$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f00cacd-1911-391d-9237-784128c92e0a.roa File: 3f00cacd-1911-391d-9237-784128c92e0a.roa (raw, json) Hash identifier: gZLq7aA3WV5I1RPrXlTl6wAojNhnh/3uCdckRmpTJ8M= Subject key identifier: B9:A7:3F:B2:D3:70:AB:D1:99:BC:85:09:70:8B:F7:75:A1:15:C5:37 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CF5879749D8889C5AC80B6780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f00cacd-1911-391d-9237-784128c92e0a.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 30036 IP address blocks: 24.129.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:97:49:d8:88:9c:5a:c8:0b:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=e425358a-b46e-4cd4-b6f7-d60d2f10f656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b8:bf:c3:62:a1:0c:45:35:d6:b3:9f:59:51: 21:6b:95:fd:ff:ea:2b:a9:d2:7c:04:f3:9a:35:14: 1a:78:4a:cc:c2:46:16:54:5f:87:b2:2d:43:a6:93: 59:c8:ad:ed:fb:e6:35:ad:ae:d8:b0:3f:3d:4e:77: 55:2c:df:37:26:1b:c0:68:8f:64:01:87:a5:9c:d2: e7:06:95:65:bb:ae:8c:9d:34:72:3b:10:77:5b:a4: bd:96:66:57:9b:eb:2f:ca:27:3f:ed:70:db:5f:cd: e5:6d:46:b6:b6:4b:0f:e3:6b:93:ed:b1:8d:aa:b9: c3:26:7a:89:b6:61:24:5a:94:8c:56:43:26:99:63: bf:91:c7:fa:1e:cd:f8:ad:b0:a1:28:c5:e1:80:c1: 5a:b4:2b:67:f9:d3:e1:d6:74:0a:b0:9d:86:7f:6c: 65:0f:d7:ea:f3:7e:cc:a2:2d:ce:c7:29:f3:99:59: d7:4f:65:19:32:ad:c9:97:ff:69:25:80:b9:86:62: 0a:ea:bd:c8:84:cb:18:82:62:3c:9f:77:75:38:8b: ab:bb:78:38:f8:a0:3f:31:9e:34:c8:5c:ff:0d:6a: ce:b0:22:d1:13:1e:5e:a4:16:46:65:cf:51:40:32: 63:a9:3a:07:14:78:04:07:bd:de:44:80:b5:f9:1c: 15:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A7:3F:B2:D3:70:AB:D1:99:BC:85:09:70:8B:F7:75:A1:15:C5:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f00cacd-1911-391d-9237-784128c92e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 24.129.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7e:95:76:38:c4:51:43:2c:cd:bf:05:73:a7:86:50:1d:74: b1:94:48:f3:ab:47:44:5b:cd:3f:3f:d3:b9:7f:84:0a:06:6b: a8:f5:3a:11:01:57:80:99:1c:14:80:9a:de:54:d8:45:02:3d: 25:8f:35:c3:e3:fa:cf:d1:b0:1e:dc:89:94:47:7e:c9:73:3d: 96:b0:e4:f8:7b:6e:8c:ee:10:ed:55:cf:a7:05:b5:02:ee:74: e2:44:29:d4:71:69:f4:59:91:b2:ac:f4:30:1b:7b:12:b2:77: 57:96:66:b5:31:d5:78:c8:23:9d:02:c8:bd:ec:eb:21:3b:fb: fa:93:1f:5b:2a:47:ca:f4:9c:a9:07:81:27:9a:f4:9f:12:27: 74:9a:7b:34:85:97:0a:f3:a0:2b:78:c0:0c:1e:15:ea:18:da: b5:c4:17:d6:51:ac:6f:c6:fc:72:ee:05:5a:48:63:e5:05:f6: bf:f6:14:58:b7:f6:33:dd:71:37:31:aa:a0:05:55:d2:08:ea: a1:1c:da:37:96:13:74:99:07:dc:e4:64:ce:26:86:4b:0d:3e: 00:4f:45:69:84:b4:c8:75:c8:86:d1:c0:2a:34:ac:2c:2b:d1: 48:bc:53:3d:4d:3c:81:02:28:bc:2c:96:1f:bb:9d:2a:02:25: 3b:f8:e3:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h5dJ2IicWsgLZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk ZTQyNTM1OGEtYjQ2ZS00Y2Q0LWI2ZjctZDYwZDJmMTBmNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Li/w2KhDEU11rOfWVEha5X9/+orqdJ8BPOa NRQaeErMwkYWVF+Hsi1DppNZyK3t++Y1ra7YsD89TndVLN83JhvAaI9kAYelnNLn BpVlu66MnTRyOxB3W6S9lmZXm+svyic/7XDbX83lbUa2tksP42uT7bGNqrnDJnqJ tmEkWpSMVkMmmWO/kcf6Hs34rbChKMXhgMFatCtn+dPh1nQKsJ2Gf2xlD9fq837M oi3OxynzmVnXT2UZMq3Jl/9pJYC5hmIK6r3IhMsYgmI8n3d1OIuru3g4+KA/MZ40 yFz/DWrOsCLREx5epBZGZc9RQDJjqToHFHgEB73eRIC1+RwVLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmnP7LTcKvRmbyFCXCL93WhFcU3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2YwMGNhY2QtMTkxMS0z OTFkLTkyMzctNzg0MTI4YzkyZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGIHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV+lXY4xFFDLM2/BXOnhlAddLGUSPOrR0RbzT8/07l/hAoGa6j1OhEB V4CZHBSAmt5U2EUCPSWPNcPj+s/RsB7ciZRHfslzPZaw5Ph7bozuEO1Vz6cFtQLu dOJEKdRxafRZkbKs9DAbexKyd1eWZrUx1XjII50CyL3s6yE7+/qTH1sqR8r0nKkH gSea9J8SJ3SaezSFlwrzoCt4wAweFeoY2rXEF9ZRrG/G/HLuBVpIY+UF9r/2FFi3 9jPdcTcxqqAFVdII6qEc2jeWE3SZB9zkZM4mhksNPgBPRWmEtMh1yIbRwCo0rCwr 0Ui8Uz1NPIECKLwslh+7nSoCJTv444A= -----END CERTIFICATE-----Generated at Mon Mar 2 02:53:59 2026 by rpki-client