$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/127cab6c-cfe0-3d58-af0b-af059f2f8361.roa File: 127cab6c-cfe0-3d58-af0b-af059f2f8361.roa (raw, json) Hash identifier: x7LMZWWfZ7qQwYq4v6Xs+SPVHScz8q7Og7wmLUa2akE= Subject key identifier: 0F:87:C0:0E:3F:DE:BF:BC:58:B3:6A:59:54:D9:61:CF:0A:0E:FC:D5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D65153B57F5D27F7C2B8E30C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/127cab6c-cfe0-3d58-af0b-af059f2f8361.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 30036 IP address blocks: 173.28.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:3b:57:f5:d2:7f:7c:2b:8e:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=39685d70-9fe2-49d2-b48d-0555cc872f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:62:3c:d2:17:ee:2f:91:d5:18:34:93:66:e7: 66:c2:06:b8:aa:5d:88:b2:4c:c7:54:f3:57:43:fc: 18:9e:1f:c1:43:89:2a:15:97:9a:43:62:fb:3d:aa: c9:d9:2f:3e:52:64:82:bc:79:b6:55:bd:cb:b4:fb: c9:4d:d0:de:95:6c:94:80:08:fb:79:eb:eb:62:b4: a6:4f:21:9e:08:21:ee:c2:f6:dc:dc:07:94:9e:fc: 9a:d6:0e:cd:4b:39:c9:59:2e:f3:a6:bf:0b:2f:02: f2:7f:96:c9:f9:c7:0f:e8:18:57:c3:9a:8c:1a:2b: e1:c6:b1:a4:af:95:a4:70:8a:18:2e:61:0f:e1:d1: 22:18:fb:4c:56:38:2a:d1:a6:f0:46:5a:ec:62:07: 33:a4:7a:87:aa:f8:f7:d3:7a:d0:6b:76:78:2c:5e: e4:99:42:d3:b0:56:35:6a:d1:84:45:58:98:b7:5e: aa:02:bd:3e:d8:e3:f7:a0:f4:5d:60:d7:3a:a0:cc: cd:e4:c1:8e:8b:eb:5d:25:85:68:27:81:ff:e8:78: f7:f2:27:1a:96:85:dd:72:4f:bd:99:ec:b5:82:f3: 44:46:27:96:94:8a:59:26:03:25:c4:49:75:b7:f0: 4c:72:78:ef:31:00:86:80:ba:f7:2c:31:6d:6c:6a: 0d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:87:C0:0E:3F:DE:BF:BC:58:B3:6A:59:54:D9:61:CF:0A:0E:FC:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/127cab6c-cfe0-3d58-af0b-af059f2f8361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:bc:7d:b8:13:d6:84:38:e4:d5:3b:0d:34:63:7e:f8:f2:c1: 0f:e7:56:e9:01:7e:0e:ba:24:56:6f:99:81:d2:09:e0:2f:36: 29:af:86:a0:14:e1:4d:93:de:a0:fe:8e:36:2a:bd:2c:ff:f3: db:d9:81:37:c5:e3:31:cd:d6:ff:df:34:76:a3:82:ad:42:2c: ae:82:1c:e2:64:a6:b0:b0:3f:e9:0f:53:c0:09:9b:1b:68:78: 4c:7b:39:91:41:00:52:27:d7:4d:b1:51:c9:6f:21:18:d5:72: 34:a4:4d:6d:a4:e5:ef:78:99:cd:ea:94:3a:84:62:e6:53:5a: e7:d1:e4:68:6c:c0:90:e4:29:7c:0d:6a:5f:85:42:54:0c:80: 1a:58:75:a7:b7:69:ac:8f:00:fb:5b:ee:0b:dc:b2:39:7a:57: f9:72:34:0d:68:0b:58:98:cc:68:f1:4a:9d:a6:a3:5d:ed:84: 8d:6c:f4:1b:77:07:90:9a:94:56:7b:7c:1b:ee:ec:71:87:99: 49:02:16:d1:f1:c6:e9:ce:8f:99:ae:aa:2e:0f:02:aa:fa:d0: 3e:a9:62:fb:9c:d0:74:18:b3:d3:36:a3:50:99:f1:f2:6a:b7: 63:02:20:f7:ee:f4:1b:ca:18:61:3f:c2:cc:98:9d:26:f2:33: 66:09:fd:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFTtX9dJ/fCuOMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk Mzk2ODVkNzAtOWZlMi00OWQyLWI0OGQtMDU1NWNjODcyZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWI80hfuL5HVGDSTZudmwga4ql2IskzHVPNX Q/wYnh/BQ4kqFZeaQ2L7ParJ2S8+UmSCvHm2Vb3LtPvJTdDelWyUgAj7eevrYrSm TyGeCCHuwvbc3AeUnvya1g7NSznJWS7zpr8LLwLyf5bJ+ccP6BhXw5qMGivhxrGk r5WkcIoYLmEP4dEiGPtMVjgq0abwRlrsYgczpHqHqvj303rQa3Z4LF7kmULTsFY1 atGERViYt16qAr0+2OP3oPRdYNc6oMzN5MGOi+tdJYVoJ4H/6Hj38icaloXdck+9 mey1gvNERieWlIpZJgMlxEl1t/BMcnjvMQCGgLr3LDFtbGoNXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+HwA4/3r+8WLNqWVTZYc8KDvzVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTI3Y2FiNmMtY2ZlMC0z ZDU4LWFmMGItYWYwNTlmMmY4MzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG8fbgT1oQ45NU7DTRjfvjywQ/nVukBfg66JFZvmYHSCeAvNimvhqAU 4U2T3qD+jjYqvSz/89vZgTfF4zHN1v/fNHajgq1CLK6CHOJkprCwP+kPU8AJmxto eEx7OZFBAFIn102xUclvIRjVcjSkTW2k5e94mc3qlDqEYuZTWufR5GhswJDkKXwN al+FQlQMgBpYdae3aayPAPtb7gvcsjl6V/lyNA1oC1iYzGjxSp2mo13thI1s9Bt3 B5CalFZ7fBvu7HGHmUkCFtHxxunOj5muqi4PAqr60D6pYvuc0HQYs9M2o1CZ8fJq t2MCIPfu9BvKGGE/wsyYnSbyM2YJ/Yk= -----END CERTIFICATE-----Generated at Fri Apr 17 11:23:59 2026 by rpki-client