$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b846d9e-a302-3570-8a42-867757ff8321.roa File: 1b846d9e-a302-3570-8a42-867757ff8321.roa (raw, json) Hash identifier: qurte4s6WteNpOwGY8cPCM8DDnER4Jr6fetbB6GyzK0= Subject key identifier: 96:21:09:32:90:38:3B:34:EE:12:2E:FC:88:FE:81:5F:14:AD:C7:79 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D0647AB0826AA4551F136E200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b846d9e-a302-3570-8a42-867757ff8321.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 19905 IP address blocks: 173.21.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:ab:08:26:aa:45:51:f1:36:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=776a9316-80da-4207-b36b-77795999d7bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ae:c6:a4:93:6b:fb:bb:0e:b0:47:12:ea:70: 0f:8e:a8:cd:9f:f9:21:94:06:f1:31:23:b2:94:85: a6:0b:12:76:fb:31:71:cc:7e:e6:80:96:55:47:73: 7a:90:77:a6:b2:9d:89:33:3d:62:ef:10:d3:e5:9a: e9:e2:6c:34:1c:47:59:84:64:12:5b:66:ae:09:62: 12:89:3d:02:51:63:4b:d3:fa:e4:06:f6:71:a4:e9: 65:37:60:70:da:dd:b5:fc:91:c1:d5:bd:44:c3:17: 49:72:05:4b:e7:00:da:10:ab:f5:a7:83:79:79:98: be:ac:95:b1:4a:cb:58:a1:87:c7:20:e0:7e:ce:1c: 9b:cf:82:62:97:5a:6c:ed:0f:48:59:e8:f3:d4:db: 8d:b1:25:4f:25:73:bf:44:b6:a9:50:e7:95:61:de: a0:ce:8b:2c:5e:b0:6c:ce:30:d3:6a:ea:43:44:70: 62:2a:d7:b0:64:f1:5d:9f:92:ed:4c:ca:95:10:4c: e4:f6:78:70:c3:0c:c9:55:04:67:55:22:a8:5d:38: ba:10:15:20:5f:5a:1e:6d:e9:32:df:38:fa:45:a2: ed:51:c6:cf:a7:28:85:bf:40:5a:b3:bd:1f:ca:3e: 67:64:a8:dd:19:91:b5:de:b7:25:4c:32:b2:4b:04: 06:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:21:09:32:90:38:3B:34:EE:12:2E:FC:88:FE:81:5F:14:AD:C7:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b846d9e-a302-3570-8a42-867757ff8321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ad:32:de:a2:6c:8d:69:fd:97:a0:c2:f8:36:68:7c:0b:7c: db:d8:e9:d8:55:39:26:67:94:1d:a1:29:78:cd:12:a9:26:f6: 80:43:95:d0:47:53:8b:64:90:6b:28:f7:2f:2e:c4:bb:e0:d9: 98:07:fe:74:6d:fb:28:a0:5c:eb:79:9a:db:58:f5:f2:50:32: 6f:c5:04:d3:d0:32:58:09:9a:82:8c:e6:d2:5e:5d:85:2a:fc: cf:2f:56:36:54:e5:64:ae:2b:44:fa:56:09:c3:18:b0:8e:e7: d0:15:b3:ad:59:91:6a:86:c4:e8:b5:0b:99:ca:de:68:ff:b8: 00:4b:17:72:9e:94:53:9a:c3:cd:a5:f3:33:f7:5b:1e:dd:4d: eb:62:48:f4:d3:0a:79:31:77:fc:de:2f:80:4e:aa:03:11:e8: 3c:7d:b8:fd:e4:2f:5d:89:38:3a:94:dc:3a:a1:05:6b:e1:d9: d5:ee:29:fb:84:26:80:c2:33:cc:e1:14:60:fb:0d:50:27:0b: 1b:5d:30:ca:c1:b4:91:56:92:0b:df:9e:a3:05:0f:88:b5:6e: 48:09:4a:1c:41:dc:76:84:0f:97:06:86:22:a0:d8:38:05:d5: 59:f4:27:0c:8a:bb:f2:89:5e:10:c9:64:30:00:19:68:93:06: ad:d0:74:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR6sIJqpFUfE24gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk Nzc2YTkzMTYtODBkYS00MjA3LWIzNmItNzc3OTU5OTlkN2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa7GpJNr+7sOsEcS6nAPjqjNn/khlAbxMSOy lIWmCxJ2+zFxzH7mgJZVR3N6kHemsp2JMz1i7xDT5Zrp4mw0HEdZhGQSW2auCWIS iT0CUWNL0/rkBvZxpOllN2Bw2t21/JHB1b1EwxdJcgVL5wDaEKv1p4N5eZi+rJWx SstYoYfHIOB+zhybz4Jil1ps7Q9IWejz1NuNsSVPJXO/RLapUOeVYd6gzossXrBs zjDTaupDRHBiKtewZPFdn5LtTMqVEEzk9nhwwwzJVQRnVSKoXTi6EBUgX1oebeky 3zj6RaLtUcbPpyiFv0Bas70fyj5nZKjdGZG13rclTDKySwQGGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYhCTKQODs07hIu/Ij+gV8Urcd5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWI4NDZkOWUtYTMwMi0z NTcwLThhNDItODY3NzU3ZmY4MzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKtMt6ibI1p/Zegwvg2aHwLfNvY6dhVOSZnlB2hKXjNEqkm9oBDldBH U4tkkGso9y8uxLvg2ZgH/nRt+yigXOt5mttY9fJQMm/FBNPQMlgJmoKM5tJeXYUq /M8vVjZU5WSuK0T6VgnDGLCO59AVs61ZkWqGxOi1C5nK3mj/uABLF3KelFOaw82l 8zP3Wx7dTetiSPTTCnkxd/zeL4BOqgMR6Dx9uP3kL12JODqU3DqhBWvh2dXuKfuE JoDCM8zhFGD7DVAnCxtdMMrBtJFWkgvfnqMFD4i1bkgJShxB3HaED5cGhiKg2DgF 1Vn0JwyKu/KJXhDJZDAAGWiTBq3QdLo= -----END CERTIFICATE-----Generated at Mon Mar 2 12:00:16 2026 by rpki-client