$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/943d775e-a80a-3bd2-8f7e-1c5e53af1957.roa File: 943d775e-a80a-3bd2-8f7e-1c5e53af1957.roa (raw, json) Hash identifier: o4s1zRJ5zslzbKAg5qrw8mzOrIINFsHLqlsnPMqQwbw= Subject key identifier: 7A:EE:65:42:AE:31:17:66:35:F7:DE:F9:A5:A6:75:C7:00:55:C5:CD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D83CB09A417C924765544B61C Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/943d775e-a80a-3bd2-8f7e-1c5e53af1957.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 30036 IP address blocks: 173.28.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:cb:09:a4:17:c9:24:76:55:44:b6:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=df5d2ac0-7b20-4fd4-8d93-7a058f7114d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ad:a0:a1:a2:3f:a3:cf:0b:f1:b0:b1:de:d6: 9d:1b:f9:bb:df:d2:eb:c1:92:56:18:32:1b:9c:ea: df:71:b0:0c:95:ba:6a:fb:95:f7:a0:0e:57:ea:0e: 18:c0:4c:d2:f5:e8:4f:09:a6:77:f9:41:ec:31:20: 48:ea:8b:16:11:92:78:58:ed:68:33:59:db:b0:b5: 34:5d:3e:6b:ca:67:3e:cf:e7:48:79:05:f2:63:b5: 6e:72:c5:15:35:40:80:53:0d:a2:28:d1:98:51:25: b4:05:df:a2:79:96:36:6c:de:24:34:38:71:5b:f4: 71:e0:fa:8b:c4:76:b2:30:18:81:03:5c:1a:91:f0: 16:df:bd:28:43:bc:43:6e:03:c8:2e:9e:c2:3a:38: 9a:d0:8c:75:e2:97:b5:9c:77:e9:25:5e:c8:d3:3b: bf:7a:52:63:91:53:8f:97:cc:45:ec:1c:a3:36:a9: 04:64:1c:df:52:51:3e:57:ea:2f:b1:80:78:79:2f: 8e:9b:5b:a5:8f:b5:a8:14:00:16:cd:7c:a1:e2:ce: 39:97:6a:b7:55:b4:cb:6c:f7:a7:97:75:ee:81:2d: a3:b6:0b:6b:3c:22:75:21:66:20:1a:62:6b:e6:64: 18:89:ad:4c:86:0f:3a:fd:bf:86:d3:01:d3:70:76: d5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EE:65:42:AE:31:17:66:35:F7:DE:F9:A5:A6:75:C7:00:55:C5:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/943d775e-a80a-3bd2-8f7e-1c5e53af1957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:4e:06:90:01:31:b9:c0:d9:d0:20:6e:86:d2:cd:be:a7:75: a6:88:53:3b:ce:81:fb:85:43:ad:44:08:40:b8:ed:c8:5f:07: 9c:67:51:08:5e:ad:af:c8:e2:fa:46:e5:cc:65:74:ba:6f:e5: 7e:d8:83:f6:a1:2d:b0:06:37:66:75:04:f7:a3:67:d8:0f:2a: f9:dd:72:3d:dd:f2:bc:6a:e5:37:05:ba:ca:61:66:46:6c:59: c0:14:e0:53:6d:b8:98:df:ec:3e:e3:0a:b9:83:64:fd:3c:26: 06:7e:33:dc:3c:aa:18:1b:57:08:ec:a7:ea:0a:2e:44:e1:07: ea:13:bb:29:3e:0e:e5:42:ff:1b:2a:98:af:07:3d:68:6e:c8: c7:9d:fd:6c:7f:e1:e5:b9:a9:b4:bc:cc:e4:b6:2b:c1:2f:12: 15:f1:b1:a3:5e:37:a4:1f:88:0d:c0:85:49:ae:8f:c1:66:fd: d1:6c:77:76:8c:60:a2:24:a0:8b:a9:f3:c5:a5:5a:ec:a2:a3: d9:0f:ec:a5:5b:c3:15:7a:7e:7b:19:d6:cc:56:f5:0b:a1:07: 78:28:a6:84:ca:cf:ea:a7:ef:81:4e:ab:10:36:93:ae:d8:cb: 47:03:3d:86:cd:45:76:fc:4b:4b:d7:9a:34:7a:14:90:1a:81: 56:d4:bd:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DywmkF8kkdlVEthwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk ZGY1ZDJhYzAtN2IyMC00ZmQ0LThkOTMtN2EwNThmNzExNGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq2goaI/o88L8bCx3tadG/m739LrwZJWGDIb nOrfcbAMlbpq+5X3oA5X6g4YwEzS9ehPCaZ3+UHsMSBI6osWEZJ4WO1oM1nbsLU0 XT5rymc+z+dIeQXyY7VucsUVNUCAUw2iKNGYUSW0Bd+ieZY2bN4kNDhxW/Rx4PqL xHayMBiBA1wakfAW370oQ7xDbgPILp7COjia0Ix14pe1nHfpJV7I0zu/elJjkVOP l8xF7ByjNqkEZBzfUlE+V+ovsYB4eS+Om1ulj7WoFAAWzXyh4s45l2q3VbTLbPen l3XugS2jtgtrPCJ1IWYgGmJr5mQYia1Mhg86/b+G0wHTcHbVXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHruZUKuMRdmNffe+aWmdccAVcXNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTQzZDc3NWUtYTgwYS0z YmQyLThmN2UtMWM1ZTUzYWYxOTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFOBpABMbnA2dAgbobSzb6ndaaIUzvOgfuFQ61ECEC47chfB5xnUQhe ra/I4vpG5cxldLpv5X7Yg/ahLbAGN2Z1BPejZ9gPKvndcj3d8rxq5TcFusphZkZs WcAU4FNtuJjf7D7jCrmDZP08JgZ+M9w8qhgbVwjsp+oKLkThB+oTuyk+DuVC/xsq mK8HPWhuyMed/Wx/4eW5qbS8zOS2K8EvEhXxsaNeN6QfiA3AhUmuj8Fm/dFsd3aM YKIkoIup88WlWuyio9kP7KVbwxV6fnsZ1sxW9QuhB3gopoTKz+qn74FOqxA2k67Y y0cDPYbNRXb8S0vXmjR6FJAagVbUvY8= -----END CERTIFICATE-----Generated at Fri Apr 17 12:40:23 2026 by rpki-client