$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb27664d-fc5f-35c9-9f09-952ca477db81.roa File: bb27664d-fc5f-35c9-9f09-952ca477db81.roa (raw, json) Hash identifier: qDE1sxnA6yxJV1s3vxshVtGrEOo6vf+g6e5aPw1a1Cg= Subject key identifier: F3:B2:52:F7:9D:9E:F9:B2:95:C3:7D:4A:87:B8:73:BD:5F:83:16:0D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A06BFD0C33B4D6B098A58 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb27664d-fc5f-35c9-9f09-952ca477db81.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.21.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:06:bf:d0:c3:3b:4d:6b:09:8a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=96946de0-4b6b-46c6-9212-339ebd0e03cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a1:cd:5d:bd:81:29:2c:d5:09:46:46:f6:9d: 76:ce:19:4e:18:72:3f:ac:ba:c0:dc:8e:33:df:b8: a3:8e:64:42:c9:63:ea:a4:23:0a:2e:4c:81:50:32: 7d:fa:8c:af:9e:d4:af:c9:70:ff:c5:16:e9:72:bd: fa:82:99:ef:ce:c5:2b:bb:49:ee:ae:e3:93:7a:4e: ea:17:33:1f:46:56:71:13:c9:2d:bb:be:97:0e:2b: 85:31:d2:ca:de:07:62:d4:a8:5a:f9:8b:bd:6e:34: 64:5a:ec:41:84:26:64:5e:b8:4d:22:3c:9d:63:f0: 69:23:8a:ee:e4:f0:93:cd:49:a7:fa:9e:85:87:5e: 0e:43:b7:24:be:e2:ad:62:c2:59:83:3d:fd:21:ec: fb:a8:66:e1:3f:b9:be:57:b8:cd:87:28:25:cc:5d: d0:eb:55:79:21:c9:ac:a0:46:bb:a0:6e:89:34:fa: 79:b4:c8:61:ca:84:99:38:7a:31:35:a3:74:ef:c7: d1:bb:ee:29:ec:12:eb:ba:e6:3c:e2:4f:55:1f:d5: 32:36:0d:89:15:12:d1:05:45:76:07:5b:bb:c9:34: e4:db:fd:51:32:51:fd:c8:85:46:04:67:b1:54:1e: 4e:92:4c:c8:71:bb:e9:8d:f9:67:b3:ba:2c:c7:88: 12:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B2:52:F7:9D:9E:F9:B2:95:C3:7D:4A:87:B8:73:BD:5F:83:16:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb27664d-fc5f-35c9-9f09-952ca477db81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7a:e6:05:7f:c6:70:1f:4a:20:33:e1:fc:b0:b5:0c:39:90: c7:d6:07:b2:42:2f:25:45:fd:3f:0b:64:d8:4a:14:c0:18:74: cd:60:6c:b8:3b:16:76:d0:20:00:4c:8a:ff:d4:ee:f6:27:53: d6:62:84:d2:71:31:23:ca:1f:1d:98:fc:f3:14:a1:25:72:be: 19:98:ee:78:56:27:21:e0:53:82:16:78:6a:fe:0a:ad:1d:b4: ad:3a:e9:24:ee:80:80:ad:81:b9:15:5d:92:bc:0c:d8:f1:1f: 9f:67:bb:bb:40:8a:71:52:b6:63:4f:7b:0b:27:05:1e:47:35: 77:1e:53:41:2d:be:73:93:26:14:e6:83:e4:9e:7b:8d:3b:11: 69:db:4d:f6:53:d1:53:9e:86:91:10:12:c5:13:85:aa:4d:2c: d0:0c:b8:2c:c1:0b:94:0c:02:55:85:1f:b2:72:76:c9:21:8f: 3e:5c:73:66:ce:4e:3f:a3:52:1f:6c:72:f7:ee:04:d6:94:ad: 17:b9:df:e1:53:01:97:45:74:ec:9c:37:c8:35:87:25:5a:92: 92:31:01:05:f3:bd:fd:5c:d6:86:d0:54:a4:1a:de:24:36:54: f7:c3:14:21:9e:bd:5f:55:57:fe:61:72:d1:72:fd:38:cb:a2: 17:e9:71:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jega/0MM7TWsJilgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OTY5NDZkZTAtNGI2Yi00NmM2LTkyMTItMzM5ZWJkMGUwM2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKHNXb2BKSzVCUZG9p12zhlOGHI/rLrA3I4z 37ijjmRCyWPqpCMKLkyBUDJ9+oyvntSvyXD/xRbpcr36gpnvzsUru0nuruOTek7q FzMfRlZxE8ktu76XDiuFMdLK3gdi1Kha+Yu9bjRkWuxBhCZkXrhNIjydY/BpI4ru 5PCTzUmn+p6Fh14OQ7ckvuKtYsJZgz39Iez7qGbhP7m+V7jNhyglzF3Q61V5Icms oEa7oG6JNPp5tMhhyoSZOHoxNaN078fRu+4p7BLruuY84k9VH9UyNg2JFRLRBUV2 B1u7yTTk2/1RMlH9yIVGBGexVB5OkkzIcbvpjflns7osx4gSkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOyUvednvmylcN9Soe4c71fgxYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmIyNzY2NGQtZmM1Zi0z NWM5LTlmMDktOTUyY2E0NzdkYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp65gV/xnAfSiAz4fywtQw5kMfWB7JCLyVF/T8LZNhKFMAYdM1gbLg7 FnbQIABMiv/U7vYnU9ZihNJxMSPKHx2Y/PMUoSVyvhmY7nhWJyHgU4IWeGr+Cq0d tK066STugICtgbkVXZK8DNjxH59nu7tAinFStmNPewsnBR5HNXceU0EtvnOTJhTm g+See407EWnbTfZT0VOehpEQEsUThapNLNAMuCzBC5QMAlWFH7Jydskhjz5cc2bO Tj+jUh9scvfuBNaUrRe53+FTAZdFdOycN8g1hyVakpIxAQXzvf1c1obQVKQa3iQ2 VPfDFCGevV9VV/5hctFy/TjLohfpcVs= -----END CERTIFICATE-----Generated at Thu Mar 12 03:45:01 2026 by rpki-client