$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa File: a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa (raw, json) Hash identifier: P5dkN/DfSEbgLu3ZrPqLJsH9A8v9bBvD/ScP3BpVb+A= Subject key identifier: 2B:75:4A:A1:70:0A:8C:D9:62:8E:5A:7D:B8:C9:87:0E:72:B3:57:97 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A8210ABA2437AA974EDA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.29.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:21:0a:ba:24:37:aa:97:4e:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=99afddcf-e5f5-42e7-abfb-51351fb6c37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9b:12:77:c9:cb:fe:cd:8d:89:a0:b2:3d:17: c2:30:d7:1c:a7:bd:dc:9b:59:f5:6c:ed:b2:72:14: 7d:28:5e:a6:08:9b:c7:c3:4f:6b:aa:21:da:50:53: 50:db:1a:c4:24:ea:7f:5b:71:47:b0:77:e9:f3:2f: ea:8f:a8:01:76:d0:3d:ed:6d:7d:6f:4a:03:9c:c1: 96:d7:2c:67:1c:3b:e8:89:c2:42:f3:79:5b:07:6e: bd:d8:0a:44:3d:19:56:4a:3e:4d:1c:eb:af:46:b5: dd:c6:9a:5e:25:a4:2f:74:56:92:2f:d5:91:21:b0: 59:04:7f:df:77:e1:e7:f8:9d:0c:ab:56:10:bd:1b: a6:1d:b1:f8:18:30:1b:1a:a6:67:01:c8:2f:9e:aa: 5c:12:84:45:37:a2:99:96:32:d5:d8:9b:97:97:70: f5:fa:ee:77:ba:42:f3:ab:01:1c:67:42:36:29:89: 11:b3:dd:6d:0e:e1:1b:2e:4d:8a:e5:c6:ac:72:e0: f7:16:93:53:d2:d0:b9:5e:5f:b8:48:f4:42:38:e2: 73:e6:ea:96:0c:31:03:dc:b3:70:85:a2:fd:11:99: 0d:46:43:5a:27:14:96:14:14:ba:17:4d:46:82:8a: 22:fc:15:66:d7:44:3c:50:f1:b9:9e:d3:c7:c8:cd: 63:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:75:4A:A1:70:0A:8C:D9:62:8E:5A:7D:B8:C9:87:0E:72:B3:57:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3ac0a69-1987-3032-bbe5-4f7ba80783be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.92.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:32:1f:60:19:b5:da:b8:6e:31:ec:14:dd:c4:e1:99:bc:16: e3:bb:8f:f1:fc:89:a5:19:a3:49:0a:ab:f8:52:c6:d9:76:85: de:69:b3:f4:90:b5:70:01:22:26:d4:72:a7:70:fd:14:9a:23: 22:ee:61:c8:e7:6a:1d:4e:38:ef:74:8f:16:b9:c1:17:05:9d: ce:7f:38:e6:63:11:7b:3d:16:82:b5:3a:30:71:5f:3b:e2:70: b7:38:68:ab:b7:11:1d:3d:ea:65:28:ce:c7:36:eb:db:29:77: fe:b0:f3:d2:c6:ae:64:7d:30:15:90:f6:2a:38:9e:17:69:88: 19:b1:79:6a:8d:e1:2e:ca:de:df:3c:b0:d1:8b:4f:cb:8e:f8: 21:9a:a9:c0:a3:d5:1d:4f:69:4b:1e:76:24:3c:29:fa:9d:7b: a7:f1:31:15:39:ee:74:00:ea:e2:53:15:ca:ce:7d:7a:58:8d: de:65:5b:cb:0c:0b:9d:79:72:36:ea:9d:da:ae:1a:d6:3e:f6: 1a:6d:b2:ff:03:da:d8:7f:56:46:a6:c2:07:4f:dd:6c:f1:1e: 7e:e2:cd:a6:d7:86:ce:72:7d:e8:c0:bd:f9:ef:14:47:f9:99: 8e:ed:5f:33:86:1a:d8:d0:85:34:83:d3:b4:5a:e9:77:e9:1c: 37:3f:5f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqCEKuiQ3qpdO2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk OTlhZmRkY2YtZTVmNS00MmU3LWFiZmItNTEzNTFmYjZjMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZsSd8nL/s2NiaCyPRfCMNccp73cm1n1bO2y chR9KF6mCJvHw09rqiHaUFNQ2xrEJOp/W3FHsHfp8y/qj6gBdtA97W19b0oDnMGW 1yxnHDvoicJC83lbB2692ApEPRlWSj5NHOuvRrXdxppeJaQvdFaSL9WRIbBZBH/f d+Hn+J0Mq1YQvRumHbH4GDAbGqZnAcgvnqpcEoRFN6KZljLV2JuXl3D1+u53ukLz qwEcZ0I2KYkRs91tDuEbLk2K5cascuD3FpNT0tC5Xl+4SPRCOOJz5uqWDDED3LNw haL9EZkNRkNaJxSWFBS6F01Ggooi/BVm10Q8UPG5ntPHyM1jXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCt1SqFwCozZYo5afbjJhw5ys1eXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTNhYzBhNjktMTk4Ny0z MDMyLWJiZTUtNGY3YmE4MDc4M2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR1cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwyH2AZtdq4bjHsFN3E4Zm8FuO7j/H8iaUZo0kKq/hSxtl2hd5ps/SQ tXABIibUcqdw/RSaIyLuYcjnah1OOO90jxa5wRcFnc5/OOZjEXs9FoK1OjBxXzvi cLc4aKu3ER096mUozsc269spd/6w89LGrmR9MBWQ9io4nhdpiBmxeWqN4S7K3t88 sNGLT8uO+CGaqcCj1R1PaUsediQ8Kfqde6fxMRU57nQA6uJTFcrOfXpYjd5lW8sM C515cjbqndquGtY+9hptsv8D2th/VkamwgdP3WzxHn7izabXhs5yfejAvfnvFEf5 mY7tXzOGGtjQhTSD07Ra6XfpHDc/X/Y= -----END CERTIFICATE-----Generated at Sun Mar 1 23:17:10 2026 by rpki-client