$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3695b8ae-fab9-3f4d-ba61-96923ce7e728.roa File: 3695b8ae-fab9-3f4d-ba61-96923ce7e728.roa (raw, json) Hash identifier: zf3J95auGzeeoMbauJfwtP9CFreNQf8Is5mZGzsl8t0= Subject key identifier: C5:42:7A:D3:8A:B0:53:F7:3E:3F:27:22:CE:D2:22:B3:7B:DC:D1:F6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D0647A3B72705AC27F7F928C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3695b8ae-fab9-3f4d-ba61-96923ce7e728.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 19905 IP address blocks: 173.22.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:a3:b7:27:05:ac:27:f7:f9:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=64097ef8-c3ca-490e-8be9-dd9ed2212c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f2:0e:a6:23:b5:03:d8:54:71:ff:e5:fd:49: 0f:6d:3d:82:c0:86:7d:7f:c2:8c:49:99:cb:17:8d: 70:40:c1:d7:a0:75:19:32:dd:34:47:48:51:c0:93: 45:cd:6d:b3:93:65:14:f3:3b:52:d5:6d:a8:a6:55: e1:5a:b4:2a:8a:82:d1:bc:4e:fd:d3:92:a2:c0:7c: c9:e6:d9:28:d9:fe:21:28:7b:f9:e4:64:92:a1:60: 84:b8:fd:bb:b7:20:42:b4:e3:09:bf:62:17:13:c7: b8:f5:8b:dc:6f:7d:2a:41:e4:7f:7a:db:58:63:8e: 3b:56:9f:3c:b1:87:49:e4:c4:30:6f:29:cd:98:62: 02:ac:fe:f2:18:2c:7d:47:a1:86:cb:d3:f4:ea:f5: 27:34:8e:cb:df:8a:56:2e:3f:d6:6d:3e:64:dd:35: 40:bb:4e:ef:9b:ec:1e:69:ef:0f:fc:d8:c2:e0:f6: 28:a0:88:2e:1e:8d:56:df:e0:5f:63:f4:56:6f:5a: eb:7d:dc:87:4b:6a:22:57:36:dd:7e:d3:bb:19:30: 85:eb:f6:17:a8:e4:ff:12:7d:9d:70:a3:ce:2e:11: 9b:25:e4:20:8b:ba:31:09:01:cc:4e:13:a5:97:59: a9:27:5b:31:87:c0:2b:8c:45:d2:a9:4d:2e:1e:f0: 32:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:42:7A:D3:8A:B0:53:F7:3E:3F:27:22:CE:D2:22:B3:7B:DC:D1:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3695b8ae-fab9-3f4d-ba61-96923ce7e728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:78:7d:8a:de:dd:dd:04:dc:b4:b5:e0:fe:de:68:49:0a:4b: 0c:92:5e:e6:35:77:ef:43:aa:a9:89:85:a4:13:2d:e9:a4:b6: 90:e7:1a:c7:eb:46:56:29:67:d0:8f:22:9e:f5:50:0c:f3:b3: 86:cd:29:21:59:8d:95:b3:95:8c:77:2e:f0:2b:5e:d4:a9:60: 0a:d2:97:6f:6a:83:85:28:25:e9:e2:f8:dc:64:86:00:6e:02: 26:4c:db:44:a5:18:52:59:8e:d2:b8:9f:d1:2f:57:bc:b4:8c: 84:c4:a9:54:2b:d1:40:c1:44:5f:46:f4:40:0b:45:35:1f:2b: 87:3c:96:0f:b7:e2:ca:2e:e0:b2:68:b9:e8:04:54:b9:b3:5b: 85:9c:e9:ef:5e:2d:89:b4:ab:f5:9a:36:48:32:e2:a1:89:46: 8b:38:02:45:95:54:79:6b:b4:66:2b:3a:a9:76:60:43:87:29: 77:76:7b:46:a8:75:e0:db:65:0c:70:b3:aa:27:85:96:f6:72: 82:00:96:a1:0b:7a:9c:64:99:20:69:f4:d7:5f:b9:fb:95:7f: a6:e8:8e:ad:9f:f2:e4:68:3f:4b:4d:6c:b5:9d:da:02:e8:82: 10:93:93:a7:ad:85:9e:c0:2c:aa:10:e6:32:a2:c5:f1:6d:3a: 80:92:35:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR6O3JwWsJ/f5KMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk NjQwOTdlZjgtYzNjYS00OTBlLThiZTktZGQ5ZWQyMjEyYzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPIOpiO1A9hUcf/l/UkPbT2CwIZ9f8KMSZnL F41wQMHXoHUZMt00R0hRwJNFzW2zk2UU8ztS1W2oplXhWrQqioLRvE7905KiwHzJ 5tko2f4hKHv55GSSoWCEuP27tyBCtOMJv2IXE8e49Yvcb30qQeR/ettYY447Vp88 sYdJ5MQwbynNmGICrP7yGCx9R6GGy9P06vUnNI7L34pWLj/WbT5k3TVAu07vm+we ae8P/NjC4PYooIguHo1W3+BfY/RWb1rrfdyHS2oiVzbdftO7GTCF6/YXqOT/En2d cKPOLhGbJeQgi7oxCQHMThOll1mpJ1sxh8ArjEXSqU0uHvAy+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVCetOKsFP3Pj8nIs7SIrN73NH2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzY5NWI4YWUtZmFiOS0z ZjRkLWJhNjEtOTY5MjNjZTdlNzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEh4fYre3d0E3LS14P7eaEkKSwySXuY1d+9DqqmJhaQTLemktpDnGsfr RlYpZ9CPIp71UAzzs4bNKSFZjZWzlYx3LvArXtSpYArSl29qg4UoJeni+NxkhgBu AiZM20SlGFJZjtK4n9EvV7y0jITEqVQr0UDBRF9G9EALRTUfK4c8lg+34sou4LJo uegEVLmzW4Wc6e9eLYm0q/WaNkgy4qGJRos4AkWVVHlrtGYrOql2YEOHKXd2e0ao deDbZQxws6onhZb2coIAlqELepxkmSBp9NdfufuVf6bojq2f8uRoP0tNbLWd2gLo ghCTk6ethZ7ALKoQ5jKixfFtOoCSNdU= -----END CERTIFICATE-----Generated at Mon Mar 2 07:52:07 2026 by rpki-client