$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bdddfac-fe95-3022-9609-50b7ce15bd39.roa File: 9bdddfac-fe95-3022-9609-50b7ce15bd39.roa (raw, json) Hash identifier: bql1zB7D8Yq1rPVBOnBP4GuxEgLSAegvwuOBYzGEHrI= Subject key identifier: BD:93:1B:D6:13:D7:47:9F:EC:23:21:83:D2:B0:5C:12:04:C1:E7:6E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CACF1D5181EDBF89949590C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bdddfac-fe95-3022-9609-50b7ce15bd39.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 30036 IP address blocks: 173.28.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:d5:18:1e:db:f8:99:49:59:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=0ad59f44-b7df-4605-85e7-6893d5b27292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c8:5e:4b:17:5e:30:d7:32:a7:b9:44:82:ca: a1:fb:55:21:03:58:d1:8b:12:7b:3f:c9:06:7c:3d: e3:ad:8e:b8:f4:1e:d7:a9:92:c5:b6:67:8d:cd:d2: 91:3c:44:6b:ef:e3:c4:c6:b6:b7:15:00:e6:57:a3: d9:ed:94:d9:23:ec:33:5d:68:d8:41:ab:40:93:e6: 81:8c:2e:4e:75:9e:06:8f:c5:71:5a:e9:57:1f:73: cd:06:ea:14:52:3b:a2:44:63:5c:49:c5:34:4e:e7: 55:94:eb:d1:88:dc:04:54:5d:67:86:a1:bc:d3:c8: 45:94:e7:fc:2f:5e:1c:29:9c:05:e8:02:e5:b2:64: 32:a4:b4:43:c0:8f:b2:48:86:69:03:5e:88:ec:b6: 61:18:32:74:fc:c1:ed:36:16:2e:f4:2d:13:e9:3c: c8:bd:22:45:c5:a9:54:8f:0d:a4:f4:6a:52:d8:e2: b1:19:c0:35:83:89:f6:b8:9d:37:9b:d1:56:1c:b0: 60:76:10:c7:34:8b:e4:5a:6b:20:67:b4:23:30:75: 6f:af:e3:f6:12:4b:44:bb:9a:cd:15:cd:dc:50:af: 7a:da:26:9d:e5:8c:5b:31:82:f1:76:eb:86:0a:6f: f7:29:88:10:13:59:5d:25:eb:27:25:8c:48:dd:1c: 26:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:93:1B:D6:13:D7:47:9F:EC:23:21:83:D2:B0:5C:12:04:C1:E7:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bdddfac-fe95-3022-9609-50b7ce15bd39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:03:83:db:ac:4b:d5:38:61:b2:38:c6:8c:67:69:b2:92:e7: 41:c5:1e:f1:11:3d:19:4a:45:e1:4f:6e:4f:8b:a9:d0:bd:e0: 28:fb:d6:1f:ab:81:08:7c:9d:ed:ab:20:4b:8a:24:f1:81:42: ae:fe:84:c7:e2:69:97:d4:67:5c:89:79:75:6e:e8:a7:de:cb: 31:d6:f3:25:5d:a9:ad:55:c9:9a:94:e9:45:6a:ae:37:b2:10: c5:6e:de:17:00:3d:55:1d:ea:a0:16:45:7c:5a:d5:d1:83:c3: fc:76:10:52:32:68:dd:94:be:57:b7:b8:45:fd:b2:40:92:28: f6:b0:34:ea:7b:0d:a5:0c:b0:30:92:b7:93:09:c9:9a:f8:62: 38:5a:08:13:fd:7e:cf:e6:1b:74:6d:69:03:a1:15:83:12:9d: b9:f4:3e:09:dc:7e:db:a9:cf:66:8a:b9:f8:19:2f:44:7e:9c: d9:3b:a1:f6:94:54:40:63:27:b8:36:85:cb:df:09:c4:a8:aa: d7:d2:9a:97:4c:17:8c:25:d4:75:0f:81:02:83:d5:65:45:21: ac:a8:85:2b:39:b0:fd:52:80:6b:10:36:c1:6c:2d:25:dd:3f: ef:52:83:50:67:81:73:11:f9:51:2c:f2:a9:3a:fc:04:d4:ab: 48:ad:7c:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8dUYHtv4mUlZDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk MGFkNTlmNDQtYjdkZi00NjA1LTg1ZTctNjg5M2Q1YjI3MjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8heSxdeMNcyp7lEgsqh+1UhA1jRixJ7P8kG fD3jrY649B7XqZLFtmeNzdKRPERr7+PExra3FQDmV6PZ7ZTZI+wzXWjYQatAk+aB jC5OdZ4Gj8VxWulXH3PNBuoUUjuiRGNcScU0TudVlOvRiNwEVF1nhqG808hFlOf8 L14cKZwF6ALlsmQypLRDwI+ySIZpA16I7LZhGDJ0/MHtNhYu9C0T6TzIvSJFxalU jw2k9GpS2OKxGcA1g4n2uJ03m9FWHLBgdhDHNIvkWmsgZ7QjMHVvr+P2EktEu5rN Fc3cUK962iad5YxbMYLxduuGCm/3KYgQE1ldJesnJYxI3RwmjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2TG9YT10ef7CMhg9KwXBIEweduMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWJkZGRmYWMtZmU5NS0z MDIyLTk2MDktNTBiN2NlMTViZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMDg9usS9U4YbI4xoxnabKS50HFHvERPRlKReFPbk+LqdC94Cj71h+r gQh8ne2rIEuKJPGBQq7+hMfiaZfUZ1yJeXVu6KfeyzHW8yVdqa1VyZqU6UVqrjey EMVu3hcAPVUd6qAWRXxa1dGDw/x2EFIyaN2Uvle3uEX9skCSKPawNOp7DaUMsDCS t5MJyZr4YjhaCBP9fs/mG3RtaQOhFYMSnbn0Pgncftupz2aKufgZL0R+nNk7ofaU VEBjJ7g2hcvfCcSoqtfSmpdMF4wl1HUPgQKD1WVFIayohSs5sP1SgGsQNsFsLSXd P+9Sg1BngXMR+VEs8qk6/ATUq0itfAw= -----END CERTIFICATE-----Generated at Mon Mar 2 12:17:33 2026 by rpki-client