$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc58cf11-5289-327d-ba41-3e1669ac141f.roa File: fc58cf11-5289-327d-ba41-3e1669ac141f.roa (raw, json) Hash identifier: lXrnpr/fzyaPTQ1Bc9cnaTKETUeVy74Iys+8lWIAx3M= Subject key identifier: FA:AE:EC:56:3D:03:59:46:8B:77:2A:8B:5B:DA:F4:78:9C:49:33:B4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D1707C82F883AC4D980806D40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc58cf11-5289-327d-ba41-3e1669ac141f.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 30036 IP address blocks: 173.21.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:c8:2f:88:3a:c4:d9:80:80:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=a96ac6f6-e455-48c1-b6c1-29b302159ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b1:d4:1b:a9:1f:bd:f0:9e:c7:71:dc:69:d2: 4e:5f:6d:0a:65:07:46:7e:68:f5:83:35:ba:e8:ac: a2:2e:2f:58:dc:33:fe:55:e8:5d:e9:91:23:0a:06: d9:9c:91:7d:70:94:ec:9e:80:50:46:b2:f7:8b:ca: e2:cd:a6:07:04:20:f7:e7:81:42:0b:63:a1:ee:c9: 52:75:9a:99:ee:0e:39:a2:bc:25:8a:1b:e0:5a:57: 64:f3:5f:cf:7f:48:8f:c1:20:32:bc:f1:10:75:22: 8b:6d:d1:be:46:1d:02:36:5e:90:82:15:c5:ad:0c: 81:5f:3b:5b:98:f3:88:61:a8:6c:29:87:6c:c1:24: c5:29:e5:ac:16:38:b4:30:92:1e:cf:9d:d7:c7:ad: 01:07:71:44:86:c7:c3:45:12:c6:6f:fb:63:10:93: 5e:7b:db:7e:4c:40:ce:fe:9a:7e:d9:53:7e:8f:06: 37:a6:21:4d:6c:be:18:df:e3:ee:6b:3d:cd:38:d9: 62:32:bc:e3:d3:c2:2a:fa:de:8d:8f:71:f4:49:39: 58:25:a5:cf:e1:c0:aa:36:4b:6d:07:ba:de:61:03: 29:23:fe:47:9d:1c:b6:95:c8:01:8e:38:e2:76:32: 1d:c5:0b:88:4b:82:6a:b4:e1:43:b6:9e:35:e4:c4: 8b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AE:EC:56:3D:03:59:46:8B:77:2A:8B:5B:DA:F4:78:9C:49:33:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc58cf11-5289-327d-ba41-3e1669ac141f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:43:e2:ff:db:47:f9:3b:1d:1d:e2:0f:f0:8f:53:71:f7:f5: 02:0f:d6:de:ca:db:b1:47:30:ab:78:13:ac:9a:f4:87:e7:9a: 4c:f3:3c:25:b7:68:97:1d:39:8f:17:3f:e2:b4:69:ca:d4:c9: b5:85:77:87:bb:e1:af:96:5c:c1:03:73:7c:66:01:52:cc:f5: 23:60:1d:be:81:c0:ed:cb:d2:48:aa:21:a7:c7:b0:65:67:29: a0:bc:eb:d8:59:d9:03:0a:10:4f:cc:87:a1:8d:a7:46:7e:57: ec:5f:1e:4e:04:ad:83:72:b0:eb:cc:52:5c:8a:80:29:fc:22: f5:4c:02:7b:11:c7:13:ec:9c:0d:bd:38:eb:7a:fa:ff:2d:41: 8d:a8:e7:90:7f:a7:5f:a7:3a:c8:58:55:a4:d4:f4:67:ad:04: 27:57:93:5a:bc:d4:f5:e6:f4:1d:d9:c0:0c:66:3e:5e:3d:e6: cc:68:3c:59:e5:61:56:e7:bc:02:84:cf:41:83:af:2d:2c:d3: e6:75:ef:03:f2:69:94:1a:a8:fc:32:2d:61:38:8b:ac:53:25: b4:00:80:b0:8a:e7:18:13:fb:37:20:af:a1:70:42:df:e1:5f: 1f:f7:0d:74:63:75:09:bc:37:9d:5f:fa:85:93:d1:8b:16:53: a7:d1:ae:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB8gviDrE2YCAbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk YTk2YWM2ZjYtZTQ1NS00OGMxLWI2YzEtMjliMzAyMTU5ZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibHUG6kfvfCex3HcadJOX20KZQdGfmj1gzW6 6KyiLi9Y3DP+Vehd6ZEjCgbZnJF9cJTsnoBQRrL3i8rizaYHBCD354FCC2Oh7slS dZqZ7g45orwlihvgWldk81/Pf0iPwSAyvPEQdSKLbdG+Rh0CNl6QghXFrQyBXztb mPOIYahsKYdswSTFKeWsFji0MJIez53Xx60BB3FEhsfDRRLGb/tjEJNee9t+TEDO /pp+2VN+jwY3piFNbL4Y3+Puaz3NONliMrzj08Iq+t6Nj3H0STlYJaXP4cCqNktt B7reYQMpI/5HnRy2lcgBjjjidjIdxQuIS4JqtOFDtp415MSLNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqu7FY9A1lGi3cqi1va9HicSTO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmM1OGNmMTEtNTI4OS0z MjdkLWJhNDEtM2UxNjY5YWMxNDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdD4v/bR/k7HR3iD/CPU3H39QIP1t7K27FHMKt4E6ya9IfnmkzzPCW3 aJcdOY8XP+K0acrUybWFd4e74a+WXMEDc3xmAVLM9SNgHb6BwO3L0kiqIafHsGVn KaC869hZ2QMKEE/Mh6GNp0Z+V+xfHk4ErYNysOvMUlyKgCn8IvVMAnsRxxPsnA29 OOt6+v8tQY2o55B/p1+nOshYVaTU9GetBCdXk1q81PXm9B3ZwAxmPl495sxoPFnl YVbnvAKEz0GDry0s0+Z17wPyaZQaqPwyLWE4i6xTJbQAgLCK5xgT+zcgr6FwQt/h Xx/3DXRjdQm8N51f+oWT0YsWU6fRriE= -----END CERTIFICATE-----Generated at Thu Mar 12 05:06:02 2026 by rpki-client