$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b005c65-376f-3814-9c4b-33d2d6b1966f.roa File: 9b005c65-376f-3814-9c4b-33d2d6b1966f.roa (raw, json) Hash identifier: KJVcFoP4QnDr8i3ELW8BInofm++NdPjD0UB0zkspmvo= Subject key identifier: CE:3E:15:A2:89:31:91:AB:C9:02:C3:FD:71:7F:91:BC:68:C7:5F:E7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CAE5EB2EAF21E423FA0210680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b005c65-376f-3814-9c4b-33d2d6b1966f.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.28.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:b2:ea:f2:1e:42:3f:a0:21:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=8cf18e9d-6a6d-4f1b-84e9-93bf70648ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f2:06:43:2b:a4:60:2f:e2:43:33:aa:d0:31: 62:f9:52:bb:91:ef:07:06:1a:74:1c:30:a8:8f:be: d7:64:fd:b7:90:bc:f7:42:9d:b2:08:e0:14:40:99: fc:e2:f1:c8:82:fb:c7:48:e1:53:1e:b1:26:40:35: 7a:70:d1:e1:53:92:e9:af:98:a0:fd:11:e6:4d:fb: 87:30:c4:07:4c:cd:eb:e6:94:10:5d:7e:c3:ba:f9: f4:9d:15:39:bf:63:6f:ef:27:35:2d:78:11:cd:ae: 4a:60:f3:6b:2a:8b:57:8d:98:a2:20:ca:b5:7a:b0: a7:0d:30:68:03:0e:40:b9:6a:d7:58:fe:cf:e2:cb: 6f:84:36:e7:b7:3c:87:54:c5:cc:1b:71:78:a9:33: 36:7c:0d:6b:6d:a0:55:4a:57:44:e4:77:76:0d:5f: ff:73:5a:2a:89:91:bd:a4:80:26:4d:78:6c:ed:a9: 05:f4:10:c5:e6:e5:fb:35:5a:52:53:ee:ee:89:87: 1a:00:ef:58:47:cd:a5:25:d1:8f:ed:25:d1:c9:c7: 7b:72:5b:5e:e8:ee:3f:c8:7c:9d:b9:5e:97:b0:ec: bf:b1:39:cd:bd:5c:55:ed:32:96:7c:5b:38:fe:1d: e1:c8:6b:e9:a7:43:de:7b:ec:a3:47:0b:19:4b:b0: 23:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3E:15:A2:89:31:91:AB:C9:02:C3:FD:71:7F:91:BC:68:C7:5F:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b005c65-376f-3814-9c4b-33d2d6b1966f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b6:0d:42:28:9c:bd:ef:2a:ee:66:4c:4d:50:f3:9c:4b:49: 17:08:f3:e6:22:49:a6:9c:8c:1c:90:c2:30:64:71:75:78:b7: 47:78:81:96:8c:fa:ac:c9:4f:8e:28:7c:73:a1:ad:b6:ff:a5: b1:76:1c:0d:2e:a7:1a:48:7e:58:ed:ff:4e:8f:a2:a7:4d:e7: 2d:64:14:b0:5d:f9:25:6c:14:b8:a9:a8:a5:70:c1:fe:c1:f9: 68:0a:20:b3:26:b4:5d:91:41:75:26:2a:11:71:b1:20:a7:4a: f3:61:b0:d4:c8:18:ce:fb:ce:0b:12:b7:d2:3a:47:6b:df:26: e0:6f:c6:7c:a6:58:05:be:bd:18:5b:35:79:29:92:89:cb:86: fd:af:e2:4a:58:86:62:ba:6e:dd:7a:96:d1:75:14:40:61:15: a1:7c:05:18:9c:eb:04:72:a9:6b:4b:3e:89:7c:44:3f:3c:1f: e6:7a:d4:e6:93:54:51:0a:47:34:d3:ba:d6:28:2c:3f:7c:97: 2c:20:15:39:92:e0:c2:e1:fd:de:85:b0:af:22:02:2f:87:a4: 43:67:2b:5f:c5:58:a1:b6:35:61:8b:40:67:05:d3:c5:d7:32: 3e:e5:ad:28:83:8e:75:ec:90:06:78:d0:26:49:b0:50:59:5c: ec:fa:22:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXrLq8h5CP6AhBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OGNmMThlOWQtNmE2ZC00ZjFiLTg0ZTktOTNiZjcwNjQ4Y2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/IGQyukYC/iQzOq0DFi+VK7ke8HBhp0HDCo j77XZP23kLz3Qp2yCOAUQJn84vHIgvvHSOFTHrEmQDV6cNHhU5Lpr5ig/RHmTfuH MMQHTM3r5pQQXX7Duvn0nRU5v2Nv7yc1LXgRza5KYPNrKotXjZiiIMq1erCnDTBo Aw5AuWrXWP7P4stvhDbntzyHVMXMG3F4qTM2fA1rbaBVSldE5Hd2DV//c1oqiZG9 pIAmTXhs7akF9BDF5uX7NVpSU+7uiYcaAO9YR82lJdGP7SXRycd7clte6O4/yHyd uV6XsOy/sTnNvVxV7TKWfFs4/h3hyGvpp0Pee+yjRwsZS7Aj8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4+FaKJMZGryQLD/XF/kbxox1/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWIwMDVjNjUtMzc2Zi0z ODE0LTljNGItMzNkMmQ2YjE5NjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRx0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK2DUIonL3vKu5mTE1Q85xLSRcI8+YiSaacjByQwjBkcXV4t0d4gZaM +qzJT44ofHOhrbb/pbF2HA0upxpIfljt/06PoqdN5y1kFLBd+SVsFLipqKVwwf7B +WgKILMmtF2RQXUmKhFxsSCnSvNhsNTIGM77zgsSt9I6R2vfJuBvxnymWAW+vRhb NXkpkonLhv2v4kpYhmK6bt16ltF1FEBhFaF8BRic6wRyqWtLPol8RD88H+Z61OaT VFEKRzTTutYoLD98lywgFTmS4MLh/d6FsK8iAi+HpENnK1/FWKG2NWGLQGcF08XX Mj7lrSiDjnXskAZ40CZJsFBZXOz6Is8= -----END CERTIFICATE-----Generated at Sun Mar 1 23:01:23 2026 by rpki-client