$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/653be4d7-a460-3355-9824-3a25e54a7b42.roa File: 653be4d7-a460-3355-9824-3a25e54a7b42.roa (raw, json) Hash identifier: IyeX3/Xhj9MrYbSGGcHGEinA7A66MMZvvY725uWoeUE= Subject key identifier: 2A:6D:BB:4E:01:AC:42:28:4A:0C:06:56:0A:13:6B:70:C9:49:24:4B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CAE5EC4482CBB5F50DA1AAD00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/653be4d7-a460-3355-9824-3a25e54a7b42.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.28.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:c4:48:2c:bb:5f:50:da:1a:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a6a8d511-b36d-490c-b949-85b44af900a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d3:b3:02:c9:f1:b3:90:36:b3:10:e7:23:be: e7:61:c5:67:0f:3d:6b:c5:00:cf:0a:14:53:82:e0: 9d:7a:0a:a6:a6:19:80:18:5b:41:3a:ac:f2:b5:34: 06:31:e9:8b:81:cd:7a:8f:66:da:fc:a1:5c:12:c3: d6:c2:dd:f2:5b:44:bd:16:c8:b8:06:28:66:42:42: 91:e5:0a:1c:88:89:b9:70:2a:ea:75:75:db:db:b2: 29:6e:1b:6a:39:27:bc:12:66:18:ed:a4:8a:d6:79: 61:50:fd:e7:b9:1f:f5:41:51:ef:e7:e6:f7:fe:38: ba:7b:43:82:21:87:ea:f1:2b:d4:13:fc:2f:26:b5: f2:23:33:63:53:78:f1:7a:d2:a9:46:4b:0a:14:23: ac:bc:5c:5a:5e:1f:f6:4c:b1:5d:9b:80:58:ba:92: 9e:ad:d8:8f:26:66:2b:5e:e6:35:19:12:1c:45:0f: c9:95:ad:b9:4b:dc:fb:04:b3:99:17:41:94:e5:8c: ab:2a:86:7d:5d:f0:51:2e:81:c6:b1:56:22:ff:98: ef:3d:c8:3b:3e:c6:b4:77:9d:dc:8d:6d:c4:b7:d7: 0f:f0:2c:4a:5c:b3:53:c4:7e:a6:74:36:25:70:7a: b1:76:b6:d5:ee:8f:a3:7e:60:47:f9:97:f6:b0:a8: df:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6D:BB:4E:01:AC:42:28:4A:0C:06:56:0A:13:6B:70:C9:49:24:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/653be4d7-a460-3355-9824-3a25e54a7b42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:e7:b7:e3:cf:59:7e:c3:16:e5:2e:7e:95:30:1e:76:12:79: ef:54:b8:cb:09:50:36:d2:3f:b7:40:2f:63:96:4d:0a:ee:2c: d6:6d:63:60:16:1c:d0:27:c5:53:00:56:9b:3f:cb:53:64:47: ce:14:a9:49:ee:9c:53:60:3b:42:92:81:fc:8b:48:46:9e:e7: 1e:88:e9:8e:42:a2:49:8d:4e:cc:32:71:a1:f0:45:80:5e:55: 82:39:cc:f6:64:42:7d:ca:f9:29:08:1b:26:d4:a3:3f:44:57: fe:fa:e1:63:2e:3f:f0:a2:47:de:22:b1:3b:2a:47:b3:8c:6d: b4:5e:03:59:03:f2:9d:bf:77:6d:a6:fa:2e:38:5d:50:cb:22: d9:0c:1d:97:0f:0c:40:9b:15:f7:40:02:ff:60:58:07:64:88: 58:02:57:99:82:b3:c5:ae:b0:80:2d:3b:d0:d0:0a:f0:17:e7: 8c:72:2b:76:f4:fc:4c:1d:c0:84:1d:91:0b:b7:db:3e:aa:b1: ab:3d:2f:cb:41:72:c0:79:90:2f:a5:c3:30:b8:45:4b:b0:96: 5e:35:0f:17:cc:34:81:55:2b:a1:9e:28:41:10:5f:25:11:d2: 7d:01:94:3d:63:db:8d:14:44:71:69:56:32:b2:64:5a:e3:a2: 49:4e:69:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXsRILLtfUNoarQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTZhOGQ1MTEtYjM2ZC00OTBjLWI5NDktODViNDRhZjkwMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dOzAsnxs5A2sxDnI77nYcVnDz1rxQDPChRT guCdegqmphmAGFtBOqzytTQGMemLgc16j2ba/KFcEsPWwt3yW0S9Fsi4BihmQkKR 5QociIm5cCrqdXXb27IpbhtqOSe8EmYY7aSK1nlhUP3nuR/1QVHv5+b3/ji6e0OC IYfq8SvUE/wvJrXyIzNjU3jxetKpRksKFCOsvFxaXh/2TLFdm4BYupKerdiPJmYr XuY1GRIcRQ/Jla25S9z7BLOZF0GU5YyrKoZ9XfBRLoHGsVYi/5jvPcg7Psa0d53c jW3Et9cP8CxKXLNTxH6mdDYlcHqxdrbV7o+jfmBH+Zf2sKjfewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCptu04BrEIoSgwGVgoTa3DJSSRLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjUzYmU0ZDctYTQ2MC0z MzU1LTk4MjQtM2EyNWU1NGE3YjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7nt+PPWX7DFuUufpUwHnYSee9UuMsJUDbSP7dAL2OWTQruLNZtY2AW HNAnxVMAVps/y1NkR84UqUnunFNgO0KSgfyLSEae5x6I6Y5CokmNTswycaHwRYBe VYI5zPZkQn3K+SkIGybUoz9EV/764WMuP/CiR94isTsqR7OMbbReA1kD8p2/d22m +i44XVDLItkMHZcPDECbFfdAAv9gWAdkiFgCV5mCs8WusIAtO9DQCvAX54xyK3b0 /EwdwIQdkQu32z6qsas9L8tBcsB5kC+lwzC4RUuwll41DxfMNIFVK6GeKEEQXyUR 0n0BlD1j240URHFpVjKyZFrjoklOaV8= -----END CERTIFICATE-----Generated at Mon Mar 2 08:06:20 2026 by rpki-client