$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2081ccd-8130-3a5c-83d4-ae30c1ae4b5c.roa File: a2081ccd-8130-3a5c-83d4-ae30c1ae4b5c.roa (raw, json) Hash identifier: VSoY3rqeSkGgDykNG3DiYxox2eY1NEQXBLfqNggZ2to= Subject key identifier: 6B:F2:76:BF:42:E8:F9:C5:CF:D8:5A:82:F6:38:1A:19:12:C6:1C:FA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A43A507A8909082A0D680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2081ccd-8130-3a5c-83d4-ae30c1ae4b5c.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.21.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:43:a5:07:a8:90:90:82:a0:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=f3a41553-250c-43b3-917e-e2430ccf4dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:25:cb:20:d5:fb:8d:f5:d3:43:3a:29:fa:15: 5b:85:f3:a5:84:f6:bf:61:eb:54:8e:b9:fa:9f:50: 05:73:ea:d2:0f:fe:07:43:da:01:e6:0d:c2:42:5f: b0:a3:68:df:9a:75:8c:d8:71:34:f9:4b:39:a6:c7: f9:69:90:14:98:e1:5d:e8:e9:97:ea:7c:a6:22:0d: 99:d7:ec:8c:53:dc:43:65:04:42:bc:33:ac:88:52: fc:2d:fa:09:36:22:74:c3:29:63:2f:a0:fd:59:8b: 26:89:fe:dd:b1:58:ea:90:b0:22:38:66:ee:5d:d8: 9c:d9:83:50:93:c6:5f:f1:86:1e:1c:99:5c:5a:25: 26:32:8c:f9:c2:6f:ab:82:99:1c:06:06:30:63:e2: 6c:68:dc:eb:9c:c0:ac:bc:90:7b:59:28:ee:78:e0: de:36:f6:15:7a:b6:e0:b4:94:9e:78:ed:2c:3e:46: e9:25:b8:61:bf:1c:d6:52:d9:0f:27:bf:b7:70:45: 84:51:7f:7b:7c:14:2f:a7:8d:c1:c5:20:ef:f8:29: b5:f3:1e:1e:c1:9c:dd:f2:b4:89:1f:c7:57:ad:b0: af:36:09:0a:ea:4d:6b:cf:6c:74:00:88:8f:46:fa: 6e:f8:e9:6c:6c:09:c6:80:23:d6:e8:a3:17:23:41: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F2:76:BF:42:E8:F9:C5:CF:D8:5A:82:F6:38:1A:19:12:C6:1C:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a2081ccd-8130-3a5c-83d4-ae30c1ae4b5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:7d:03:2a:0c:4b:68:1a:69:ec:d3:5a:4a:9c:32:31:9f:27: 5a:c3:5b:95:97:07:c0:de:ad:ed:d5:28:f7:b0:f9:44:bd:62: 5b:18:02:4c:89:3e:fd:a7:4f:ae:5b:ce:a4:73:39:5c:70:83: 58:90:c7:c5:73:cf:9e:6a:82:e1:e2:84:c4:b9:23:21:c5:5a: b1:04:39:c4:3f:03:c1:1a:7e:c5:01:3f:41:df:d5:43:fd:b5: a1:1a:9b:fa:11:d2:33:39:99:14:0f:e1:4e:89:3e:25:1e:65: e2:c6:91:d4:c3:33:c6:be:ef:23:6c:a9:ea:89:06:2c:95:f7: 85:56:77:f0:b0:6c:19:d5:ba:7d:29:97:dd:c5:8f:8f:dd:26: e9:31:57:15:85:d4:c7:c6:6b:d8:66:f3:67:f5:ef:98:6a:84: c1:3e:6f:99:84:e0:da:01:61:0c:51:df:4f:8c:39:4e:9c:e4: 0d:e8:ac:fb:94:5d:f7:56:10:e2:d8:a5:ac:fd:81:c7:17:94: 7f:c3:61:75:3c:c7:7a:d1:ca:ff:df:33:e4:d9:80:08:55:a9: 9f:4b:75:4a:41:8f:44:a8:89:15:71:71:88:f0:b6:b8:a9:06: 08:44:7c:87:d6:86:f7:31:49:ec:e9:36:8a:f3:85:fa:30:9a: 01:7d:4f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekOlB6iQkIKg1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZjNhNDE1NTMtMjUwYy00M2IzLTkxN2UtZTI0MzBjY2Y0ZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyXLINX7jfXTQzop+hVbhfOlhPa/YetUjrn6 n1AFc+rSD/4HQ9oB5g3CQl+wo2jfmnWM2HE0+Us5psf5aZAUmOFd6OmX6nymIg2Z 1+yMU9xDZQRCvDOsiFL8LfoJNiJ0wyljL6D9WYsmif7dsVjqkLAiOGbuXdic2YNQ k8Zf8YYeHJlcWiUmMoz5wm+rgpkcBgYwY+JsaNzrnMCsvJB7WSjueODeNvYVerbg tJSeeO0sPkbpJbhhvxzWUtkPJ7+3cEWEUX97fBQvp43BxSDv+Cm18x4ewZzd8rSJ H8dXrbCvNgkK6k1rz2x0AIiPRvpu+OlsbAnGgCPW6KMXI0GYaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvydr9C6PnFz9hagvY4GhkSxhz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIwODFjY2QtODEzMC0z YTVjLTgzZDQtYWUzMGMxYWU0YjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEl9AyoMS2gaaezTWkqcMjGfJ1rDW5WXB8Dere3VKPew+US9YlsYAkyJ Pv2nT65bzqRzOVxwg1iQx8Vzz55qguHihMS5IyHFWrEEOcQ/A8EafsUBP0Hf1UP9 taEam/oR0jM5mRQP4U6JPiUeZeLGkdTDM8a+7yNsqeqJBiyV94VWd/CwbBnVun0p l93Fj4/dJukxVxWF1MfGa9hm82f175hqhME+b5mE4NoBYQxR30+MOU6c5A3orPuU XfdWEOLYpaz9gccXlH/DYXU8x3rRyv/fM+TZgAhVqZ9LdUpBj0SoiRVxcYjwtrip BghEfIfWhvcxSezpNorzhfowmgF9T8k= -----END CERTIFICATE-----Generated at Thu Mar 12 05:03:48 2026 by rpki-client