$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/959a8cc1-4b38-31a2-89a4-fe6a484542e4.roa File: 959a8cc1-4b38-31a2-89a4-fe6a484542e4.roa (raw, json) Hash identifier: CUPb4B195TTS4AAKJX89OeBSK7ndrLSrO9Zz6UlKak0= Subject key identifier: 93:5A:D4:7D:55:1E:C0:88:86:D6:55:03:89:B2:9F:69:ED:0F:AE:3E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A5278D4FCA3ECB442C7C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/959a8cc1-4b38-31a2-89a4-fe6a484542e4.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.29.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:52:78:d4:fc:a3:ec:b4:42:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=15e3d4f2-a1ca-4374-a821-19a807969466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:ce:b7:fb:66:10:7f:5c:34:f6:9f:77:61: 90:90:25:eb:08:b0:27:86:f0:e3:2e:fc:ba:1b:4e: b0:64:bd:d9:c8:f5:97:9e:8b:98:cd:67:22:6c:27: 00:5b:e8:46:ef:0d:ef:63:35:c6:94:e5:c2:c5:c8: bd:2d:c9:06:4b:96:00:38:3e:f1:af:c5:fa:c8:f5: d5:ab:a2:d8:1e:7d:61:44:82:7d:ac:fe:39:d0:18: 1e:75:1b:6d:03:3b:55:2d:56:1e:bd:a9:d3:5a:fb: b4:7c:2a:b7:ed:73:27:28:36:09:14:09:e5:3a:34: 50:ef:75:07:f8:6e:8c:52:ee:9e:bd:c8:c3:4b:b9: 95:3a:3e:6a:0e:63:51:af:c3:d2:11:72:9a:33:75: 19:e5:6b:f7:f6:22:54:b2:17:b6:3b:e1:2d:8b:4c: e2:1c:26:6a:f1:eb:61:e7:4f:af:c0:bc:82:0e:89: 51:06:4f:d7:2e:7d:44:b9:0b:d5:aa:98:eb:64:b3: c8:6a:fe:bf:90:14:fe:d1:a2:76:bc:97:46:5e:1b: 91:3e:a2:f1:c9:a8:de:38:cb:1b:93:96:28:6a:18: fa:2f:58:34:89:0d:e7:78:8f:b6:ef:7e:2f:26:c3: 5d:0d:03:fa:0a:19:a5:cc:fd:dd:06:0e:f4:40:32: 02:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5A:D4:7D:55:1E:C0:88:86:D6:55:03:89:B2:9F:69:ED:0F:AE:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/959a8cc1-4b38-31a2-89a4-fe6a484542e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c6:c3:3f:60:dc:03:ca:e5:a6:d4:9a:f8:52:c9:14:7d:e9: 3d:aa:4f:2b:6b:29:f5:f8:8e:11:d6:0c:12:a6:32:7a:8b:a4: 0c:25:60:c8:a0:22:b4:d4:8f:0e:8a:aa:82:89:4e:18:2e:1d: 85:57:1c:ad:03:f8:f9:a3:ec:3c:e8:ce:2e:c2:01:cf:02:49: 6f:a4:29:f9:23:f2:20:c5:57:ca:76:99:93:de:e6:9f:63:e2: 6e:a2:92:18:67:3e:a8:3e:d4:47:49:1c:e5:4d:c5:4b:79:75: a0:7a:15:52:56:e7:00:4c:69:0d:18:55:a8:7e:e8:14:ea:00: df:15:1b:01:20:9f:6f:2b:fd:fc:e8:bf:7c:13:8d:64:51:7f: b4:af:43:59:46:bb:6e:4b:68:6a:08:31:1f:bb:21:52:f3:42: b9:62:ff:e2:3f:97:a2:4f:54:54:38:9c:6e:d5:a6:aa:64:62: 03:c2:fb:75:5d:69:72:cb:93:b0:b5:eb:b9:a2:2a:19:c5:b0: 99:40:eb:2f:68:9e:b1:b8:29:f6:28:c4:23:61:a3:79:11:11: 14:70:f0:f9:f7:75:15:fa:b3:76:65:1d:5a:2a:85:59:ad:62: d6:60:85:ad:21:93:ae:57:d0:71:1d:09:e7:df:0a:02:90:46: f4:ba:68:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelJ41Pyj7LRCx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MTVlM2Q0ZjItYTFjYS00Mzc0LWE4MjEtMTlhODA3OTY5NDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG7Ot/tmEH9cNPafd2GQkCXrCLAnhvDjLvy6 G06wZL3ZyPWXnouYzWcibCcAW+hG7w3vYzXGlOXCxci9LckGS5YAOD7xr8X6yPXV q6LYHn1hRIJ9rP450BgedRttAztVLVYevanTWvu0fCq37XMnKDYJFAnlOjRQ73UH +G6MUu6evcjDS7mVOj5qDmNRr8PSEXKaM3UZ5Wv39iJUshe2O+Eti0ziHCZq8eth 50+vwLyCDolRBk/XLn1EuQvVqpjrZLPIav6/kBT+0aJ2vJdGXhuRPqLxyajeOMsb k5Yoahj6L1g0iQ3neI+2734vJsNdDQP6ChmlzP3dBg70QDIC6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNa1H1VHsCIhtZVA4myn2ntD64+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTU5YThjYzEtNGIzOC0z MWEyLTg5YTQtZmU2YTQ4NDU0MmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDGwz9g3APK5abUmvhSyRR96T2qTytrKfX4jhHWDBKmMnqLpAwlYMig IrTUjw6KqoKJThguHYVXHK0D+Pmj7Dzozi7CAc8CSW+kKfkj8iDFV8p2mZPe5p9j 4m6ikhhnPqg+1EdJHOVNxUt5daB6FVJW5wBMaQ0YVah+6BTqAN8VGwEgn28r/fzo v3wTjWRRf7SvQ1lGu25LaGoIMR+7IVLzQrli/+I/l6JPVFQ4nG7VpqpkYgPC+3Vd aXLLk7C167miKhnFsJlA6y9onrG4KfYoxCNho3kRERRw8Pn3dRX6s3ZlHVoqhVmt YtZgha0hk65X0HEdCeffCgKQRvS6aLY= -----END CERTIFICATE-----Generated at Thu Mar 12 03:41:13 2026 by rpki-client