76:99:14:b3:bd: 85:a7:97:8f:31:3c:cc:18:b7:1e:1e:c2:1c:15:ba:bd:43:1e: 47:6f:f0:48:07:22:88:95:54:fb:42:26:9e:c6:94:2c:56:97: 73:66:3a:06:f7:27:3b:4a:c5:55:6e:44:62:15:54:8e:de:39: aa:bc:68:e0:cb:2e:91:6b:71:7d:7c:a1:91:b7:a4:53:9b:ca: 19:89:56:96:80:17:80:ce:6a:36:d6:ed:c4:e8:90:a4:5f:0f: 99:38:5d:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekYsTsJOALZbFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NmIyODZlODktOGQyMS00MmEzLWI4NmItMDZhMWZiYTQ4ZjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhRwVCYgNiJeEo7uMQDMCKgHuIEB6gAVM7Iv scfgKYl3CbxktUkdEk2TbK5QYsyaBqa1v6nYtRWQ/5xQ1jKo+TWWBQwYNjLCbPk7 cV7teDP7wt7cCA00uCEjaS90Bds4E5SIeMEcxL8cd1NUwWKon0pObyVQ32vqA7RK Z/KJLwl2Et+Y5dDY6Jg+Dm5NyKvMd/h7c8cu3hY+4xXApAweDEELSMs5gA3wxzzs G076Z/KQqr2o9EWdUDEAxWdTtbom3U+fzR7RmlJQIxB/Ql9mBU4EPLZvy7R+/2Vn JElfZD+P882/YCfHQFiA4Y9nDR9LSAvCu2hIL7ofvjlJTq21WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLP/oc78oA7ttOQ48w3ohPKH2jbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGU1NzkwZmUtNjcxZi0z ZmIyLWFjYzItYWYzNzgxOTkyOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIgqX+SWPAR7dMdcfr6jHrwoiXSrBNex1s/zho2pnfUzkRrrBNFrKwz sRElB8DWxxXZeoee1ZR02BVZXtW2V6rGrlcFFpHfM95ewacbgwmhu5dMJ7lsfRaF ehoJPrEffdNosbgApo1V9CKz8ooxtyK591Br5Hy4/3N2yg9fJDNyVbDgFQjGq6gf zbMTtUArQWzRIR0kSFT3yV3rlKV2mRSzvYWnl48xPMwYtx4ewhwVur1DHkdv8EgH IoiVVPtCJp7GlCxWl3NmOgb3JztKxVVuRGIVVI7eOaq8aODLLpFrcX18oZG3pFOb yhmJVpaAF4DOajbW7cTokKRfD5k4XQQ= -----END CERTIFICATE-----Generated at Thu Mar 12 03:44:38 2026 by rpki-client