$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8295b53-f638-3af4-99e0-f0a0932ba255.roa File: a8295b53-f638-3af4-99e0-f0a0932ba255.roa (raw, json) Hash identifier: EI81jqWmrBctPYf5gSM7x+BdE7MqITCKJLxePcuyiFY= Subject key identifier: 0F:70:16:04:F8:07:CB:53:30:D1:81:3F:AD:56:71:5C:BA:37:69:5A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CD5256098298742EE64D97000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8295b53-f638-3af4-99e0-f0a0932ba255.roa Signing time: Wed 11 Feb 2026 23:37:08 +0000 ROA not before: Wed 11 Feb 2026 23:37:08 +0000 ROA not after: Tue 12 May 2026 22:37:08 +0000 asID: 30036 IP address blocks: 173.17.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d5:25:60:98:29:87:42:ee:64:d9:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 11 23:37:08 2026 GMT Not After : May 12 22:37:08 2026 GMT Subject: CN=c9c05a7c-d71b-478d-85dd-94720261d3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:31:f0:da:bf:53:41:0b:16:94:32:67:56: fc:4a:b5:a9:74:d1:12:34:df:0a:35:f0:63:fb:35: e0:58:51:2b:9c:32:26:75:62:4a:74:c3:a8:69:92: 71:4a:ba:76:08:03:5c:c9:de:0c:a5:60:fe:b0:89: 17:12:e8:d1:49:dc:a6:79:90:a6:37:4d:c1:e2:8d: 69:b3:d9:71:08:05:f9:2d:d9:66:1b:dd:cb:92:c3: 8a:cc:61:73:e2:a3:8a:4a:60:aa:53:c1:ed:be:7c: 77:08:02:48:54:06:76:bd:5d:af:97:e1:60:65:8b: 03:0e:17:c3:15:f2:42:32:8d:fc:36:2d:65:87:68: fb:c4:f9:28:9e:5e:c6:a7:a7:aa:ca:62:5e:66:a3: 0a:3c:32:64:df:96:a7:63:bd:e9:bd:c2:e4:24:08: cc:f6:4b:86:0a:2e:f7:f4:7b:b4:8d:3d:32:a6:d4: 84:b0:34:5d:5b:19:05:ed:85:c9:cb:a6:3f:a3:df: 8d:a8:85:cb:6b:58:89:5b:09:42:18:f5:eb:eb:43: a1:47:9e:a5:c6:e7:e8:ec:67:a7:1c:ea:65:9c:9d: 68:84:c4:ba:cf:9e:b7:a5:5e:26:0a:c0:2a:30:77: 23:ea:2b:ba:52:cd:56:f5:5c:4c:ea:99:14:28:83: 9f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:70:16:04:F8:07:CB:53:30:D1:81:3F:AD:56:71:5C:BA:37:69:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a8295b53-f638-3af4-99e0-f0a0932ba255.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:da:bd:78:3b:4f:4f:ff:7e:d1:58:4e:03:e4:73:89:f3:a3: 46:68:df:48:bd:df:ef:91:a9:bb:8a:11:40:ae:97:52:74:ff: 3f:07:ae:a8:93:a1:f6:a5:66:1c:1d:06:65:09:9a:26:83:b5: 8a:3d:0c:29:7e:3c:af:7e:70:7e:bd:b9:06:78:b7:2f:4e:5f: 92:72:5b:86:75:1e:8f:32:b1:f8:c4:53:09:f7:b1:eb:6b:a0: 43:a0:23:a4:cc:33:45:5e:7c:5b:aa:30:c8:aa:f0:5c:01:99: a4:c9:f3:8a:90:63:85:3e:1a:5b:f9:1c:53:66:53:b4:da:7d: 54:a8:93:fb:dc:13:bf:9f:67:4e:0f:96:d2:c9:aa:95:59:a6: ba:cb:4e:a1:a7:2c:47:8c:26:59:ff:a5:df:bf:32:89:dd:11: da:e2:64:ac:21:27:47:cd:66:d2:76:95:75:06:80:ca:45:6b: 75:9c:4d:70:b8:f5:9c:ec:9a:61:d1:f3:ae:71:b9:bf:ce:8a: 93:01:10:08:47:fa:f3:62:cc:62:6c:66:0f:e9:1f:12:99:ad: 31:49:d2:07:3f:08:b6:eb:4c:26:7a:7f:25:16:3e:4b:de:b5: 10:68:aa:a1:b5:ca:3e:b2:16:d9:2f:02:e2:ff:1a:a8:d0:dc: f1:0d:f0:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzVJWCYKYdC7mTZcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIxMTIzMzcwOFoXDTI2MDUxMjIyMzcwOFowLzEtMCsGA1UEAxMk YzljMDVhN2MtZDcxYi00NzhkLTg1ZGQtOTQ3MjAyNjFkM2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIcx8Nq/U0ELFpQyZ1b8SrWpdNESNN8KNfBj +zXgWFErnDImdWJKdMOoaZJxSrp2CANcyd4MpWD+sIkXEujRSdymeZCmN03B4o1p s9lxCAX5LdlmG93LksOKzGFz4qOKSmCqU8Htvnx3CAJIVAZ2vV2vl+FgZYsDDhfD FfJCMo38Ni1lh2j7xPkonl7Gp6eqymJeZqMKPDJk35anY73pvcLkJAjM9kuGCi73 9Hu0jT0yptSEsDRdWxkF7YXJy6Y/o9+NqIXLa1iJWwlCGPXr60OhR56lxufo7Gen HOplnJ1ohMS6z563pV4mCsAqMHcj6iu6Us1W9VxM6pkUKIOfrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9wFgT4B8tTMNGBP61WcVy6N2laMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTgyOTViNTMtZjYzOC0z YWY0LTk5ZTAtZjBhMDkzMmJhMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTavXg7T0//ftFYTgPkc4nzo0Zo30i93++RqbuKEUCul1J0/z8HrqiT ofalZhwdBmUJmiaDtYo9DCl+PK9+cH69uQZ4ty9OX5JyW4Z1Ho8ysfjEUwn3setr oEOgI6TMM0VefFuqMMiq8FwBmaTJ84qQY4U+Glv5HFNmU7TafVSok/vcE7+fZ04P ltLJqpVZprrLTqGnLEeMJln/pd+/MondEdriZKwhJ0fNZtJ2lXUGgMpFa3WcTXC4 9ZzsmmHR865xub/OipMBEAhH+vNizGJsZg/pHxKZrTFJ0gc/CLbrTCZ6fyUWPkve tRBoqqG1yj6yFtkvAuL/GqjQ3PEN8Jg= -----END CERTIFICATE-----Generated at Mon Mar 2 15:23:46 2026 by rpki-client