$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82b311c5-3c4d-31f6-89ee-0ff27154e35a.roa File: 82b311c5-3c4d-31f6-89ee-0ff27154e35a.roa (raw, json) Hash identifier: k45pDafv0C+6UDGy7ONfIyLLAnIy55dN89dtVlqWEP8= Subject key identifier: B2:4A:C4:E3:48:7A:D9:56:A2:F2:F7:7D:B8:49:B7:A7:08:0E:E0:E0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DBC121B086B180C345C080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82b311c5-3c4d-31f6-89ee-0ff27154e35a.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.29.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:c1:21:b0:86:b1:80:c3:45:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=6101565e-c7f9-4592-9538-494187c4e14e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:42:30:e0:2f:93:48:17:25:2c:b1:45:bb: cc:2b:b6:57:cf:6d:af:1b:de:91:1c:0c:fd:a1:95: 0c:1e:c2:9e:9f:27:15:cb:b4:d5:bc:74:0d:90:89: 01:8f:e5:cf:6d:cd:a8:23:ef:2d:28:ce:ba:77:b7: 58:a1:5f:0d:c0:b0:50:78:93:a9:98:c3:ed:04:11: 0c:9d:5c:6e:aa:63:89:df:9d:08:3f:b9:79:1a:cc: fb:a7:88:c0:73:27:53:6e:44:d2:56:c3:94:0d:ec: f7:5d:07:23:ef:f9:f7:cd:76:38:e6:10:3e:b4:e2: 20:94:6b:11:9d:7b:3a:9a:a8:aa:6b:46:44:1b:62: 61:65:61:fc:74:4e:d0:34:2c:88:d9:33:32:30:f1: 1e:47:54:97:d9:ad:c9:3f:b6:68:e6:0d:83:f0:75: 26:f5:02:b5:a7:40:e7:48:9f:b4:f2:5e:07:2a:04: 78:66:ad:cf:fe:da:4a:72:76:af:a1:69:26:dc:b2: bb:ea:b4:d0:c6:87:87:ce:26:d6:3f:aa:6f:ee:ef: f5:ff:46:f9:3b:c7:05:31:e4:83:07:31:80:c2:9c: a5:ea:53:eb:d4:a3:a1:6f:c3:73:40:c3:a6:f1:c5: 1d:e8:2a:8f:9b:ba:4c:3b:9e:a3:c9:4a:73:dc:26: 88:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4A:C4:E3:48:7A:D9:56:A2:F2:F7:7D:B8:49:B7:A7:08:0E:E0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/82b311c5-3c4d-31f6-89ee-0ff27154e35a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:53:c5:3c:e0:6b:76:6d:15:07:ae:11:d2:78:fa:09:9a:19: 48:71:11:81:8f:92:b6:08:ca:43:29:4f:4d:df:38:15:08:09: 01:15:e4:31:c4:f4:47:49:88:0e:17:33:e2:d8:5e:29:74:6a: 3c:be:d4:72:9e:b3:46:61:39:d6:a1:cc:7b:66:ff:3e:14:e3: 94:d1:31:e4:b2:f9:1b:24:50:52:5b:54:27:d4:a5:e5:eb:26: fc:c2:da:e1:98:96:74:6d:7c:9d:9f:93:d1:f4:3f:17:fe:80: 02:ab:fa:a2:0c:f3:28:ff:bd:8e:d4:40:a3:9f:b8:22:08:26: b7:bc:a2:f4:9c:0f:28:08:25:cc:47:6f:e0:ed:ba:70:87:fa: 1d:67:26:16:3c:88:38:2f:b2:8a:71:07:c3:dd:5a:74:a7:7b: da:d1:b5:f1:05:63:eb:6c:1d:01:13:81:42:7d:9e:5a:c9:58: d2:34:bb:98:94:58:a2:bc:37:51:e0:4a:48:c5:e8:37:67:4d: 24:cd:ee:11:b4:ec:00:0d:79:8f:5a:09:1d:e8:f4:ed:ff:67: a6:ba:14:bd:93:59:de:f7:00:2b:e7:b5:9f:33:95:ec:3b:c0: 34:ec:f9:31:c9:2d:27:d8:90:6c:45:e7:17:05:ae:b0:9d:af: 27:8d:fa:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC28EhsIaxgMNFwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NjEwMTU2NWUtYzdmOS00NTkyLTk1MzgtNDk0MTg3YzRlMTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdRCMOAvk0gXJSyxRbvMK7ZXz22vG96RHAz9 oZUMHsKenycVy7TVvHQNkIkBj+XPbc2oI+8tKM66d7dYoV8NwLBQeJOpmMPtBBEM nVxuqmOJ350IP7l5Gsz7p4jAcydTbkTSVsOUDez3XQcj7/n3zXY45hA+tOIglGsR nXs6mqiqa0ZEG2JhZWH8dE7QNCyI2TMyMPEeR1SX2a3JP7Zo5g2D8HUm9QK1p0Dn SJ+08l4HKgR4Zq3P/tpKcnavoWkm3LK76rTQxoeHzibWP6pv7u/1/0b5O8cFMeSD BzGAwpyl6lPr1KOhb8NzQMOm8cUd6CqPm7pMO56jyUpz3CaIwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJKxONIetlWovL3fbhJt6cIDuDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODJiMzExYzUtM2M0ZC0z MWY2LTg5ZWUtMGZmMjcxNTRlMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElTxTzga3ZtFQeuEdJ4+gmaGUhxEYGPkrYIykMpT03fOBUICQEV5DHE 9EdJiA4XM+LYXil0ajy+1HKes0ZhOdahzHtm/z4U45TRMeSy+RskUFJbVCfUpeXr JvzC2uGYlnRtfJ2fk9H0Pxf+gAKr+qIM8yj/vY7UQKOfuCIIJre8ovScDygIJcxH b+DtunCH+h1nJhY8iDgvsopxB8PdWnSne9rRtfEFY+tsHQETgUJ9nlrJWNI0u5iU WKK8N1HgSkjF6DdnTSTN7hG07AANeY9aCR3o9O3/Z6a6FL2TWd73ACvntZ8zlew7 wDTs+THJLSfYkGxF5xcFrrCdryeN+ng= -----END CERTIFICATE-----Generated at Mon Mar 2 02:57:03 2026 by rpki-client