$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8538c7-b1af-312d-985d-bfad849eca5a.roa File: 3b8538c7-b1af-312d-985d-bfad849eca5a.roa (raw, json) Hash identifier: sX+4kSr29gPnpZiJYqXz7lyYoy7dq/55/H92kuhukhg= Subject key identifier: 97:A9:2A:03:A3:33:C8:CE:95:C2:F4:03:C9:C6:27:5A:00:F9:90:02 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E0435D82B8C92F46CE3929980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8538c7-b1af-312d-985d-bfad849eca5a.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 19905 IP address blocks: 173.29.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:d8:2b:8c:92:f4:6c:e3:92:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=ca911824-dd7d-47ce-86f7-b8390e1d1e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:65:bd:6a:b1:a0:ac:86:ae:1f:80:1e:1f: b7:e1:4f:bd:a1:ce:4b:a4:97:53:db:0c:1b:f7:42: ac:1a:75:e8:24:b8:f6:18:16:ac:84:b3:37:60:42: ce:2a:90:a9:7d:9e:01:80:05:d1:fe:88:dd:ff:ae: 7b:81:3c:6c:5f:a5:1b:5e:e4:03:ff:cb:ed:e8:11: be:85:b7:27:3f:4e:f9:eb:15:9d:a3:51:2c:25:eb: 7a:aa:5d:8e:7e:1f:d4:c7:87:1b:0e:43:b0:ac:bd: 67:d6:f1:86:3c:b4:85:62:e2:8e:87:88:fd:2a:6f: 7b:0e:ff:cf:25:8c:c7:80:d5:5c:b6:f3:63:ab:02: e0:29:96:79:cc:90:3f:99:71:d5:21:7a:ec:4e:c8: 56:37:32:34:59:e3:ba:de:ab:6c:a0:07:3a:b8:13: af:64:64:bc:f1:27:27:33:a2:de:f8:e3:06:f5:96: 93:65:17:b5:e6:c6:df:65:29:96:d2:fe:b9:3a:5d: 49:a1:dc:79:c3:0d:13:88:e5:72:70:d3:69:3d:2d: 80:23:75:be:af:bd:d7:5f:13:df:10:cf:4e:6e:75: ed:46:6c:ec:ba:7f:e5:a4:37:d8:78:20:4d:ad:85: 59:07:46:b3:1a:2d:bb:68:2c:82:f9:df:3c:d5:cf: 2c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A9:2A:03:A3:33:C8:CE:95:C2:F4:03:C9:C6:27:5A:00:F9:90:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3b8538c7-b1af-312d-985d-bfad849eca5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a1:58:d0:a6:20:90:37:23:e5:ee:90:8d:e9:e2:4c:a1:d1: 0c:96:d7:6d:b8:16:cb:34:93:87:1b:44:9a:1d:d8:44:60:6e: dd:58:0a:72:b8:3f:6e:09:a3:3b:9e:94:a4:92:d5:78:2c:21: f8:a2:8d:4b:3f:68:54:04:b1:fa:a3:2b:c1:1d:2c:5e:a5:87: 4b:8e:5c:39:8c:6f:41:27:55:a5:54:46:f2:ba:54:e0:7a:fc: ac:8a:b3:73:53:e1:1f:5a:7e:66:44:a8:eb:6c:01:27:df:79: 3f:81:22:07:38:f1:ec:1c:ec:3c:d0:c1:93:4c:6e:49:86:b0: d9:74:36:fd:37:ee:07:6e:39:05:f3:4a:74:d6:16:c6:1a:ce: a8:c5:19:c9:94:09:42:04:90:af:d1:34:26:ec:9c:40:b0:27: 43:cd:d8:74:7f:da:9c:c3:11:46:b9:56:ea:f6:45:d5:d0:27: 08:50:80:2d:db:7c:72:53:4f:f1:9a:db:0b:30:e8:07:79:2d: 5a:aa:b7:4e:b5:ee:6d:77:03:b0:f9:64:0e:ca:a4:ee:d8:c4: 4a:95:80:e5:f7:6a:ed:56:6d:4d:6a:9d:3c:3f:57:f1:e8:2b: e1:97:bc:9f:d1:57:3a:b4:4e:da:dd:7a:2b:78:90:f9:18:06: 47:04:1e:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENdgrjJL0bOOSmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk Y2E5MTE4MjQtZGQ3ZC00N2NlLTg2ZjctYjgzOTBlMWQxZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4NlvWqxoKyGrh+AHh+34U+9oc5LpJdT2wwb 90KsGnXoJLj2GBashLM3YELOKpCpfZ4BgAXR/ojd/657gTxsX6UbXuQD/8vt6BG+ hbcnP0756xWdo1EsJet6ql2Ofh/Ux4cbDkOwrL1n1vGGPLSFYuKOh4j9Km97Dv/P JYzHgNVctvNjqwLgKZZ5zJA/mXHVIXrsTshWNzI0WeO63qtsoAc6uBOvZGS88Scn M6Le+OMG9ZaTZRe15sbfZSmW0v65Ol1Jodx5ww0TiOVycNNpPS2AI3W+r73XXxPf EM9ObnXtRmzsun/lpDfYeCBNrYVZB0azGi27aCyC+d881c8saQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJepKgOjM8jOlcL0A8nGJ1oA+ZACMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2I4NTM4YzctYjFhZi0z MTJkLTk4NWQtYmZhZDg0OWVjYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFihWNCmIJA3I+XukI3p4kyh0QyW1224Fss0k4cbRJod2ERgbt1YCnK4 P24JozuelKSS1XgsIfiijUs/aFQEsfqjK8EdLF6lh0uOXDmMb0EnVaVURvK6VOB6 /KyKs3NT4R9afmZEqOtsASffeT+BIgc48ewc7DzQwZNMbkmGsNl0Nv037gduOQXz SnTWFsYazqjFGcmUCUIEkK/RNCbsnECwJ0PN2HR/2pzDEUa5Vur2RdXQJwhQgC3b fHJTT/Ga2wsw6Ad5LVqqt0617m13A7D5ZA7KpO7YxEqVgOX3au1WbU1qnTw/V/Ho K+GXvJ/RVzq0Ttrdeit4kPkYBkcEHu8= -----END CERTIFICATE-----Generated at Sat Jun 13 16:20:51 2026 by rpki-client