$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c6f424ab-3344-390b-b696-1f591e55b29f.roa File: c6f424ab-3344-390b-b696-1f591e55b29f.roa (raw, json) Hash identifier: z0tTHNxm8VYkMIP/i84Tw/W1Uf263oxMqjKtH9MqSK4= Subject key identifier: C1:9C:93:3A:4D:5D:B9:24:37:DC:EE:01:70:AE:E4:23:32:B6:22:CE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CA5F703F897B713E7B6BCB5A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c6f424ab-3344-390b-b696-1f591e55b29f.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.17.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:03:f8:97:b7:13:e7:b6:bc:b5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=16c329d0-fa6b-4643-9d7a-cf6f9f169c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:58:3f:f5:96:8b:3a:e3:f6:5e:91:d4:2b:2b: 10:1d:32:c3:58:43:93:75:7a:6d:19:5f:3e:23:22: 04:a9:96:12:ac:18:af:20:99:d6:a8:3a:6d:f2:98: f4:2f:42:18:f0:12:10:fd:76:9e:7b:dc:b4:7e:c5: 8c:ce:99:9f:7e:63:4e:57:4d:44:60:66:4a:5b:8f: b1:e4:1f:84:75:1b:0b:57:9d:bd:38:ed:42:8c:45: 95:4e:41:04:dd:fe:af:77:28:19:66:54:47:2a:98: 57:8c:52:2f:74:f0:3b:00:11:0d:de:b6:38:f5:08: 2f:7f:be:d0:04:ae:00:70:73:c7:89:7f:cb:75:90: b7:ce:d2:16:84:76:59:e4:40:f2:c6:0a:11:7b:b8: df:48:91:1b:ec:30:22:c5:dc:6b:3b:eb:16:98:f4: dc:c4:c5:d1:3e:5d:14:89:f4:69:cb:c6:24:cc:08: df:5f:43:35:51:69:e6:0a:4f:c8:5a:2b:d9:c0:8d: c8:f0:bd:12:66:1e:1f:b0:f5:67:a3:e9:6b:4e:5d: b2:12:46:ae:65:29:b6:e2:e0:c3:e3:17:6a:d5:86: b0:1c:19:35:d3:0b:46:8a:50:c3:fa:04:99:36:8a: 1b:72:85:fa:8a:ad:0e:f0:fa:a2:85:19:d9:b4:ff: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9C:93:3A:4D:5D:B9:24:37:DC:EE:01:70:AE:E4:23:32:B6:22:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c6f424ab-3344-390b-b696-1f591e55b29f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6e:b5:4a:2c:f2:af:97:82:45:fe:40:d7:10:53:0f:83:42: 4b:ca:dd:ac:c7:d3:78:53:14:75:85:47:8f:04:60:a3:e5:b2: 7f:cb:68:1e:6d:1a:4a:97:5a:f9:73:63:67:55:24:03:35:81: 92:bc:c4:8a:93:8a:14:d1:93:54:15:d1:65:57:3c:d1:a8:81: 9a:0b:8a:44:59:5b:bd:8e:c5:7c:57:13:ff:41:62:cd:e8:94: 1c:e3:4d:0e:25:78:b3:d7:ae:84:9f:c9:37:78:1e:ed:1c:82: ea:8c:a9:ee:70:bb:36:5c:1a:c8:fb:87:5f:84:f5:f9:3c:ec: e0:05:b0:46:4e:e9:7c:c8:ad:4d:72:8c:63:f4:13:56:57:35: f0:60:06:2c:c2:9e:a5:13:27:8d:4c:52:a1:d6:b3:87:30:cb: b5:f0:33:0e:9a:5a:cf:f7:d9:2e:a3:36:89:d7:64:bc:e1:89: 48:ef:b5:d8:32:ce:6d:d8:29:1b:f2:dc:1d:0f:d5:f0:25:bf: 94:b6:3b:52:a4:22:ec:76:84:5a:7a:6d:a8:9e:e9:e8:ff:46: 23:44:8b:6c:58:8a:4f:b7:30:7d:8d:eb:d4:a9:00:1a:f2:16: fb:57:23:c6:b8:97:f6:f9:cc:c3:db:f4:78:dc:d3:14:20:c1: b9:1b:98:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wP4l7cT57a8taAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk MTZjMzI5ZDAtZmE2Yi00NjQzLTlkN2EtY2Y2ZjlmMTY5Yzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlg/9ZaLOuP2XpHUKysQHTLDWEOTdXptGV8+ IyIEqZYSrBivIJnWqDpt8pj0L0IY8BIQ/Xaee9y0fsWMzpmffmNOV01EYGZKW4+x 5B+EdRsLV529OO1CjEWVTkEE3f6vdygZZlRHKphXjFIvdPA7ABEN3rY49Qgvf77Q BK4AcHPHiX/LdZC3ztIWhHZZ5EDyxgoRe7jfSJEb7DAixdxrO+sWmPTcxMXRPl0U ifRpy8YkzAjfX0M1UWnmCk/IWivZwI3I8L0SZh4fsPVno+lrTl2yEkauZSm24uDD 4xdq1YawHBk10wtGilDD+gSZNoobcoX6iq0O8PqihRnZtP8aQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGckzpNXbkkN9zuAXCu5CMytiLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzZmNDI0YWItMzM0NC0z OTBiLWI2OTYtMWY1OTFlNTViMjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZutUos8q+XgkX+QNcQUw+DQkvK3azH03hTFHWFR48EYKPlsn/LaB5t GkqXWvlzY2dVJAM1gZK8xIqTihTRk1QV0WVXPNGogZoLikRZW72OxXxXE/9BYs3o lBzjTQ4leLPXroSfyTd4Hu0cguqMqe5wuzZcGsj7h1+E9fk87OAFsEZO6XzIrU1y jGP0E1ZXNfBgBizCnqUTJ41MUqHWs4cwy7XwMw6aWs/32S6jNonXZLzhiUjvtdgy zm3YKRvy3B0P1fAlv5S2O1KkIux2hFp6baie6ej/RiNEi2xYik+3MH2N69SpABry FvtXI8a4l/b5zMPb9Hjc0xQgwbkbmIY= -----END CERTIFICATE-----Generated at Mon Mar 2 11:01:57 2026 by rpki-client