$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a2b2eee-4b85-3c1b-b2a6-af60e346d957.roa File: 3a2b2eee-4b85-3c1b-b2a6-af60e346d957.roa (raw, json) Hash identifier: tv0nbA1O/Fphyh5nY57XuQYClapwaMhHVOni7z5q724= Subject key identifier: D2:A1:EA:31:2C:F0:62:A8:D6:31:0F:85:77:52:90:9E:4A:03:2F:05 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D7680B8CB293F0276A0BCE100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a2b2eee-4b85-3c1b-b2a6-af60e346d957.roa Signing time: Fri 10 Apr 2026 18:46:19 +0000 ROA not before: Fri 10 Apr 2026 18:46:19 +0000 ROA not after: Thu 09 Jul 2026 18:46:19 +0000 asID: 30036 IP address blocks: 173.25.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:76:80:b8:cb:29:3f:02:76:a0:bc:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 10 18:46:19 2026 GMT Not After : Jul 9 18:46:19 2026 GMT Subject: CN=d2de1514-c0b1-45db-9109-705d82737864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:85:f7:bc:e5:b0:86:4f:c6:67:6c:05:24:b7: 6a:72:db:82:42:ae:04:30:92:c1:d0:27:58:22:82: b2:99:56:ab:42:19:01:68:06:d5:65:e0:b3:50:d6: 9d:cc:60:ae:30:84:b0:3e:a6:96:4c:97:90:dc:79: dd:14:50:6d:db:39:fe:20:87:f8:eb:38:76:48:a6: 21:95:ce:f1:cc:77:cb:a1:8d:04:fe:cf:f6:1b:20: 70:3f:80:a4:c3:fb:3d:f2:da:09:c3:ed:f7:a9:4a: ac:86:b7:29:37:64:ca:9f:30:cf:e6:8f:21:e6:72: e2:32:8c:08:1c:0b:8e:28:41:4d:c9:8e:18:08:69: a4:01:84:8b:4e:83:7c:df:b7:b3:ac:26:50:84:f1: df:77:2a:67:4c:06:26:04:c5:cb:b3:40:e9:cd:03: 20:5f:38:e6:5c:0e:69:d1:af:5f:da:22:36:ac:30: 91:a5:e6:64:54:2b:49:cd:e3:11:49:63:ce:41:9d: 5f:4b:3a:c0:6c:66:e3:68:86:fa:5a:5a:0b:79:c3: 7b:90:7d:b3:84:2a:c7:bc:5e:2b:5d:7a:3f:f4:77: f8:da:39:1b:80:82:cf:87:83:4c:d0:eb:e3:13:93: 47:f3:f3:89:79:70:f2:9d:13:bf:8b:8d:78:dc:65: 97:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A1:EA:31:2C:F0:62:A8:D6:31:0F:85:77:52:90:9E:4A:03:2F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3a2b2eee-4b85-3c1b-b2a6-af60e346d957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:1a:09:42:6a:d6:5f:d7:92:a8:ae:77:ea:f5:81:9f:33:4c: 9b:1d:83:5a:dc:bd:5b:55:b1:31:9e:27:c4:40:32:b3:c3:39: 80:d2:37:db:bf:e8:52:99:c2:32:e1:8b:c1:24:89:ad:54:67: e8:65:96:10:ea:89:78:ba:4c:ff:f4:0d:28:a4:11:5b:a0:fa: 04:7a:07:79:fc:75:fc:d4:ba:7f:20:27:6b:cf:b9:c3:bb:3b: ae:fb:9e:33:9a:d2:75:26:24:ab:62:20:54:57:fe:0c:6d:47: b6:f5:93:76:4a:44:2a:0b:c9:ee:ff:27:c5:3e:38:7a:b5:c6: 3a:97:95:31:c4:b2:39:ad:75:fb:e4:d1:14:4a:c0:bd:1d:4b: 85:43:f9:48:74:84:8f:70:8c:fa:fa:eb:dc:82:fa:a0:20:22: df:a6:79:f4:92:22:d1:cb:5d:5f:fc:23:33:b4:82:36:c7:77: 2d:ca:e5:5a:83:cf:a5:d9:6e:de:e8:24:d3:b8:93:73:f2:7e: db:e7:fc:fd:46:26:b5:f8:76:3e:7e:8f:40:47:63:e2:c7:c5: 93:83:5b:69:84:02:92:d1:71:d2:19:9a:55:e5:9a:2a:75:8c: 54:a8:65:7e:f9:1a:4f:9e:26:13:c8:5e:a4:4c:f6:05:28:f0: 7f:23:f1:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE12gLjLKT8CdqC84QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQxMDE4NDYxOVoXDTI2MDcwOTE4NDYxOVowLzEtMCsGA1UEAxMk ZDJkZTE1MTQtYzBiMS00NWRiLTkxMDktNzA1ZDgyNzM3ODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYX3vOWwhk/GZ2wFJLdqctuCQq4EMJLB0CdY IoKymVarQhkBaAbVZeCzUNadzGCuMISwPqaWTJeQ3HndFFBt2zn+IIf46zh2SKYh lc7xzHfLoY0E/s/2GyBwP4Ckw/s98toJw+33qUqshrcpN2TKnzDP5o8h5nLiMowI HAuOKEFNyY4YCGmkAYSLToN837ezrCZQhPHfdypnTAYmBMXLs0DpzQMgXzjmXA5p 0a9f2iI2rDCRpeZkVCtJzeMRSWPOQZ1fSzrAbGbjaIb6WloLecN7kH2zhCrHvF4r XXo/9Hf42jkbgILPh4NM0OvjE5NH8/OJeXDynRO/i4143GWXiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKh6jEs8GKo1jEPhXdSkJ5KAy8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2EyYjJlZWUtNGI4NS0z YzFiLWIyYTYtYWY2MGUzNDZkOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkaCUJq1l/Xkqiud+r1gZ8zTJsdg1rcvVtVsTGeJ8RAMrPDOYDSN9u/ 6FKZwjLhi8Ekia1UZ+hllhDqiXi6TP/0DSikEVug+gR6B3n8dfzUun8gJ2vPucO7 O677njOa0nUmJKtiIFRX/gxtR7b1k3ZKRCoLye7/J8U+OHq1xjqXlTHEsjmtdfvk 0RRKwL0dS4VD+Uh0hI9wjPr669yC+qAgIt+mefSSItHLXV/8IzO0gjbHdy3K5VqD z6XZbt7oJNO4k3Pyftvn/P1GJrX4dj5+j0BHY+LHxZODW2mEApLRcdIZmlXlmip1 jFSoZX75Gk+eJhPIXqRM9gUo8H8j8WU= -----END CERTIFICATE-----Generated at Fri Apr 17 13:28:25 2026 by rpki-client