$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bafe5d2a-895c-3309-bd79-3298a23ac7d1.roa File: bafe5d2a-895c-3309-bd79-3298a23ac7d1.roa (raw, json) Hash identifier: FnqrsmkrjnpW8h86mKBESzWIQ6KoxGDzFlZWOxy9jI4= Subject key identifier: E7:27:88:26:03:1D:F2:9D:AE:41:16:20:67:15:84:D8:63:A2:BE:09 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CB981D12FA2CDA37B0386D000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bafe5d2a-895c-3309-bd79-3298a23ac7d1.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.29.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:d1:2f:a2:cd:a3:7b:03:86:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=08c7fc8a-7af1-4d08-92c5-c23f92db4ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7a:42:b2:2a:03:87:19:fa:0b:a6:cd:0e:a3: 4d:b8:72:e4:42:92:a2:36:ca:9a:8e:5d:44:f7:23: 1f:10:71:0c:08:af:34:33:00:a0:f9:02:a5:72:df: 56:27:89:0b:25:63:6a:38:c8:8c:f5:1b:0a:5c:50: 60:80:aa:9c:d1:b5:5e:a2:bf:18:ce:09:98:3b:ee: ae:e3:0f:54:8f:d6:0f:79:18:74:2f:f8:d0:d1:7b: 61:72:ec:51:f3:fd:4a:61:0f:ab:f4:82:5f:19:ff: 83:d6:71:39:22:c7:18:55:fc:77:81:57:79:8f:9c: fb:3a:a1:19:7d:eb:46:49:fd:5c:21:1d:85:6e:38: dc:b9:e9:46:ba:71:8a:f0:6c:a1:d1:b3:c8:5c:ee: 59:c9:36:e5:c7:23:40:b3:27:a8:83:5c:34:59:f1: 11:71:b6:a0:25:ce:68:4e:54:54:5e:6e:e7:c7:6a: fe:a8:c5:3a:bc:8b:2d:70:02:dd:53:a7:ba:72:01: 20:10:8b:f3:6e:62:25:1d:39:f7:37:2d:97:d4:81: 1b:f4:24:a7:34:47:5a:54:f9:aa:a5:9f:6f:0b:9d: 62:a2:e4:81:bc:5a:b8:aa:3a:ca:17:82:3c:9b:01: 33:b6:89:3e:39:8c:07:e5:72:3d:06:3d:52:f3:2c: 13:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:27:88:26:03:1D:F2:9D:AE:41:16:20:67:15:84:D8:63:A2:BE:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bafe5d2a-895c-3309-bd79-3298a23ac7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b0:4c:4d:ae:e6:e8:d0:4c:67:00:20:f7:6d:3f:6c:2f:a8: 7a:0b:83:bb:42:b1:c5:5d:9d:1b:99:2f:86:89:8a:d3:0f:6d: 6e:f2:cf:dd:f4:b7:34:b0:0b:a7:7e:81:fe:ee:0d:6c:3d:a0: 8e:1d:0f:91:d2:09:78:7b:1a:36:01:c1:e0:e8:da:58:53:7f: d7:12:07:df:3b:6c:e7:c8:81:e6:2a:cb:ed:f4:14:47:28:d1: e5:c0:71:0f:40:2b:39:2d:8d:85:04:ff:19:82:b7:f0:90:ec: 71:de:bb:7c:e0:ec:ff:ca:ad:61:54:0c:bf:cf:c2:5c:55:b6: 88:2a:61:fa:4e:55:17:98:90:a1:7a:f0:49:89:17:bf:35:6b: 90:f5:a1:b7:c6:a0:ee:c1:e0:ca:0f:c7:cd:b9:b6:f1:2e:e6: e1:52:74:54:58:40:81:51:0f:17:32:51:90:25:42:61:46:1d: 1d:5d:44:ae:5d:b8:97:59:b7:d7:a0:5f:48:2a:a6:f7:8b:b9: c9:ba:4b:25:d8:3b:ae:15:db:5f:51:f0:46:93:d3:e5:54:a0: 26:c7:12:94:c5:54:0b:41:83:c5:23:66:36:42:f8:04:48:5b: 1b:9b:91:f7:c4:b8:71:f9:f2:12:24:87:31:01:16:b5:30:01: c4:e0:49:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gdEvos2jewOG0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk MDhjN2ZjOGEtN2FmMS00ZDA4LTkyYzUtYzIzZjkyZGI0YmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXpCsioDhxn6C6bNDqNNuHLkQpKiNsqajl1E 9yMfEHEMCK80MwCg+QKlct9WJ4kLJWNqOMiM9RsKXFBggKqc0bVeor8YzgmYO+6u 4w9Uj9YPeRh0L/jQ0XthcuxR8/1KYQ+r9IJfGf+D1nE5IscYVfx3gVd5j5z7OqEZ fetGSf1cIR2FbjjcuelGunGK8Gyh0bPIXO5ZyTblxyNAsyeog1w0WfERcbagJc5o TlRUXm7nx2r+qMU6vIstcALdU6e6cgEgEIvzbmIlHTn3Ny2X1IEb9CSnNEdaVPmq pZ9vC51iouSBvFq4qjrKF4I8mwEztok+OYwH5XI9Bj1S8ywTiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcniCYDHfKdrkEWIGcVhNhjor4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmFmZTVkMmEtODk1Yy0z MzA5LWJkNzktMzI5OGEyM2FjN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqwTE2u5ujQTGcAIPdtP2wvqHoLg7tCscVdnRuZL4aJitMPbW7yz930 tzSwC6d+gf7uDWw9oI4dD5HSCXh7GjYBweDo2lhTf9cSB987bOfIgeYqy+30FEco 0eXAcQ9AKzktjYUE/xmCt/CQ7HHeu3zg7P/KrWFUDL/PwlxVtogqYfpOVReYkKF6 8EmJF781a5D1obfGoO7B4MoPx825tvEu5uFSdFRYQIFRDxcyUZAlQmFGHR1dRK5d uJdZt9egX0gqpveLucm6SyXYO64V219R8EaT0+VUoCbHEpTFVAtBg8UjZjZC+ARI WxubkffEuHH58hIkhzEBFrUwAcTgSak= -----END CERTIFICATE-----Generated at Mon Mar 2 02:55:39 2026 by rpki-client