$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0ffd58b-7b60-361e-b355-4e02a51b117f.roa File: b0ffd58b-7b60-361e-b355-4e02a51b117f.roa (raw, json) Hash identifier: kOAMGTKmgshpGxg+NsbPm8K6cebi0ssMej57JXtXfHQ= Subject key identifier: 7B:F8:45:84:32:B4:79:D5:C3:85:2C:E1:DD:95:C9:E5:90:A5:99:8C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CBF17545E710A22578AFD9AF0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0ffd58b-7b60-361e-b355-4e02a51b117f.roa Signing time: Wed 04 Feb 2026 02:00:31 +0000 ROA not before: Wed 04 Feb 2026 02:00:31 +0000 ROA not after: Tue 05 May 2026 01:00:31 +0000 asID: 19905 IP address blocks: 173.29.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bf:17:54:5e:71:0a:22:57:8a:fd:9a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 4 02:00:31 2026 GMT Not After : May 5 01:00:31 2026 GMT Subject: CN=ffeda7a8-bae3-40b1-834a-7be52cf5bac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:81:9a:6f:bf:6a:24:20:7b:11:a3:0f:fe:71: fc:17:d8:9b:97:91:42:f2:33:ad:b4:f9:9a:18:de: 3d:f1:6a:99:b7:1a:3a:93:e5:38:d0:e0:26:a4:8b: cf:8f:83:62:f0:79:50:88:87:e3:e0:82:c3:db:a0: a6:76:66:97:3b:49:ed:11:24:78:9c:6d:70:d0:9f: e1:fb:62:32:5e:56:cd:6d:92:f6:95:8c:58:db:2d: cf:30:86:4d:27:48:6b:89:1c:f0:81:68:4c:29:0c: 71:db:5b:c2:d8:62:8a:d4:20:3a:e3:31:73:91:13: b5:66:48:c4:e8:ea:31:4f:42:cb:09:2e:d9:4a:5d: c5:aa:df:86:99:b7:74:d6:6d:1e:e7:4a:c9:97:e1: 48:a7:ee:b7:a7:ac:8f:51:06:10:0a:b9:af:91:d2: e8:8d:45:e5:f4:7a:d1:59:f9:9c:51:ab:fb:94:f9: 86:9d:38:a5:a0:b1:9b:03:5e:f1:95:63:2c:9f:0a: 08:cf:ed:6c:24:58:50:0d:af:95:eb:12:9a:f1:5c: aa:e1:fb:d7:8d:9d:a2:fe:47:86:77:5c:e7:b2:83: 79:08:ec:66:79:40:56:69:64:be:22:4a:ad:00:62: 0c:ad:7d:be:d0:60:47:b1:84:17:d4:2c:5f:14:1e: bb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F8:45:84:32:B4:79:D5:C3:85:2C:E1:DD:95:C9:E5:90:A5:99:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0ffd58b-7b60-361e-b355-4e02a51b117f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:56:39:9f:f2:e4:08:aa:59:a8:9f:8e:fd:0d:1d:20:0f:01: 8a:c2:65:0e:84:45:d0:a4:e5:89:df:84:23:c9:3c:35:09:5f: 6d:47:69:10:b8:b7:92:9d:32:3b:ba:32:2a:94:83:1a:19:09: f9:ba:15:93:6e:2e:1b:0b:5b:aa:d9:8b:74:cb:4d:c2:93:7c: 72:9b:79:83:87:0e:63:e2:7c:63:17:48:e7:2d:bc:f8:e2:06: 17:14:ae:e9:4b:74:e0:27:2f:3c:86:90:f2:70:a9:43:83:13: 0e:9c:6d:db:14:a2:18:ec:3f:23:24:3f:b4:e0:55:46:41:9c: 39:f5:10:35:bb:88:af:92:e2:49:3d:04:ee:d5:12:f3:46:00: f6:86:16:4a:4b:71:8f:7e:e1:64:db:d8:35:11:5f:6e:0f:8c: 2a:f5:f8:d9:95:86:7c:c5:03:81:13:b7:ab:ad:f9:c6:03:a5: 70:c3:69:8d:94:9e:26:a9:b3:cd:d6:e7:03:8a:58:80:a5:70: 5c:5a:36:e0:e9:90:c9:25:74:85:6a:e2:78:92:c0:65:b5:fd: ef:2f:f8:37:f4:93:b4:8f:4c:d1:e9:f0:c3:4b:5a:cb:bc:12: d5:f5:c7:33:89:d6:a2:a3:3a:d1:1c:c2:36:29:fa:2b:33:49: e2:e8:97:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/F1RecQoiV4r9mvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk ZmZlZGE3YTgtYmFlMy00MGIxLTgzNGEtN2JlNTJjZjViYWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooGab79qJCB7EaMP/nH8F9ibl5FC8jOttPma GN498WqZtxo6k+U40OAmpIvPj4Ni8HlQiIfj4ILD26CmdmaXO0ntESR4nG1w0J/h +2IyXlbNbZL2lYxY2y3PMIZNJ0hriRzwgWhMKQxx21vC2GKK1CA64zFzkRO1ZkjE 6OoxT0LLCS7ZSl3Fqt+Gmbd01m0e50rJl+FIp+63p6yPUQYQCrmvkdLojUXl9HrR WfmcUav7lPmGnTiloLGbA17xlWMsnwoIz+1sJFhQDa+V6xKa8Vyq4fvXjZ2i/keG d1znsoN5COxmeUBWaWS+IkqtAGIMrX2+0GBHsYQX1CxfFB67ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHv4RYQytHnVw4Us4d2VyeWQpZmMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjBmZmQ1OGItN2I2MC0z NjFlLWIzNTUtNGUwMmE1MWIxMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5WOZ/y5AiqWaifjv0NHSAPAYrCZQ6ERdCk5YnfhCPJPDUJX21HaRC4 t5KdMju6MiqUgxoZCfm6FZNuLhsLW6rZi3TLTcKTfHKbeYOHDmPifGMXSOctvPji BhcUrulLdOAnLzyGkPJwqUODEw6cbdsUohjsPyMkP7TgVUZBnDn1EDW7iK+S4kk9 BO7VEvNGAPaGFkpLcY9+4WTb2DURX24PjCr1+NmVhnzFA4ETt6ut+cYDpXDDaY2U niaps83W5wOKWIClcFxaNuDpkMkldIVq4niSwGW1/e8v+Df0k7SPTNHp8MNLWsu8 EtX1xzOJ1qKjOtEcwjYp+iszSeLolwg= -----END CERTIFICATE-----Generated at Sun Mar 1 22:40:16 2026 by rpki-client