$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d62f04d6-6ad1-3312-9e34-748c87b458da.roa File: d62f04d6-6ad1-3312-9e34-748c87b458da.roa (raw, json) Hash identifier: 5jWg8VM1s9KgWYANhsuLf48m6KOgMuC/NMlrrXd/cdQ= Subject key identifier: 00:44:03:B0:73:CB:60:6E:9B:04:C2:CF:82:E2:E0:A2:0F:0D:30:FD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2379FCDE6959603E34CA8D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d62f04d6-6ad1-3312-9e34-748c87b458da.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.28.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:fc:de:69:59:60:3e:34:ca:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=1a2cc97a-d110-4a5a-8f73-4c9e1c18de2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:cb:0e:64:e1:39:ed:34:5b:2c:fc:88:c5: d2:3d:37:ee:b4:08:ce:3f:f1:14:1c:ea:f2:6a:34: f7:73:2e:99:41:16:fa:5c:ad:82:e2:9e:8d:99:b3: 08:c6:c3:5f:c4:66:65:e8:85:88:c9:09:08:bd:0d: 64:87:6d:00:79:d7:ed:00:07:93:b5:15:a7:1e:cb: 7e:ab:88:6a:3e:2c:47:8d:79:4c:4d:9e:05:9a:3e: 1a:6d:7b:88:0c:0d:54:58:19:18:4a:7c:68:a0:cd: 85:af:03:51:d0:34:33:b3:45:1a:7b:56:ba:07:90: 99:13:d1:13:aa:fa:0e:da:77:39:84:13:75:20:46: 85:c7:81:c2:8f:80:eb:34:7d:eb:44:8d:87:b3:84: 44:89:cb:23:3f:20:77:2d:02:07:a4:30:78:f9:f4: ae:49:f2:a8:82:82:86:1f:99:10:30:93:27:fd:8b: c3:9f:b5:0d:4c:a3:0d:0b:28:c3:49:02:37:0c:fb: 7a:25:a7:2d:eb:1c:39:6a:10:12:d8:10:95:48:5d: 37:1a:7f:61:1f:5b:eb:cb:b0:07:b0:f3:35:14:4a: da:18:fa:6e:4a:89:80:27:1d:05:bc:66:e2:47:65: 93:09:f0:00:1c:01:84:fb:1b:b9:92:2f:57:f0:b2: 56:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:44:03:B0:73:CB:60:6E:9B:04:C2:CF:82:E2:E0:A2:0F:0D:30:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d62f04d6-6ad1-3312-9e34-748c87b458da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:6e:12:95:18:3f:d7:1d:93:70:fc:58:e9:9e:ba:84:1d:d2: b1:43:97:35:fe:62:56:bd:48:87:71:29:ca:fe:02:85:31:a0: 11:20:9f:e5:38:3f:33:63:fa:95:59:59:96:30:fa:72:63:44: 84:8a:7f:b5:61:fd:79:ff:54:cd:37:33:73:36:9f:e5:10:5a: 0b:0f:0a:b3:b1:13:77:13:07:b1:80:c5:bf:19:1a:33:96:f4: a2:e4:65:d1:9f:54:50:88:69:76:74:e8:73:2b:12:2f:87:4b: bd:e5:55:78:23:e4:03:52:39:dd:d1:6e:e4:ee:6c:7f:4f:df: ad:4c:20:87:37:3f:3c:40:65:0f:90:3f:19:08:54:22:2f:7d: 58:fc:1a:48:52:13:29:c4:9d:e7:59:42:e4:9d:c3:b5:9d:36: 16:ae:35:51:17:3f:cf:fe:ef:eb:2e:60:67:55:64:4f:a6:e1: af:e8:2c:1b:bf:95:cd:b1:8c:41:d3:3d:3f:75:2e:09:42:84: c7:4f:19:13:a2:83:55:98:7d:6a:4a:f1:c6:1a:c3:3a:0a:a9: a9:5c:09:99:ba:6d:75:70:00:95:e1:9a:94:f5:87:a5:6b:f5: 32:40:42:51:16:ca:85:f5:4a:d8:40:22:88:cd:d6:53:34:7c: e3:9c:81:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefzeaVlgPjTKjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MWEyY2M5N2EtZDExMC00YTVhLThmNzMtNGM5ZTFjMThkZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcXLDmThOe00Wyz8iMXSPTfutAjOP/EUHOry ajT3cy6ZQRb6XK2C4p6NmbMIxsNfxGZl6IWIyQkIvQ1kh20AedftAAeTtRWnHst+ q4hqPixHjXlMTZ4Fmj4abXuIDA1UWBkYSnxooM2FrwNR0DQzs0Uae1a6B5CZE9ET qvoO2nc5hBN1IEaFx4HCj4DrNH3rRI2Hs4REicsjPyB3LQIHpDB4+fSuSfKogoKG H5kQMJMn/YvDn7UNTKMNCyjDSQI3DPt6Jact6xw5ahAS2BCVSF03Gn9hH1vry7AH sPM1FEraGPpuSomAJx0FvGbiR2WTCfAAHAGE+xu5ki9X8LJWfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABEA7Bzy2BumwTCz4Li4KIPDTD9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDYyZjA0ZDYtNmFkMS0z MzEyLTllMzQtNzQ4Yzg3YjQ1OGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRy2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVuEpUYP9cdk3D8WOmeuoQd0rFDlzX+Yla9SIdxKcr+AoUxoBEgn+U4 PzNj+pVZWZYw+nJjRISKf7Vh/Xn/VM03M3M2n+UQWgsPCrOxE3cTB7GAxb8ZGjOW 9KLkZdGfVFCIaXZ06HMrEi+HS73lVXgj5ANSOd3RbuTubH9P361MIIc3PzxAZQ+Q PxkIVCIvfVj8GkhSEynEnedZQuSdw7WdNhauNVEXP8/+7+suYGdVZE+m4a/oLBu/ lc2xjEHTPT91LglChMdPGROig1WYfWpK8cYawzoKqalcCZm6bXVwAJXhmpT1h6Vr 9TJAQlEWyoX1SthAIojN1lM0fOOcgbQ= -----END CERTIFICATE-----Generated at Thu Mar 12 03:44:09 2026 by rpki-client