$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbac3622-d922-3d32-93c8-7b1c3832c248.roa File: cbac3622-d922-3d32-93c8-7b1c3832c248.roa (raw, json) Hash identifier: YkdlKh6BJVkNTII/b7oViHozjaHYg9VEFFNUAUl6GDg= Subject key identifier: 48:ED:0F:F5:B5:E2:8F:6A:D7:6C:8C:96:3C:16:76:D2:E3:7E:C4:C4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A5840334A1EE53E62529C Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbac3622-d922-3d32-93c8-7b1c3832c248.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.16.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:58:40:33:4a:1e:e5:3e:62:52:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=131f7047-c273-4efb-8e90-a0b3d3d5ab5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9c:c6:19:2b:af:3d:82:04:8a:68:8b:ee:fa: 6f:2e:c7:d0:41:6e:2c:9c:fc:c9:2a:81:19:e8:06: a1:0c:88:78:da:29:95:f3:27:d7:85:f6:99:70:36: 1d:6f:15:62:71:af:d6:d0:a7:71:33:91:91:d2:ac: 18:cd:cb:10:b8:13:ee:a8:65:7a:1c:31:9d:f9:7a: 6a:6e:11:3b:04:9b:69:76:66:63:2c:1f:d0:c8:98: b8:67:b6:9b:64:1d:fb:19:15:8b:9d:2e:3f:51:98: 00:e0:d0:76:2a:c5:60:a2:aa:27:77:4f:fe:d1:14: ef:b6:3b:99:b7:bb:a1:3b:49:c1:72:da:d5:61:f4: a3:e7:dd:40:38:7f:02:19:9b:72:6e:e3:89:db:a5: 7e:48:90:cd:b5:1a:41:e7:91:c1:0a:8f:ae:df:5d: a9:e8:a4:f5:1b:eb:d6:65:13:a9:a4:48:84:ec:cb: 49:a5:85:fa:06:0b:ec:2d:d9:c4:f6:3e:7a:b5:f2: d8:40:f5:7e:43:81:b3:e1:e5:60:20:5b:40:60:82: 61:09:fd:82:b9:6b:62:55:92:f2:24:17:35:83:bb: a9:31:12:79:2a:f4:24:6d:e1:b0:7f:11:2c:ff:ea: 6a:68:52:d7:65:7b:22:02:25:f7:3c:c4:19:aa:71: 85:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:ED:0F:F5:B5:E2:8F:6A:D7:6C:8C:96:3C:16:76:D2:E3:7E:C4:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbac3622-d922-3d32-93c8-7b1c3832c248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:2b:d6:be:48:e6:ba:ca:34:10:74:35:ad:fe:64:64:0f:79: d3:09:6a:c6:27:b5:a7:38:f7:43:af:59:da:90:98:18:23:60: c6:3b:7e:5f:76:69:3e:2d:45:29:77:da:4a:5e:6b:f6:dc:da: 6b:27:46:b6:4c:4b:c9:d4:71:4f:87:0f:f4:21:16:13:f3:05: 74:21:18:7f:29:a0:b1:d0:cc:e9:2a:ec:10:d5:0f:27:5b:32: 3c:1c:b7:7b:d0:de:6b:02:e0:05:48:1d:14:e8:41:96:95:9a: ae:fc:a0:da:58:42:f3:0d:4b:35:17:4d:83:7c:fa:32:86:41: cd:7b:96:dc:a2:1f:99:5d:92:2b:2c:27:3f:1f:0c:47:f3:a3: 05:bd:ba:58:68:3a:94:d2:a1:2f:6a:5a:55:83:9f:85:05:76: db:88:c4:97:ab:a8:34:19:35:17:d5:c4:53:6d:e6:b6:ee:7d: 02:21:e3:ae:18:ea:ad:f2:7b:97:d0:3c:f0:ff:c0:4f:5e:fc: dc:1e:89:e7:88:cf:9d:97:77:72:4f:65:50:e8:ac:05:54:f5: 88:17:29:84:b1:4b:b6:14:c9:cb:de:03:20:05:7b:76:9d:d8: 0a:b9:fd:94:4b:b0:c1:86:5d:da:ac:b8:3a:0e:32:b3:79:47: c7:63:1a:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jelhAM0oe5T5iUpwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MTMxZjcwNDctYzI3My00ZWZiLThlOTAtYTBiM2QzZDVhYjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5zGGSuvPYIEimiL7vpvLsfQQW4snPzJKoEZ 6AahDIh42imV8yfXhfaZcDYdbxVica/W0KdxM5GR0qwYzcsQuBPuqGV6HDGd+Xpq bhE7BJtpdmZjLB/QyJi4Z7abZB37GRWLnS4/UZgA4NB2KsVgoqond0/+0RTvtjuZ t7uhO0nBctrVYfSj591AOH8CGZtybuOJ26V+SJDNtRpB55HBCo+u312p6KT1G+vW ZROppEiE7MtJpYX6BgvsLdnE9j56tfLYQPV+Q4Gz4eVgIFtAYIJhCf2CuWtiVZLy JBc1g7upMRJ5KvQkbeGwfxEs/+pqaFLXZXsiAiX3PMQZqnGFCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjtD/W14o9q12yMljwWdtLjfsTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2JhYzM2MjItZDkyMi0z ZDMyLTkzYzgtN2IxYzM4MzJjMjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcr1r5I5rrKNBB0Na3+ZGQPedMJasYntac490OvWdqQmBgjYMY7fl92 aT4tRSl32kpea/bc2msnRrZMS8nUcU+HD/QhFhPzBXQhGH8poLHQzOkq7BDVDydb Mjwct3vQ3msC4AVIHRToQZaVmq78oNpYQvMNSzUXTYN8+jKGQc17ltyiH5ldkiss Jz8fDEfzowW9ulhoOpTSoS9qWlWDn4UFdtuIxJerqDQZNRfVxFNt5rbufQIh464Y 6q3ye5fQPPD/wE9e/NweieeIz52Xd3JPZVDorAVU9YgXKYSxS7YUycveAyAFe3ad 2Aq5/ZRLsMGGXdqsuDoOMrN5R8djGm8= -----END CERTIFICATE-----Generated at Thu Mar 12 03:44:26 2026 by rpki-client