$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa File: a6229991-1291-3d4f-94d1-83e8c2cea121.roa (raw, json) Hash identifier: BxzpSBQOCu463GX5r95Xu9Y+6jsmcWc2rQguarrtm+0= Subject key identifier: 99:EA:61:9A:C4:0A:A2:05:90:32:10:69:F6:4D:F3:9A:91:0D:87:4D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CD2A1E2F339AFE1378AD2B640 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa Signing time: Wed 11 Feb 2026 02:00:32 +0000 ROA not before: Wed 11 Feb 2026 02:00:32 +0000 ROA not after: Tue 12 May 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.21.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d2:a1:e2:f3:39:af:e1:37:8a:d2:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 11 02:00:32 2026 GMT Not After : May 12 01:00:32 2026 GMT Subject: CN=ee3ca873-dea8-456d-8b37-01be75d94242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7a:d7:f8:d4:54:1f:a3:39:16:c2:07:0d:c8: d7:6c:95:84:97:c4:21:d3:9f:4a:bd:3a:60:2c:3d: 2f:ac:a5:11:42:4a:9f:21:56:62:f6:ea:88:16:f0: 48:48:fd:c3:ad:d1:ae:69:29:30:d7:0b:0b:94:10: 91:1b:27:70:47:76:c1:86:a6:77:06:6a:7e:bf:77: 6b:aa:ba:37:95:d6:39:0c:bc:23:b8:b9:f1:0c:b9: 72:e2:c5:1d:ab:73:99:e2:06:d0:76:73:f1:5f:53: f3:42:f7:f8:b3:0e:08:fc:08:37:22:99:e6:1f:69: c7:d1:6f:3b:ac:70:d0:66:9e:2d:4e:f0:cc:5e:07: 0e:67:e7:45:51:43:11:27:36:c8:b4:3d:7a:12:42: f1:7c:b1:7a:0b:a7:32:6f:21:b7:51:79:0d:15:52: be:9b:a5:eb:ee:56:bb:19:72:47:d8:e1:9f:24:54: 8d:be:94:eb:ef:f9:81:73:8c:e3:5b:1f:16:46:df: 9f:9d:3c:b5:54:a8:28:a2:fd:9a:24:00:84:ce:c7: 6f:3d:7a:59:36:d4:f0:fb:27:73:6b:e0:91:6a:0b: 27:78:5d:b1:27:60:40:80:f8:64:62:89:a5:cb:1f: 7a:5c:e6:c7:d8:83:69:d8:d3:12:5b:ba:d2:4d:72: 6f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EA:61:9A:C4:0A:A2:05:90:32:10:69:F6:4D:F3:9A:91:0D:87:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:3b:7f:7e:79:ce:88:2b:8b:7e:47:66:87:38:c6:b0:32:34: e9:36:43:6c:c8:38:45:3d:87:b8:e2:e2:48:a9:e5:be:32:49: 48:c9:55:4e:03:17:53:fe:09:56:4f:de:1b:2d:5d:c3:43:b5: e3:11:d7:ee:3d:6c:18:5d:ce:ca:63:03:db:e0:64:14:82:b3: b9:f8:95:af:b6:a9:99:7e:60:4e:9f:e2:79:3c:85:23:52:07: 77:f8:8c:97:c4:54:86:d3:a8:3d:b4:82:da:8a:eb:3e:c1:4f: cf:52:7e:30:6f:eb:7b:5c:b3:25:a5:48:f0:35:6d:27:f1:d7: 52:01:6c:14:de:b3:e7:b0:6f:c5:ef:dd:f5:68:9e:e5:dc:b9: a0:5e:30:4a:f2:0a:ee:b5:a6:12:01:b9:4d:5d:53:00:9f:5d: e1:69:e8:95:12:c6:87:92:fe:02:11:07:df:81:28:b2:2c:65: 19:49:1c:0b:b3:06:a6:44:86:bc:42:6b:fa:7b:60:c7:65:f1: 67:e2:ab:30:15:33:c3:5a:6c:e4:e2:99:5d:a5:3b:da:81:ad: 1d:0d:28:19:02:9b:9a:25:0f:48:54:27:ac:69:42:64:b3:e2: 64:9f:75:54:c8:85:12:50:82:d7:3e:8c:3b:90:dc:b7:d7:97: 70:5b:e1:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzSoeLzOa/hN4rStkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIxMTAyMDAzMloXDTI2MDUxMjAxMDAzMlowLzEtMCsGA1UEAxMk ZWUzY2E4NzMtZGVhOC00NTZkLThiMzctMDFiZTc1ZDk0MjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3rX+NRUH6M5FsIHDcjXbJWEl8Qh059KvTpg LD0vrKURQkqfIVZi9uqIFvBISP3DrdGuaSkw1wsLlBCRGydwR3bBhqZ3Bmp+v3dr qro3ldY5DLwjuLnxDLly4sUdq3OZ4gbQdnPxX1PzQvf4sw4I/Ag3IpnmH2nH0W87 rHDQZp4tTvDMXgcOZ+dFUUMRJzbItD16EkLxfLF6C6cybyG3UXkNFVK+m6Xr7la7 GXJH2OGfJFSNvpTr7/mBc4zjWx8WRt+fnTy1VKgoov2aJACEzsdvPXpZNtTw+ydz a+CRagsneF2xJ2BAgPhkYomlyx96XObH2INp2NMSW7rSTXJvsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnqYZrECqIFkDIQafZN85qRDYdNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTYyMjk5OTEtMTI5MS0z ZDRmLTk0ZDEtODNlOGMyY2VhMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw7f355zogri35HZoc4xrAyNOk2Q2zIOEU9h7ji4kip5b4ySUjJVU4D F1P+CVZP3hstXcNDteMR1+49bBhdzspjA9vgZBSCs7n4la+2qZl+YE6f4nk8hSNS B3f4jJfEVIbTqD20gtqK6z7BT89SfjBv63tcsyWlSPA1bSfx11IBbBTes+ewb8Xv 3fVonuXcuaBeMEryCu61phIBuU1dUwCfXeFp6JUSxoeS/gIRB9+BKLIsZRlJHAuz BqZEhrxCa/p7YMdl8WfiqzAVM8NabOTimV2lO9qBrR0NKBkCm5olD0hUJ6xpQmSz 4mSfdVTIhRJQgtc+jDuQ3LfXl3Bb4Vw= -----END CERTIFICATE-----Generated at Mon Mar 2 08:06:23 2026 by rpki-client