$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8ababeb-ab54-310a-b25c-b4c1534fd57f.roa File: a8ababeb-ab54-310a-b25c-b4c1534fd57f.roa (raw, json) Hash identifier: DuNt+egzKbQSO+e/U/Gr/a+3E2zE7rLPF5DrRqwHdGk= Subject key identifier: 95:C3:A6:2A:64:A3:22:8A:60:BD:0F:12:A4:2D:77:18:60:E7:A4:F0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2379F3C83EB50A5F5971FB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8ababeb-ab54-310a-b25c-b4c1534fd57f.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.22.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f3:c8:3e:b5:0a:5f:59:71:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=a3bb8dc8-6a8d-4053-8cda-b762f7a43bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:01:34:74:3d:1e:16:00:bf:5e:d9:01:59:c6: d1:83:47:cb:5b:64:70:eb:30:1e:2a:62:ca:87:53: 8b:d6:15:76:a6:26:1c:e9:9f:2a:bf:b3:8c:44:1e: 12:50:2f:3e:b9:0a:21:49:04:13:77:26:8a:98:74: 7f:8e:10:24:a6:d0:28:aa:5b:73:17:70:eb:da:74: 12:73:26:97:f5:ec:f1:38:80:bc:77:86:d2:1d:ab: fc:ef:24:eb:70:b2:0e:b4:3b:0f:bf:36:83:a8:cb: 2f:d8:97:fe:d4:e7:28:76:6b:54:4e:e9:20:47:96: 3a:1e:42:3c:53:2d:24:c1:49:3f:c1:23:1d:9a:f1: 77:5e:35:90:f3:21:2a:91:4e:7e:63:8c:49:f6:f3: bc:e5:0d:ad:cc:af:53:29:2c:02:0e:b5:d5:cd:cd: 03:1b:fb:ce:9a:f2:93:bd:6a:3b:d5:47:d0:28:d0: 2d:d8:47:31:7e:8c:1f:c2:5f:50:42:38:ab:cd:b1: 43:10:3e:a7:aa:f2:81:ea:6f:bc:cf:e3:ab:e1:3a: 4a:e1:34:3a:f5:37:12:cd:e1:2d:a8:32:fb:45:c7: 6c:6a:45:2c:f1:ba:96:df:d1:39:a4:2b:6b:cf:f4: f2:59:8e:00:e4:ce:0f:6d:d5:3b:f6:b9:c6:8f:48: 2e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C3:A6:2A:64:A3:22:8A:60:BD:0F:12:A4:2D:77:18:60:E7:A4:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8ababeb-ab54-310a-b25c-b4c1534fd57f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:71:e9:72:2c:6d:2c:0d:d5:5a:5c:d1:33:38:13:b5:66:a4: 6b:bd:1d:0d:76:f2:92:a6:b4:62:54:6a:6d:77:76:13:45:38: bb:64:08:3b:3c:a2:c7:20:ce:93:ce:f8:b5:a2:1e:91:90:4b: 83:78:cb:eb:5d:56:3f:0c:df:49:eb:23:96:07:6e:a2:0b:0a: a7:36:0e:d4:bd:9d:3a:eb:8e:6b:66:21:24:8b:c9:46:a1:4a: 1b:24:17:2a:90:80:92:36:b0:cd:bd:2d:a2:7d:e9:ae:96:4a: 0a:67:18:c6:5b:cc:af:75:61:d1:4f:ba:38:e4:7c:c1:99:2e: 99:f0:22:41:d5:e3:e5:24:2a:05:5f:77:a9:76:2d:11:a0:4d: f9:e0:83:5a:9a:d0:04:8b:70:e7:97:e9:71:05:92:fb:e8:82: 5c:2f:81:88:f5:9e:63:70:04:11:25:8b:89:5d:11:5f:e0:c6: b2:59:77:32:0f:6b:8f:2e:84:8a:63:b9:18:0b:fd:a9:b4:4e: ff:03:43:1c:d2:37:c5:b5:12:d5:38:2f:92:b5:ac:00:38:e6: b9:87:78:7c:40:9c:35:45:3f:17:c3:47:fd:38:f9:09:3e:33: 42:20:12:15:a6:5c:f7:2a:fa:5e:66:b6:7b:b4:a4:a9:19:5d: 69:1c:65:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefPIPrUKX1lx+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YTNiYjhkYzgtNmE4ZC00MDUzLThjZGEtYjc2MmY3YTQzYmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAE0dD0eFgC/XtkBWcbRg0fLW2Rw6zAeKmLK h1OL1hV2piYc6Z8qv7OMRB4SUC8+uQohSQQTdyaKmHR/jhAkptAoqltzF3Dr2nQS cyaX9ezxOIC8d4bSHav87yTrcLIOtDsPvzaDqMsv2Jf+1OcodmtUTukgR5Y6HkI8 Uy0kwUk/wSMdmvF3XjWQ8yEqkU5+Y4xJ9vO85Q2tzK9TKSwCDrXVzc0DG/vOmvKT vWo71UfQKNAt2Ecxfowfwl9QQjirzbFDED6nqvKB6m+8z+Or4TpK4TQ69TcSzeEt qDL7RcdsakUs8bqW39E5pCtrz/TyWY4A5M4PbdU79rnGj0gu8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXDpipkoyKKYL0PEqQtdxhg56TwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYThhYmFiZWItYWI1NC0z MTBhLWIyNWMtYjRjMTUzNGZkNTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxx6XIsbSwN1Vpc0TM4E7VmpGu9HQ128pKmtGJUam13dhNFOLtkCDs8 oscgzpPO+LWiHpGQS4N4y+tdVj8M30nrI5YHbqILCqc2DtS9nTrrjmtmISSLyUah ShskFyqQgJI2sM29LaJ96a6WSgpnGMZbzK91YdFPujjkfMGZLpnwIkHV4+UkKgVf d6l2LRGgTfngg1qa0ASLcOeX6XEFkvvoglwvgYj1nmNwBBEli4ldEV/gxrJZdzIP a48uhIpjuRgL/am0Tv8DQxzSN8W1EtU4L5K1rAA45rmHeHxAnDVFPxfDR/04+Qk+ M0IgEhWmXPcq+l5mtnu0pKkZXWkcZf4= -----END CERTIFICATE-----Generated at Thu Mar 12 03:44:43 2026 by rpki-client