$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5649878e-e982-39bb-9d15-912d6b1f027b.roa File: 5649878e-e982-39bb-9d15-912d6b1f027b.roa (raw, json) Hash identifier: 2zkO+qHdNfWo9Kh4BgnPTmXGleA59fE03a1euM9KznY= Subject key identifier: DD:27:C0:88:87:86:F8:36:15:54:55:27:76:2A:BC:75:48:62:AB:34 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C4441172452F87AA8F9053720 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5649878e-e982-39bb-9d15-912d6b1f027b.roa Signing time: Mon 22 Dec 2025 02:00:32 +0000 ROA not before: Mon 22 Dec 2025 02:00:32 +0000 ROA not after: Sun 22 Mar 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.29.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:44:41:17:24:52:f8:7a:a8:f9:05:37:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 02:00:32 2025 GMT Not After : Mar 22 01:00:32 2026 GMT Subject: CN=8f462941-6dd0-45a0-ad12-e3d1b23914b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:77:d5:32:6c:92:d5:e4:28:56:51:99:b1:ff: 4f:f2:e8:01:69:9f:79:21:16:53:f7:5d:bd:99:84: 4a:e8:d8:63:40:91:38:fa:d0:fb:e5:a2:0e:54:39: 98:e5:69:d1:4e:6e:8f:fc:90:7a:e8:a2:62:d2:1f: 1a:6e:8b:3f:42:a5:6c:61:c5:8d:fe:59:0e:5d:3d: c3:42:01:cc:ec:14:bc:48:47:51:76:86:19:d2:b0: 12:70:e2:fe:0a:7c:ff:0e:5c:f4:20:71:70:93:fe: e7:ee:54:df:c0:f8:bd:ad:f6:d5:2f:93:f6:59:ab: 46:a1:d2:2b:b5:e3:a4:24:6e:00:40:06:aa:c6:e1: f3:48:a8:7d:83:0c:bc:7b:4b:47:42:6a:aa:31:14: 5b:4e:9c:47:ee:66:80:8a:b7:db:db:9a:09:01:a0: a4:70:44:f1:32:71:86:0f:0b:5e:f1:58:51:81:80: ed:fb:f6:ab:01:4e:93:95:99:c0:64:3f:25:93:fb: 89:06:a8:f4:02:ca:d4:c9:74:d9:a4:f1:6e:2a:e5: e6:de:e0:18:ed:24:b9:2c:ed:f3:08:da:8a:e4:b8: c3:4c:c5:b4:56:6c:cc:89:2e:e1:ce:b9:a0:38:c2: d9:50:37:66:2e:6f:32:a9:a5:60:4b:4e:d2:d1:52: d6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:27:C0:88:87:86:F8:36:15:54:55:27:76:2A:BC:75:48:62:AB:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5649878e-e982-39bb-9d15-912d6b1f027b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:8b:26:e0:cb:25:b0:de:b1:11:31:56:9d:13:48:4b:58:2b: 6a:43:c7:de:80:9c:1c:81:81:b2:56:83:f9:ff:9e:02:9d:f7: 60:c1:24:57:b9:b8:99:59:57:3a:b4:07:bc:71:34:c8:d3:a0: 1e:8b:86:92:64:70:ae:b5:a6:0f:17:9f:f4:c5:85:d7:e1:b0: ff:99:fa:1c:0d:18:f7:ce:99:92:28:7d:70:2f:1c:3f:b6:1a: 09:51:83:24:eb:14:26:30:34:16:6e:81:35:cc:8d:17:92:d7: 17:37:e1:72:e3:3a:09:1d:80:9d:e5:ef:f4:ce:fc:b8:9c:a0: a8:1c:b3:91:07:04:70:d9:d4:90:ee:a9:f8:8e:79:4c:ce:0b: 4a:ec:48:cc:01:ff:06:19:36:78:ef:fd:70:a1:ca:1f:06:38: c5:7f:af:77:63:eb:28:b0:6a:72:b4:af:69:b3:7d:b4:a2:f4: 4f:1c:9f:a8:39:09:14:bc:31:cc:87:b9:a3:73:b3:da:f7:5d: 16:6e:1a:58:ae:27:8d:10:c8:fc:57:e8:e5:10:78:33:f9:ab: 1f:6e:ab:09:a4:49:26:3e:6d:c8:62:cc:e9:14:fd:8c:6a:60: 64:5c:87:f5:a3:ea:78:e6:d2:ee:ff:99:e7:39:d5:8d:b6:ca: ed:ea:2c:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExEQRckUvh6qPkFNyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjAyMDAzMloXDTI2MDMyMjAxMDAzMlowLzEtMCsGA1UEAxMk OGY0NjI5NDEtNmRkMC00NWEwLWFkMTItZTNkMWIyMzkxNGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXfVMmyS1eQoVlGZsf9P8ugBaZ95IRZT9129 mYRK6NhjQJE4+tD75aIOVDmY5WnRTm6P/JB66KJi0h8abos/QqVsYcWN/lkOXT3D QgHM7BS8SEdRdoYZ0rAScOL+Cnz/Dlz0IHFwk/7n7lTfwPi9rfbVL5P2WatGodIr teOkJG4AQAaqxuHzSKh9gwy8e0tHQmqqMRRbTpxH7maAirfb25oJAaCkcETxMnGG Dwte8VhRgYDt+/arAU6TlZnAZD8lk/uJBqj0AsrUyXTZpPFuKuXm3uAY7SS5LO3z CNqK5LjDTMW0VmzMiS7hzrmgOMLZUDdmLm8yqaVgS07S0VLWHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0nwIiHhvg2FVRVJ3YqvHVIYqs0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTY0OTg3OGUtZTk4Mi0z OWJiLTlkMTUtOTEyZDZiMWYwMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR2MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6LJuDLJbDesRExVp0TSEtYK2pDx96AnByBgbJWg/n/ngKd92DBJFe5 uJlZVzq0B7xxNMjToB6LhpJkcK61pg8Xn/TFhdfhsP+Z+hwNGPfOmZIofXAvHD+2 GglRgyTrFCYwNBZugTXMjReS1xc34XLjOgkdgJ3l7/TO/LicoKgcs5EHBHDZ1JDu qfiOeUzOC0rsSMwB/wYZNnjv/XChyh8GOMV/r3dj6yiwanK0r2mzfbSi9E8cn6g5 CRS8McyHuaNzs9r3XRZuGliuJ40QyPxX6OUQeDP5qx9uqwmkSSY+bchizOkU/Yxq YGRch/Wj6njm0u7/mec51Y22yu3qLHk= -----END CERTIFICATE-----Generated at Mon Mar 2 04:17:13 2026 by rpki-client