$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f4be265-254f-3134-9fd7-db5733c3efcc.roa File: 3f4be265-254f-3134-9fd7-db5733c3efcc.roa (raw, json) Hash identifier: vzJ7EkkqXG5EaAbWyeq6eo9XbY3pJED+ltv/+BtpS7w= Subject key identifier: 2E:6A:E7:C7:F3:D5:AE:8E:08:6E:71:47:3A:18:A7:66:9D:69:D6:F8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C9ACC5C177EF7F62BC2FFF040 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f4be265-254f-3134-9fd7-db5733c3efcc.roa Signing time: Thu 22 Jan 2026 02:00:31 +0000 ROA not before: Thu 22 Jan 2026 02:00:31 +0000 ROA not after: Wed 22 Apr 2026 01:00:31 +0000 asID: 30036 IP address blocks: 170.52.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9a:cc:5c:17:7e:f7:f6:2b:c2:ff:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 22 02:00:31 2026 GMT Not After : Apr 22 01:00:31 2026 GMT Subject: CN=e42a71ad-893c-4ae9-89c0-1f8eb05f6792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:b9:56:5f:44:86:ea:1b:fc:01:f1:37:cd: b9:51:fe:5f:5c:35:77:55:f3:10:59:6b:4e:00:a0: 21:7b:67:42:8d:7a:89:6e:61:c8:8b:f8:9e:04:92: 95:b3:d1:53:e3:e1:da:11:1a:ad:69:73:bc:76:be: 8e:11:17:a0:bf:98:3f:e2:9e:5f:b5:72:d0:47:53: bb:f1:ee:20:e9:93:5e:06:08:3b:06:e9:01:ef:23: 9c:9b:2f:19:a8:22:30:2f:40:d2:26:a2:bd:d6:3a: 53:59:0c:8a:87:5d:f8:2d:47:78:b4:ad:27:3f:6e: 84:f1:d9:d8:a4:04:7d:ac:5a:77:97:8e:73:83:1a: aa:7f:5e:89:40:bc:c0:4c:fc:72:ae:e3:21:5c:34: 60:de:84:9d:f8:2d:cb:b2:f8:e0:1f:07:a7:87:4d: a0:c5:71:8d:47:54:0e:7a:1c:8e:46:40:70:a7:b3: 9c:d8:86:0d:c8:2e:f1:c8:d4:0b:6e:a0:ea:91:6b: 17:15:74:53:ea:e5:0c:0f:7a:16:57:1e:75:96:a0: fa:7f:8b:e3:4d:8f:9b:9a:58:7c:c6:dd:40:57:5d: 5f:a6:40:90:57:a8:f3:51:34:68:16:25:f8:b2:d9: 33:e0:b7:65:85:6d:41:41:f4:20:d9:c3:b1:db:d0: 22:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6A:E7:C7:F3:D5:AE:8E:08:6E:71:47:3A:18:A7:66:9D:69:D6:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f4be265-254f-3134-9fd7-db5733c3efcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 170.52.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:7d:52:c9:41:1a:68:f1:8b:b9:5b:54:68:b7:d9:d1:76:3c: f2:83:d7:1a:8f:73:5b:7c:b8:05:1f:96:65:6b:0a:f1:cd:60: 62:bc:2b:ca:d4:27:3b:e3:cd:d7:6d:74:56:8f:7f:68:67:b4: db:d0:69:74:a8:ca:ed:aa:14:86:69:4b:a3:fb:09:63:8f:30: f8:55:2b:cb:cc:ee:c7:99:f9:d5:c9:d0:f5:dd:97:61:ec:f0: ca:69:65:01:50:cd:e7:a8:81:55:54:b5:9d:6d:b2:fd:61:a8: c7:d1:ab:d5:51:0d:87:ee:bb:e6:51:c1:df:0c:8c:5e:f1:40: e4:d9:74:b4:18:fd:3f:08:0d:d7:d3:ec:80:b1:1b:f1:4f:37: a9:3d:0c:e0:1f:a5:62:41:6f:07:6d:bd:93:e6:e2:d9:21:39: b5:72:fc:4b:b4:96:c3:71:30:ee:93:4a:b2:45:74:55:0a:54: 00:89:55:e4:1d:6d:23:ad:13:60:df:04:66:58:dd:6c:1d:e9: 5e:62:fa:ea:bd:98:67:17:d9:0b:ac:91:14:77:1f:e6:6e:22: d3:8c:e3:02:a5:7f:67:c3:ae:47:cb:6c:7d:4d:62:9a:4e:09: 83:ad:24:bb:d7:ea:34:cf:ad:a4:ab:7b:93:14:cd:e4:da:21: f1:ac:18:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyazFwXfvf2K8L/8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyMjAyMDAzMVoXDTI2MDQyMjAxMDAzMVowLzEtMCsGA1UEAxMk ZTQyYTcxYWQtODkzYy00YWU5LTg5YzAtMWY4ZWIwNWY2NzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh+5Vl9Ehuob/AHxN825Uf5fXDV3VfMQWWtO AKAhe2dCjXqJbmHIi/ieBJKVs9FT4+HaERqtaXO8dr6OERegv5g/4p5ftXLQR1O7 8e4g6ZNeBgg7BukB7yOcmy8ZqCIwL0DSJqK91jpTWQyKh134LUd4tK0nP26E8dnY pAR9rFp3l45zgxqqf16JQLzATPxyruMhXDRg3oSd+C3LsvjgHwenh02gxXGNR1QO ehyORkBwp7Oc2IYNyC7xyNQLbqDqkWsXFXRT6uUMD3oWVx51lqD6f4vjTY+bmlh8 xt1AV11fpkCQV6jzUTRoFiX4stkz4LdlhW1BQfQg2cOx29AiIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5q58fz1a6OCG5xRzoYp2adadb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Y0YmUyNjUtMjU0Zi0z MTM0LTlmZDctZGI1NzMzYzNlZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqjQLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGp9UslBGmjxi7lbVGi32dF2PPKD1xqPc1t8uAUflmVrCvHNYGK8K8rU JzvjzddtdFaPf2hntNvQaXSoyu2qFIZpS6P7CWOPMPhVK8vM7seZ+dXJ0PXdl2Hs 8MppZQFQzeeogVVUtZ1tsv1hqMfRq9VRDYfuu+ZRwd8MjF7xQOTZdLQY/T8IDdfT 7ICxG/FPN6k9DOAfpWJBbwdtvZPm4tkhObVy/Eu0lsNxMO6TSrJFdFUKVACJVeQd bSOtE2DfBGZY3Wwd6V5i+uq9mGcX2QuskRR3H+ZuItOM4wKlf2fDrkfLbH1NYppO CYOtJLvX6jTPraSre5MUzeTaIfGsGIw= -----END CERTIFICATE-----Generated at Mon Mar 2 00:50:24 2026 by rpki-client