$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a4db36a-637e-343a-9b4f-81b75136b0d8.roa File: 4a4db36a-637e-343a-9b4f-81b75136b0d8.roa (raw, json) Hash identifier: CHCo3f+hgR7Mzi0MKLDFQj2r9k+x1N9QIQ8gZItGwIw= Subject key identifier: 97:3F:2E:8D:E9:83:AF:CE:AE:EB:1D:10:2B:73:21:B8:70:48:A8:8E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CAE5E6602E54DB244CCC90A60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a4db36a-637e-343a-9b4f-81b75136b0d8.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.28.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:66:02:e5:4d:b2:44:cc:c9:0a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=f3bbfdbb-b296-417c-9c5d-3cfa6c57b969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c6:e0:01:78:e9:a2:90:b5:f6:c4:1c:18:0c: bb:83:df:f3:06:17:0c:73:b4:14:d7:c6:75:fe:83: 6f:2b:e0:2a:55:50:51:9f:e8:2a:e8:97:c9:5f:4a: 8b:6a:c3:63:71:1b:09:a6:b1:b6:5b:bc:1f:7e:3d: 83:d5:a9:7c:6f:80:9c:23:d8:ff:1e:2a:69:9b:27: 37:3b:94:a7:ea:9d:16:e2:8d:83:8c:e0:b3:25:f0: 41:8d:24:80:64:f0:4d:f5:6b:72:2b:e3:b0:96:db: d7:a2:cb:20:82:5b:a3:a6:0f:34:bf:7d:a3:cf:c3: 46:64:27:e4:66:41:17:3c:ab:24:e8:63:77:64:6c: 1b:76:22:67:9b:ac:95:28:69:11:36:d8:68:b1:a5: 7a:6b:87:54:66:7c:d5:dc:f4:0d:ca:d9:51:89:b1: be:72:eb:3d:50:91:77:cf:eb:94:86:c6:00:a6:ba: 78:72:03:76:0a:db:7e:7d:c0:ee:de:51:e2:a1:54: e9:5c:e7:82:29:19:06:0b:40:61:78:bf:93:ca:4a: 3a:da:95:5c:75:98:86:34:d9:6a:42:8c:90:17:27: 89:7e:1c:42:c7:38:bd:a4:f2:64:0b:89:7d:95:4a: 28:e6:34:ad:db:cf:b1:85:5f:5e:6d:c6:f1:1f:82: 31:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3F:2E:8D:E9:83:AF:CE:AE:EB:1D:10:2B:73:21:B8:70:48:A8:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a4db36a-637e-343a-9b4f-81b75136b0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:27:ee:09:7a:67:b7:ee:a1:dc:6b:dd:79:2b:f2:c8:26:30: bd:5b:74:53:f0:4f:39:2c:ef:0c:b7:f5:00:54:e2:31:be:ae: 0b:a5:8d:55:b7:3c:06:48:6a:10:d1:52:ea:6f:f0:3c:88:34: 3d:01:03:72:49:07:a9:14:c2:6e:85:09:f5:d0:27:6e:fd:03: f5:58:ed:a2:5c:6d:5d:38:47:6f:f4:38:37:2e:0d:e4:c5:1e: 8f:5a:a1:4e:bc:ab:5f:bf:84:bc:df:5f:62:1d:77:f9:f1:88: d9:2f:02:f8:65:6a:77:2b:5d:fd:b9:9c:f2:4a:01:2a:cd:81: 53:38:8a:f1:d2:ab:4e:ab:28:6b:9a:9b:b3:aa:b9:ad:14:a2: 88:e3:93:d1:82:31:93:ab:52:2e:85:7e:87:f4:23:16:e6:c6: 13:c1:0a:1e:d8:ef:19:f5:a7:d4:14:10:48:1b:b2:fd:7e:50: 25:e4:1e:2b:ad:a6:5f:ab:24:04:65:53:27:37:47:b9:5e:6b: 1e:d2:30:ab:fc:9b:c9:13:06:13:69:46:43:29:04:e2:5d:06: 66:e2:40:09:69:80:74:b3:a0:7a:f8:d7:95:f1:3f:fb:23:ff: 10:44:a2:14:d7:f0:a2:cf:6e:12:f5:30:9d:69:aa:40:9d:d8: f6:20:01:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXmYC5U2yRMzJCmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjNiYmZkYmItYjI5Ni00MTdjLTljNWQtM2NmYTZjNTdiOTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMbgAXjpopC19sQcGAy7g9/zBhcMc7QU18Z1 /oNvK+AqVVBRn+gq6JfJX0qLasNjcRsJprG2W7wffj2D1al8b4CcI9j/Hippmyc3 O5Sn6p0W4o2DjOCzJfBBjSSAZPBN9WtyK+OwltvXossgglujpg80v32jz8NGZCfk ZkEXPKsk6GN3ZGwbdiJnm6yVKGkRNthosaV6a4dUZnzV3PQNytlRibG+cus9UJF3 z+uUhsYAprp4cgN2Ctt+fcDu3lHioVTpXOeCKRkGC0BheL+Tyko62pVcdZiGNNlq QoyQFyeJfhxCxzi9pPJkC4l9lUoo5jSt28+xhV9ebcbxH4Ix+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJc/Lo3pg6/OrusdECtzIbhwSKiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGE0ZGIzNmEtNjM3ZS0z NDNhLTliNGYtODFiNzUxMzZiMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUn7gl6Z7fuodxr3Xkr8sgmML1bdFPwTzks7wy39QBU4jG+rguljVW3 PAZIahDRUupv8DyIND0BA3JJB6kUwm6FCfXQJ279A/VY7aJcbV04R2/0ODcuDeTF Ho9aoU68q1+/hLzfX2Idd/nxiNkvAvhlancrXf25nPJKASrNgVM4ivHSq06rKGua m7Oqua0Uoojjk9GCMZOrUi6Ffof0IxbmxhPBCh7Y7xn1p9QUEEgbsv1+UCXkHiut pl+rJARlUyc3R7leax7SMKv8m8kTBhNpRkMpBOJdBmbiQAlpgHSzoHr415XxP/sj /xBEohTX8KLPbhL1MJ1pqkCd2PYgATc= -----END CERTIFICATE-----Generated at Mon Mar 2 00:56:10 2026 by rpki-client