$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34c38e2d-d62b-3a1c-b9d8-11aef6133b3b.roa File: 34c38e2d-d62b-3a1c-b9d8-11aef6133b3b.roa (raw, json) Hash identifier: IfaMJngF+JzXs3MbNN/iG23znhENrVnDDFUc0cAxW0w= Subject key identifier: E9:5E:D6:40:E7:C2:38:4E:C5:B1:61:66:9F:0D:43:03:AF:D2:88:65 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4871D25C184C119F6E6676F8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34c38e2d-d62b-3a1c-b9d8-11aef6133b3b.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.29.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:d2:5c:18:4c:11:9f:6e:66:76:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=a6707962-d27b-4062-83d4-6024c0d43f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9a:8e:69:06:94:bd:b2:aa:19:b1:16:1c:f7: f7:6b:84:ae:db:cd:07:67:5c:61:a5:c8:d3:0d:81: 01:df:2d:de:60:b6:6d:1d:84:cb:5f:42:e3:de:98: d6:9b:35:ed:fe:80:44:2f:6d:3e:d9:16:cc:b2:25: 1c:d1:30:38:c4:6a:ee:c7:9b:b4:29:c7:74:db:ad: 2e:a1:b3:53:de:18:28:29:54:0d:3b:08:04:e3:51: 2f:51:da:e0:70:9f:cc:b0:21:ba:96:7a:85:b2:31: 48:36:32:52:0a:59:77:ba:46:64:78:fd:a3:f5:a7: 42:c1:c3:70:0f:af:ad:fb:e4:f6:9e:ba:d2:63:02: 12:72:45:f6:2b:90:3b:b3:ad:7d:bd:3e:d0:e0:a0: 6d:e9:14:8b:53:fa:eb:f6:56:d9:86:2e:ce:03:6d: c8:98:44:da:96:75:65:d8:1d:14:83:fe:21:d7:5a: 4d:c7:be:0e:07:fa:08:10:4c:12:06:46:9d:68:cd: 93:82:50:7c:4c:c3:e4:46:43:d3:18:ea:a4:71:17: 81:de:b5:b9:be:c1:e7:fb:b6:47:2b:d2:84:7a:22: 11:f1:89:2a:ac:97:41:a6:2d:e2:55:0d:31:28:7b: 31:a2:3b:d5:73:ab:b2:1a:32:b9:27:1d:c7:1c:f7: 61:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5E:D6:40:E7:C2:38:4E:C5:B1:61:66:9F:0D:43:03:AF:D2:88:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34c38e2d-d62b-3a1c-b9d8-11aef6133b3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b3:bf:2b:01:16:7a:88:04:5b:ca:c2:06:ea:13:4b:a3:ca: 0d:ea:4c:56:1a:71:05:98:fd:90:0a:e9:a8:49:dd:4b:aa:8d: b3:80:c4:f0:f8:54:49:cc:a0:16:75:d1:ad:c2:f1:96:98:93: bb:0c:3d:92:18:b6:cb:75:06:90:68:cf:ff:9a:3a:d3:05:a0: b0:9d:7c:70:ec:0c:6d:e8:02:60:fb:8e:6d:fc:76:12:ad:da: a1:66:ac:66:ae:92:4e:58:24:22:95:19:77:8f:ed:ae:ae:2d: 2d:e4:02:f6:9b:b6:37:b9:16:48:f8:de:5d:a6:c6:80:3a:95: 59:75:8a:e1:79:2b:25:b5:2f:bd:73:99:f7:12:d8:5c:e6:bc: 9e:76:ac:2a:d9:0f:c9:7f:f7:f9:4f:1f:21:69:09:57:ff:10: d9:98:64:6a:26:12:b2:0a:5b:4f:24:5d:50:86:4d:88:6d:1a: f4:21:f1:62:96:61:9d:44:06:a6:23:c0:55:73:1b:b2:b4:d5: 27:7e:f3:d7:78:c0:fd:7b:8f:7f:41:2f:52:b6:95:61:7d:c3: 57:e8:36:8d:a2:15:04:4c:f6:48:5a:ae:89:3a:27:69:57:de: c6:d3:2b:3a:85:38:1c:e5:6f:2d:fa:ab:e9:e2:43:76:a8:e2: 7a:40:00:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcdJcGEwRn25mdvgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk YTY3MDc5NjItZDI3Yi00MDYyLTgzZDQtNjAyNGMwZDQzZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpqOaQaUvbKqGbEWHPf3a4Su280HZ1xhpcjT DYEB3y3eYLZtHYTLX0Lj3pjWmzXt/oBEL20+2RbMsiUc0TA4xGrux5u0Kcd0260u obNT3hgoKVQNOwgE41EvUdrgcJ/MsCG6lnqFsjFINjJSCll3ukZkeP2j9adCwcNw D6+t++T2nrrSYwISckX2K5A7s619vT7Q4KBt6RSLU/rr9lbZhi7OA23ImETalnVl 2B0Ug/4h11pNx74OB/oIEEwSBkadaM2TglB8TMPkRkPTGOqkcReB3rW5vsHn+7ZH K9KEeiIR8YkqrJdBpi3iVQ0xKHsxojvVc6uyGjK5Jx3HHPdhPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOle1kDnwjhOxbFhZp8NQwOv0ohlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzRjMzhlMmQtZDYyYi0z YTFjLWI5ZDgtMTFhZWY2MTMzYjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR1xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKzvysBFnqIBFvKwgbqE0ujyg3qTFYacQWY/ZAK6ahJ3UuqjbOAxPD4 VEnMoBZ10a3C8ZaYk7sMPZIYtst1BpBoz/+aOtMFoLCdfHDsDG3oAmD7jm38dhKt 2qFmrGaukk5YJCKVGXeP7a6uLS3kAvabtje5Fkj43l2mxoA6lVl1iuF5KyW1L71z mfcS2FzmvJ52rCrZD8l/9/lPHyFpCVf/ENmYZGomErIKW08kXVCGTYhtGvQh8WKW YZ1EBqYjwFVzG7K01Sd+89d4wP17j39BL1K2lWF9w1foNo2iFQRM9kharok6J2lX 3sbTKzqFOBzlby36q+niQ3ao4npAACU= -----END CERTIFICATE-----Generated at Mon Mar 2 00:47:07 2026 by rpki-client