$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34e28fba-9008-3b9d-878b-6605842ac8c0.roa File: 34e28fba-9008-3b9d-878b-6605842ac8c0.roa (raw, json) Hash identifier: 9IUYu83nxEv9ZFo+0bD5kf1mQ41hS+BIYEuMfU/mjjk= Subject key identifier: 1A:59:6C:47:73:50:6D:E6:FA:22:00:72:94:09:C4:68:99:1D:46:80 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C9ACC5C3A2DF447227279FFD0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34e28fba-9008-3b9d-878b-6605842ac8c0.roa Signing time: Thu 22 Jan 2026 02:00:31 +0000 ROA not before: Thu 22 Jan 2026 02:00:31 +0000 ROA not after: Wed 22 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 216.108.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9a:cc:5c:3a:2d:f4:47:22:72:79:ff:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 22 02:00:31 2026 GMT Not After : Apr 22 01:00:31 2026 GMT Subject: CN=c004a5c9-8e77-4aad-99b8-a979ace61a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4e:c6:b9:35:89:d9:52:8c:c2:a4:15:7d:ed: 47:9c:39:4d:bd:02:25:af:65:bd:bf:93:6f:ca:e9: 14:ee:4c:e2:07:d1:44:e7:eb:82:3a:85:f1:4c:b7: e7:d1:22:38:5b:bf:8f:1a:32:a8:33:00:54:83:17: 2d:3a:04:83:43:78:aa:ac:f5:d3:cb:e8:db:df:60: dd:4f:b7:07:31:1f:ee:e8:bf:49:36:76:cf:6e:03: 9e:2b:40:a0:61:1a:b5:14:af:64:cd:a0:55:8c:3a: e9:2a:1b:38:01:5e:83:40:2b:04:ae:34:7e:09:67: 7d:3a:c0:bd:e6:06:22:30:d0:8f:ea:31:3c:26:d6: 89:c5:57:13:ae:35:19:7f:24:c9:62:6f:12:70:12: 7e:54:56:44:03:83:e1:e1:5d:d1:6b:80:6a:c6:b4: 05:24:ce:cd:fb:bc:aa:56:46:39:fb:48:c6:66:25: 41:3f:76:2f:58:b0:d6:d5:bf:0d:b5:ed:9e:41:5d: cf:3b:ff:6a:f9:39:37:78:ea:b6:8d:78:a7:60:f8: 13:6a:8e:47:4b:ed:1f:7e:7e:e9:62:d0:11:af:23: 04:f4:bc:2f:44:c2:14:b1:3a:5a:45:11:72:9d:9e: 2c:2b:cd:13:61:c3:ed:5e:8a:ce:39:a3:bb:87:fb: 28:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:59:6C:47:73:50:6D:E6:FA:22:00:72:94:09:C4:68:99:1D:46:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/34e28fba-9008-3b9d-878b-6605842ac8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 216.108.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ef:05:4f:70:5f:7a:87:04:d3:70:08:66:54:0e:1e:de:bb: 6c:8a:71:4a:c2:09:67:26:ca:6e:19:66:5c:d5:3c:08:3c:3d: a9:f7:07:cf:28:e4:6b:90:c3:1f:67:d9:51:92:45:85:9a:e6: 3b:d1:d7:ae:60:ae:3c:ba:9d:e3:c1:55:e4:ae:83:62:29:a2: 7d:16:c7:93:d2:a6:06:3e:92:3d:84:a1:fd:8e:2d:cf:0a:85: a8:37:b3:7f:e5:71:39:38:4e:3b:51:da:0f:e9:48:92:3c:be: 98:b2:88:bb:90:11:6f:80:66:a6:01:cc:d2:d4:f2:e5:6d:d0: 95:59:21:d8:ad:d8:06:6a:e6:f4:62:fc:d8:57:8a:90:c7:dc: dd:14:8d:b9:2d:4b:de:02:4c:d9:97:6f:90:9b:9b:a5:7e:75: 7e:b9:2d:4f:d5:e4:34:ef:5f:06:fd:9f:9f:98:50:22:30:43: b6:a5:cc:21:f0:62:2d:0e:36:13:45:a1:0f:0a:63:85:f4:b1: a1:80:82:16:4a:01:da:9c:e9:3f:2a:8a:08:9d:bd:c5:8a:a0: 03:20:64:44:c2:ad:35:fb:b4:51:70:4f:84:fe:c8:09:56:6e: fc:a7:56:58:4f:57:73:99:ab:92:9a:10:99:f2:9b:0d:df:92: e6:b2:23:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyazFw6LfRHInJ5/9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyMjAyMDAzMVoXDTI2MDQyMjAxMDAzMVowLzEtMCsGA1UEAxMk YzAwNGE1YzktOGU3Ny00YWFkLTk5YjgtYTk3OWFjZTYxYTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE7GuTWJ2VKMwqQVfe1HnDlNvQIlr2W9v5Nv yukU7kziB9FE5+uCOoXxTLfn0SI4W7+PGjKoMwBUgxctOgSDQ3iqrPXTy+jb32Dd T7cHMR/u6L9JNnbPbgOeK0CgYRq1FK9kzaBVjDrpKhs4AV6DQCsErjR+CWd9OsC9 5gYiMNCP6jE8JtaJxVcTrjUZfyTJYm8ScBJ+VFZEA4Ph4V3Ra4BqxrQFJM7N+7yq VkY5+0jGZiVBP3YvWLDW1b8Nte2eQV3PO/9q+Tk3eOq2jXinYPgTao5HS+0ffn7p YtARryME9LwvRMIUsTpaRRFynZ4sK80TYcPtXorOOaO7h/so7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpZbEdzUG3m+iIAcpQJxGiZHUaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzRlMjhmYmEtOTAwOC0z YjlkLTg3OGItNjYwNTg0MmFjOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GzSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzvBU9wX3qHBNNwCGZUDh7eu2yKcUrCCWcmym4ZZlzVPAg8Pan3B88o 5GuQwx9n2VGSRYWa5jvR165grjy6nePBVeSug2Ipon0Wx5PSpgY+kj2Eof2OLc8K hag3s3/lcTk4TjtR2g/pSJI8vpiyiLuQEW+AZqYBzNLU8uVt0JVZIdit2AZq5vRi /NhXipDH3N0UjbktS94CTNmXb5Cbm6V+dX65LU/V5DTvXwb9n5+YUCIwQ7alzCHw Yi0ONhNFoQ8KY4X0saGAghZKAdqc6T8qigidvcWKoAMgZETCrTX7tFFwT4T+yAlW bvynVlhPV3OZq5KaEJnymw3fkuayI7I= -----END CERTIFICATE-----Generated at Mon Mar 2 12:18:57 2026 by rpki-client