$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/068781a8-e032-3979-adfe-4399056a3136.roa File: 068781a8-e032-3979-adfe-4399056a3136.roa (raw, json) Hash identifier: KIeJNuOh+eeHIzvo4wJqTnVQMQYZ+6fF8hKMnTVan+g= Subject key identifier: F4:81:BB:77:9E:88:CF:6A:4C:F1:98:F4:C6:D3:95:EE:3D:A3:E2:9E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CAA2710CF7017BC5958E2D080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/068781a8-e032-3979-adfe-4399056a3136.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 30036 IP address blocks: 173.28.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:10:cf:70:17:bc:59:58:e2:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=99d8c7da-831e-4e04-91c2-b8d29f6ab4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:23:75:83:e8:12:02:38:34:8a:f6:4a:95: 55:f0:7d:24:b6:3d:da:53:6c:a3:45:54:d9:c1:27: 27:16:fc:3b:1c:52:73:c5:97:af:6e:11:07:cb:76: bb:59:9e:41:9f:90:87:f8:7e:1e:df:f9:c3:0a:e6: 12:84:8d:20:a0:d2:c3:0c:28:31:91:39:ea:a9:eb: f1:3b:ae:dd:11:44:38:f7:4c:be:b2:f4:9f:96:a7: 7a:aa:e4:fa:3d:39:04:84:39:35:40:1a:e7:f1:79: 2a:f0:50:9c:db:50:4f:5e:69:a6:7a:9d:04:3b:e9: bf:11:c9:55:ad:51:78:57:59:e7:51:c8:52:07:97: a6:a8:ec:e0:c4:aa:f5:c7:0a:08:31:d0:39:fd:48: c5:b0:a7:9f:57:0e:34:f0:d5:0f:89:fd:09:21:fc: b6:ea:c4:c0:97:ad:1a:57:9a:5c:0e:d1:e2:1b:3b: 42:6b:5a:9b:15:a0:20:f7:77:a4:dc:1c:c8:9b:3d: b6:c7:d1:04:6b:d6:d9:d0:57:5b:2d:dc:dc:a4:0b: 8a:54:10:c6:e9:ed:f9:b3:32:ba:4a:fa:0d:e3:3f: 71:2c:a3:07:d3:26:db:93:05:e2:3f:2a:a6:aa:20: 5d:77:18:e1:1d:56:45:89:71:71:d7:f6:99:41:43: 3a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:81:BB:77:9E:88:CF:6A:4C:F1:98:F4:C6:D3:95:EE:3D:A3:E2:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/068781a8-e032-3979-adfe-4399056a3136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:d2:9a:bc:3f:78:0e:a2:74:0a:c1:58:18:ad:1c:7f:4e:b3: 0a:4d:c3:6e:ba:46:e4:24:0e:dc:bc:65:91:8d:57:4f:24:a7: 49:2c:cb:8f:cd:50:1a:93:40:dc:b9:9c:4a:89:db:dd:ec:ef: e4:c6:a2:17:bc:96:ca:56:73:56:81:12:6f:09:b7:3d:a4:14: a2:e4:5e:25:48:1f:b1:34:7c:34:2c:4a:5e:7b:28:a4:00:4d: 7f:e1:03:99:ba:6b:90:20:dd:e1:8a:c1:99:fa:67:c3:0c:74: 4b:8f:ff:df:2f:6c:14:e8:7e:e3:01:2a:6b:24:85:71:30:15: 3e:5d:ab:60:64:0e:70:89:bb:21:24:25:3f:ae:3b:8a:15:2f: df:17:9c:fb:eb:83:99:f9:76:e7:91:14:5e:a6:81:f7:38:60: 0b:e7:01:ab:fa:c3:14:fe:6e:af:e0:7f:a6:d7:8c:c4:77:fa: 68:f1:10:e1:34:cb:38:f9:51:e5:d4:c4:9d:3e:6a:80:7f:0a: e2:d7:0a:b9:b7:c2:05:0c:c7:71:5f:29:ea:4f:42:9b:6d:4f: bc:c6:e2:dd:c5:c9:11:d5:e4:7e:14:d0:05:1b:58:15:6f:ab: 18:b2:8b:b5:bf:7e:94:22:36:9d:9f:9a:c1:f0:ce:29:cb:75: 9e:b3:d4:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJxDPcBe8WVji0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk OTlkOGM3ZGEtODMxZS00ZTA0LTkxYzItYjhkMjlmNmFiNGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl4jdYPoEgI4NIr2SpVV8H0ktj3aU2yjRVTZ wScnFvw7HFJzxZevbhEHy3a7WZ5Bn5CH+H4e3/nDCuYShI0goNLDDCgxkTnqqevx O67dEUQ490y+svSflqd6quT6PTkEhDk1QBrn8Xkq8FCc21BPXmmmep0EO+m/EclV rVF4V1nnUchSB5emqOzgxKr1xwoIMdA5/UjFsKefVw408NUPif0JIfy26sTAl60a V5pcDtHiGztCa1qbFaAg93ek3BzImz22x9EEa9bZ0FdbLdzcpAuKVBDG6e35szK6 SvoN4z9xLKMH0ybbkwXiPyqmqiBddxjhHVZFiXFx1/aZQUM6owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSBu3eeiM9qTPGY9MbTle49o+KeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDY4NzgxYTgtZTAzMi0z OTc5LWFkZmUtNDM5OTA1NmEzMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXSmrw/eA6idArBWBitHH9OswpNw266RuQkDty8ZZGNV08kp0ksy4/N UBqTQNy5nEqJ293s7+TGohe8lspWc1aBEm8Jtz2kFKLkXiVIH7E0fDQsSl57KKQA TX/hA5m6a5Ag3eGKwZn6Z8MMdEuP/98vbBTofuMBKmskhXEwFT5dq2BkDnCJuyEk JT+uO4oVL98XnPvrg5n5dueRFF6mgfc4YAvnAav6wxT+bq/gf6bXjMR3+mjxEOE0 yzj5UeXUxJ0+aoB/CuLXCrm3wgUMx3FfKepPQpttT7zG4t3FyRHV5H4U0AUbWBVv qxiyi7W/fpQiNp2fmsHwzinLdZ6z1OI= -----END CERTIFICATE-----Generated at Mon Mar 2 00:51:47 2026 by rpki-client