$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58f7f072-050c-37e7-98d2-acb0dce8d897.roa File: 58f7f072-050c-37e7-98d2-acb0dce8d897.roa (raw, json) Hash identifier: q0KWkB1vPOjZPFN5W1adI3jfSYMTqN3fcd6k/HXcyhQ= Subject key identifier: 35:9A:D6:4B:B3:8B:80:A0:DA:5D:73:48:0D:C3:60:4B:71:87:57:27 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E0435D66D66358C9843D73680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58f7f072-050c-37e7-98d2-acb0dce8d897.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 30036 IP address blocks: 173.29.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:35:d6:6d:66:35:8c:98:43:d7:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=49eb4fbb-1676-46d6-b348-7d63cc2e9614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2d:61:32:c4:6d:54:16:29:b9:c1:9a:d6:cd: e9:71:8c:67:6b:ee:2d:a1:74:91:2e:cc:a1:de:3e: 35:22:bf:98:d2:34:66:ba:17:df:b7:fd:7b:8e:08: e3:ba:df:4b:5a:d7:83:45:99:ab:24:9d:1b:16:38: 85:ae:ee:85:eb:62:99:9e:61:77:c6:9f:66:4d:b7: 61:e7:36:f5:a3:e1:52:7a:68:ba:93:4e:92:20:9e: 1e:3a:9b:01:1e:9a:98:1e:bd:f0:c4:1c:11:3d:6f: 40:85:e9:34:fe:c6:cb:3f:b9:a1:25:15:85:2f:cb: b1:07:e4:30:1c:80:18:7b:ff:f7:83:09:98:c0:08: 9f:27:78:0f:37:b1:ea:2d:5d:6b:88:5c:9e:7e:19: a7:5e:e4:33:ae:de:8e:fa:29:1a:b0:74:75:9c:af: 93:16:8f:91:a2:3c:82:b5:55:9a:bb:b7:7f:d1:59: 37:24:3c:f3:33:8d:56:a8:9f:18:4c:89:53:12:06: d9:14:91:44:9f:8a:77:cc:d5:6c:04:9e:5c:c8:f4: b9:c1:d2:19:59:0f:80:da:35:ce:f9:eb:a2:a6:1d: 35:03:aa:14:ac:70:02:32:37:e1:49:53:79:96:d0: db:15:71:0b:56:68:24:09:76:05:3b:89:ec:c2:31: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9A:D6:4B:B3:8B:80:A0:DA:5D:73:48:0D:C3:60:4B:71:87:57:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58f7f072-050c-37e7-98d2-acb0dce8d897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:1d:97:7a:aa:47:4a:e0:3d:31:a9:31:07:15:7a:42:af:7d: 41:eb:ca:3d:71:30:1d:36:fc:12:08:6c:9e:5b:32:1b:92:0a: 73:92:5f:49:b3:4d:6b:b2:34:d8:bd:f3:87:20:70:6d:08:7c: 6d:e4:8d:88:34:59:78:f5:44:b1:bd:44:3b:79:43:7d:ef:f6: 7b:61:78:35:71:4b:02:e2:10:19:93:ba:a5:e1:52:b1:4a:67: 59:9b:4d:3e:bb:20:33:66:44:dc:7e:6c:ab:96:bd:27:63:2e: ca:51:15:73:d5:05:93:d3:32:19:47:14:a7:69:de:db:b5:a7: 41:5e:ce:9d:16:87:f2:06:a8:e1:d2:ad:31:44:a8:95:d4:8c: b3:31:13:6d:42:f3:7c:84:82:19:94:94:84:8b:b7:50:02:17: 3c:24:5c:30:b6:df:04:23:38:f7:d4:f4:3f:fb:c3:b9:c4:af: 35:c9:ec:9f:eb:74:75:ba:0a:4a:1c:2c:f8:a3:21:c1:20:47: 46:40:f0:1c:dc:72:9f:14:6d:05:c5:d1:75:68:b3:9d:42:3e: d2:0d:97:cf:64:dc:d7:3a:d2:1a:54:bf:c9:cc:f4:29:df:b9: 2c:1b:28:e1:f0:c2:25:ee:02:0d:5b:d1:50:6a:7f:b2:84:40: 20:e6:78:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENdZtZjWMmEPXNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk NDllYjRmYmItMTY3Ni00NmQ2LWIzNDgtN2Q2M2NjMmU5NjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy1hMsRtVBYpucGa1s3pcYxna+4toXSRLsyh 3j41Ir+Y0jRmuhfft/17jgjjut9LWteDRZmrJJ0bFjiFru6F62KZnmF3xp9mTbdh 5zb1o+FSemi6k06SIJ4eOpsBHpqYHr3wxBwRPW9Ahek0/sbLP7mhJRWFL8uxB+Qw HIAYe//3gwmYwAifJ3gPN7HqLV1riFyefhmnXuQzrt6O+ikasHR1nK+TFo+RojyC tVWau7d/0Vk3JDzzM41WqJ8YTIlTEgbZFJFEn4p3zNVsBJ5cyPS5wdIZWQ+A2jXO +euiph01A6oUrHACMjfhSVN5ltDbFXELVmgkCXYFO4nswjFKCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWa1kuzi4Cg2l1zSA3DYEtxh1cnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNThmN2YwNzItMDUwYy0z N2U3LTk4ZDItYWNiMGRjZThkODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR25MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEdl3qqR0rgPTGpMQcVekKvfUHryj1xMB02/BIIbJ5bMhuSCnOSX0mz TWuyNNi984cgcG0IfG3kjYg0WXj1RLG9RDt5Q33v9ntheDVxSwLiEBmTuqXhUrFK Z1mbTT67IDNmRNx+bKuWvSdjLspRFXPVBZPTMhlHFKdp3tu1p0Fezp0Wh/IGqOHS rTFEqJXUjLMxE21C83yEghmUlISLt1ACFzwkXDC23wQjOPfU9D/7w7nErzXJ7J/r dHW6CkocLPijIcEgR0ZA8Bzccp8UbQXF0XVos51CPtINl89k3Nc60hpUv8nM9Cnf uSwbKOHwwiXuAg1b0VBqf7KEQCDmeGA= -----END CERTIFICATE-----Generated at Sat Jun 13 16:08:39 2026 by rpki-client