$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c876c1bc-00fd-3b15-a78b-d5e88d99153a.roa File: c876c1bc-00fd-3b15-a78b-d5e88d99153a.roa (raw, json) Hash identifier: U39YlnHh9llfbZxChJ2ZIufCZrk3VDw8Ckfb4HzcmV4= Subject key identifier: BA:91:08:5E:90:62:DA:05:01:55:23:05:B2:E9:91:0C:C1:16:62:02 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E0436271D1A473C3D357E0B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c876c1bc-00fd-3b15-a78b-d5e88d99153a.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 30036 IP address blocks: 173.29.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:27:1d:1a:47:3c:3d:35:7e:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=7a785b5a-3279-4b81-aeef-48774e99ed66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:61:6a:dd:87:ac:02:60:b5:35:43:a0:00: d9:f6:7b:76:c1:5f:63:95:58:e5:8b:07:56:6a:5c: 96:d3:ba:67:f3:22:34:b7:32:cd:e3:49:ff:08:d1: d0:02:8d:58:54:12:c4:d7:c5:47:d1:cc:bd:39:fb: 18:f1:95:84:bd:e3:16:b3:36:a9:1d:99:1b:cc:8a: 52:ea:31:9d:30:64:bd:c3:a5:ea:6f:15:9f:8b:bc: 2d:b8:a7:31:ec:d0:f0:73:69:ba:b9:3e:9a:4e:97: 25:a8:c0:0b:19:88:5e:33:12:13:96:e2:41:e3:52: 2e:e9:67:6a:3d:a6:64:75:83:19:1f:ad:50:d3:b3: 3e:7e:ea:c3:90:62:3e:48:19:75:93:43:a7:a8:64: ac:ed:43:21:87:5e:a8:f5:24:69:34:25:a3:29:a7: 5a:f0:2e:9d:4e:6f:42:94:92:d2:a3:03:64:93:f7: d7:96:60:db:32:b3:24:99:d2:20:e7:e3:20:47:40: 2b:12:70:19:85:61:b9:b2:3c:59:eb:d5:ab:75:80: b9:2e:c4:1b:ab:f7:87:91:b8:93:a6:16:db:dc:01: d4:8e:ae:5f:00:4d:2c:ec:65:e0:b2:69:87:35:6a: 10:da:e1:f0:7c:9d:35:56:e6:90:92:f8:ac:af:aa: b5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:91:08:5E:90:62:DA:05:01:55:23:05:B2:E9:91:0C:C1:16:62:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c876c1bc-00fd-3b15-a78b-d5e88d99153a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:01:40:a6:31:9d:19:a6:b0:cb:c0:6e:c2:8a:83:e0:ae:62: 8f:d0:f7:d5:5d:67:9b:0e:37:ac:6d:90:86:4c:a2:93:e3:2a: c1:70:67:28:33:b8:eb:79:6f:5c:00:c9:2b:29:93:a6:35:24: 30:58:27:f7:ff:b1:c8:a8:4d:5e:31:27:d3:e7:64:23:6d:15: f7:ac:06:da:b1:9d:84:aa:ff:cb:3e:3a:98:82:fb:68:e8:54: 62:0d:ca:5a:86:c4:a9:f5:d1:3b:28:2a:68:9c:77:89:3a:78: 1a:e2:c6:39:d0:a7:e2:dd:ca:3c:dd:0a:d8:98:c3:1d:64:cd: 16:32:db:d6:02:a0:f1:13:ac:0e:a7:4d:5d:75:ee:b7:2a:f5: 80:e8:c7:7f:87:f4:ad:ea:06:e0:02:e4:91:d0:e6:cd:71:92: 4d:03:93:b4:3a:91:b9:a3:18:12:95:3e:29:04:ae:4c:97:56: 2e:f5:93:13:97:1b:41:dc:03:8e:69:9e:c7:c1:c5:95:45:f8: a6:2a:60:f8:60:f5:06:ba:32:bb:68:c9:e6:22:b9:89:bd:89: 87:39:0c:91:89:62:18:54:12:a1:f8:fa:d8:f7:cc:1e:fa:dc: e3:49:33:33:9d:45:70:e7:b3:f3:80:31:f4:be:38:25:85:25: 52:68:9e:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENicdGkc8PTV+CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk N2E3ODViNWEtMzI3OS00YjgxLWFlZWYtNDg3NzRlOTllZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC9hat2HrAJgtTVDoADZ9nt2wV9jlVjliwdW alyW07pn8yI0tzLN40n/CNHQAo1YVBLE18VH0cy9OfsY8ZWEveMWszapHZkbzIpS 6jGdMGS9w6XqbxWfi7wtuKcx7NDwc2m6uT6aTpclqMALGYheMxITluJB41Iu6Wdq PaZkdYMZH61Q07M+furDkGI+SBl1k0OnqGSs7UMhh16o9SRpNCWjKada8C6dTm9C lJLSowNkk/fXlmDbMrMkmdIg5+MgR0ArEnAZhWG5sjxZ69WrdYC5LsQbq/eHkbiT phbb3AHUjq5fAE0s7GXgsmmHNWoQ2uHwfJ01VuaQkvisr6q1LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqRCF6QYtoFAVUjBbLpkQzBFmICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzg3NmMxYmMtMDBmZC0z YjE1LWE3OGItZDVlODhkOTkxNTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR3xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQBQKYxnRmmsMvAbsKKg+CuYo/Q99VdZ5sON6xtkIZMopPjKsFwZygz uOt5b1wAySspk6Y1JDBYJ/f/scioTV4xJ9PnZCNtFfesBtqxnYSq/8s+OpiC+2jo VGINylqGxKn10TsoKmicd4k6eBrixjnQp+LdyjzdCtiYwx1kzRYy29YCoPETrA6n TV117rcq9YDox3+H9K3qBuAC5JHQ5s1xkk0Dk7Q6kbmjGBKVPikErkyXVi71kxOX G0HcA45pnsfBxZVF+KYqYPhg9Qa6MrtoyeYiuYm9iYc5DJGJYhhUEqH4+tj3zB76 3ONJMzOdRXDns/OAMfS+OCWFJVJonnw= -----END CERTIFICATE-----Generated at Sat Jun 13 16:28:56 2026 by rpki-client