$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa File: 968256d3-cb78-314c-bb42-530413b2968f.roa (raw, json) Hash identifier: q9tHbGS3Ga/+6+8Tx9/vjyKW1mKZU9o/25UrLlO0Rc0= Subject key identifier: 8C:1D:C6:38:3B:3E:55:9D:FE:DE:A8:4E:75:26:36:A7:6C:8B:61:F0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059B4B4FE160700A14C38780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.28.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:4b:4f:e1:60:70:0a:14:c3:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=ea9cd120-f153-45bc-ae62-4c78f23f99eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d5:f1:1c:e6:b2:5e:dc:f4:74:3a:e8:d1:ad: a2:63:b9:ea:ff:92:ba:fd:23:85:8e:94:47:f7:00: b6:75:2c:50:11:28:fa:ca:6f:a4:18:05:52:c8:ca: a9:b2:f0:73:a5:86:dc:b9:15:31:79:fa:3c:b8:2b: 92:b6:71:74:e6:a9:fc:47:43:27:27:41:4d:28:59: 2a:f8:d2:c9:83:39:02:04:37:77:6e:a8:cd:58:8e: 54:3d:80:15:fd:f2:90:46:f9:dd:bf:4a:40:2d:fc: e8:96:b0:4b:ef:cb:14:7a:1f:1e:4f:dd:80:36:23: c7:6e:58:11:a9:a2:0f:0c:02:05:ee:95:ca:3f:f4: 99:70:89:fe:20:3c:7a:ca:56:7c:cf:b4:1b:f9:7f: 6b:07:a3:c9:4f:3a:2e:85:57:bc:a3:11:5d:c2:f7: 20:1c:f3:0b:88:30:da:de:62:58:f5:67:86:39:e5: 01:8b:68:fa:75:33:86:e1:3f:a7:cc:b3:96:02:8a: 98:b0:11:fb:32:6e:c3:47:25:81:48:10:41:26:da: 11:87:68:8e:8a:79:08:a0:a8:5e:7a:2f:17:bd:65: 4e:a3:28:46:4c:17:93:72:dc:24:ed:7a:c3:ae:23: a0:ab:e7:91:ec:c2:f6:2b:90:ff:52:34:4c:4c:34: 9b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1D:C6:38:3B:3E:55:9D:FE:DE:A8:4E:75:26:36:A7:6C:8B:61:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/968256d3-cb78-314c-bb42-530413b2968f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:13:11:1f:3b:4f:bb:28:3b:40:46:65:bf:7c:06:80:b0:ee: a2:4d:89:0a:2f:7b:7c:a8:77:88:78:de:0f:97:31:80:a0:63: b9:b9:1a:68:ae:8e:c0:66:2b:be:e9:d0:79:ed:35:41:87:de: df:46:9a:60:db:ee:e0:d1:96:2b:8a:ad:fe:2d:e0:c8:3e:ac: c6:3c:b9:70:cf:88:3c:18:8f:0d:90:5d:9c:db:2b:69:1d:9d: 94:6b:07:01:11:43:88:15:f6:55:f5:f4:37:01:14:ad:a4:60: c1:1a:71:5b:5f:e2:6e:64:ca:a6:c9:07:30:86:a5:7b:5a:0c: 15:ae:df:6e:02:ca:e8:da:e9:eb:e8:b7:10:00:0e:60:a0:8e: de:f0:a8:2f:35:1d:74:c8:7d:2f:2d:91:ba:11:81:fa:ec:ed: 57:25:84:a9:a6:44:6a:af:80:a7:11:0b:fa:f4:91:c2:01:91: 7e:f8:95:94:e3:f5:1e:5b:b6:70:81:07:a9:11:88:b9:cc:a3: 43:7c:1b:84:e1:ef:db:e0:8e:55:9c:90:ff:b5:2e:19:db:ad: e6:82:32:3f:d1:80:2a:ec:1e:b7:a1:b1:e8:bd:bb:e7:46:d3: 1e:72:e9:1e:7a:6e:fe:55:bd:51:f6:c1:f4:4f:24:a7:01:79: 9f:26:43:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fm0tP4WBwChTDh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZWE5Y2QxMjAtZjE1My00NWJjLWFlNjItNGM3OGYyM2Y5OWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktXxHOayXtz0dDro0a2iY7nq/5K6/SOFjpRH 9wC2dSxQESj6ym+kGAVSyMqpsvBzpYbcuRUxefo8uCuStnF05qn8R0MnJ0FNKFkq +NLJgzkCBDd3bqjNWI5UPYAV/fKQRvndv0pALfzolrBL78sUeh8eT92ANiPHblgR qaIPDAIF7pXKP/SZcIn+IDx6ylZ8z7Qb+X9rB6PJTzouhVe8oxFdwvcgHPMLiDDa 3mJY9WeGOeUBi2j6dTOG4T+nzLOWAoqYsBH7Mm7DRyWBSBBBJtoRh2iOinkIoKhe ei8XvWVOoyhGTBeTctwk7XrDriOgq+eR7ML2K5D/UjRMTDSbzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwdxjg7PlWd/t6oTnUmNqdsi2HwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTY4MjU2ZDMtY2I3OC0z MTRjLWJiNDItNTMwNDEzYjI5NjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4TER87T7soO0BGZb98BoCw7qJNiQove3yod4h43g+XMYCgY7m5Gmiu jsBmK77p0HntNUGH3t9GmmDb7uDRliuKrf4t4Mg+rMY8uXDPiDwYjw2QXZzbK2kd nZRrBwERQ4gV9lX19DcBFK2kYMEacVtf4m5kyqbJBzCGpXtaDBWu324Cyuja6evo txAADmCgjt7wqC81HXTIfS8tkboRgfrs7VclhKmmRGqvgKcRC/r0kcIBkX74lZTj 9R5btnCBB6kRiLnMo0N8G4Th79vgjlWckP+1LhnbreaCMj/RgCrsHrehsei9u+dG 0x5y6R56bv5VvVH2wfRPJKcBeZ8mQ7I= -----END CERTIFICATE-----Generated at Sat Jun 13 16:35:09 2026 by rpki-client