$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfb3ad11-91db-363c-b849-c2673ec63038.roa File: dfb3ad11-91db-363c-b849-c2673ec63038.roa (raw, json) Hash identifier: mTZrfkpK0DLB+cBLF7eme5I6kcA4EDxLtJ97v8ZfuLc= Subject key identifier: C1:09:09:98:E8:4B:AD:D1:2F:52:64:F1:00:55:27:E0:13:A6:7E:30 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D0647B963932A5CBAEAC87A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfb3ad11-91db-363c-b849-c2673ec63038.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 19905 IP address blocks: 173.24.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:b9:63:93:2a:5c:ba:ea:c8:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=94a0c415-1aab-4ac9-bd1c-53b602a0f7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:17:99:67:62:f5:50:02:33:71:77:ae:2d:ea: 42:52:54:96:23:9d:ec:41:6d:9e:d1:77:2d:2a:60: b4:b1:76:63:31:ad:86:95:4c:ca:c2:be:93:f2:d0: 39:79:4d:91:77:3a:65:1c:54:3c:61:4d:b1:21:60: 44:6b:56:50:8e:7e:a2:fd:24:18:be:84:82:50:64: 25:20:36:f0:e5:85:a5:cc:45:27:92:05:82:f3:f9: 0b:c0:f4:88:f1:d1:b5:28:0e:33:35:c9:1f:45:c5: a5:07:ea:6c:52:36:3f:cb:44:a0:0b:d1:5b:11:84: f4:e9:18:b7:0e:e0:2c:c1:14:21:0e:e7:64:02:0a: 37:88:c7:82:34:c1:30:49:28:ea:77:3d:04:fb:c0: 0f:59:32:27:d9:7e:d0:24:08:42:f4:52:76:60:a2: ef:d1:07:02:67:3b:71:dc:70:5c:f3:8a:5b:3b:66: 76:3b:3f:0e:65:45:e8:2b:86:f7:14:eb:2c:07:47: 42:05:91:13:69:e3:45:87:ac:fb:64:08:e1:b4:73: dd:3e:8f:28:07:ba:a9:ce:11:0b:b8:ef:8a:dd:7e: f3:7d:65:d2:8a:5d:b5:b5:74:d6:e9:3a:8e:88:a8: ef:e7:ec:95:c2:cd:e6:49:9c:d5:0f:50:00:8d:61: 40:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:09:09:98:E8:4B:AD:D1:2F:52:64:F1:00:55:27:E0:13:A6:7E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfb3ad11-91db-363c-b849-c2673ec63038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3b:d5:d8:82:e7:2b:ab:c4:31:df:fc:6f:57:5e:6b:59:34: 27:61:1e:10:fd:f2:c2:2b:7b:e1:b8:66:c7:18:33:24:c4:32: 6f:ba:b5:b1:30:08:13:0c:d1:78:5d:f6:1a:6e:d4:a9:7e:f1: 1e:65:b2:24:f6:dd:c9:03:b8:59:fd:21:26:14:d3:aa:b9:45: 32:c0:3e:c9:ef:2f:44:b2:9c:b8:6b:54:1d:62:59:68:16:c6: e7:aa:40:43:33:30:62:e3:f7:b8:b2:82:a3:cf:ce:0e:32:66: 04:bf:05:c7:1b:f2:01:f8:e2:29:62:2a:12:52:eb:16:67:82: f6:0c:0f:66:bf:35:02:eb:08:46:f1:36:ac:65:db:3c:39:a7: a1:80:b6:80:b6:ca:a4:6b:86:3b:80:57:a4:27:10:c8:97:4b: c8:d3:a2:da:ea:07:7c:7c:ad:21:56:de:ca:42:f6:cd:ac:eb: 3b:bd:1b:1d:09:4c:9a:ad:a4:11:81:e9:f8:5b:fd:e5:07:00: fe:39:93:f8:28:af:b6:50:d0:42:1f:9e:2c:91:e7:15:8c:6b: 0a:18:af:3a:5d:a7:af:2c:4a:bb:43:9e:bc:28:9b:94:48:da: 93:85:df:d3:b3:06:a2:10:98:eb:23:54:c9:1a:49:73:22:65: d1:56:ec:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR7ljkypcuurIegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk OTRhMGM0MTUtMWFhYi00YWM5LWJkMWMtNTNiNjAyYTBmN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBeZZ2L1UAIzcXeuLepCUlSWI53sQW2e0Xct KmC0sXZjMa2GlUzKwr6T8tA5eU2RdzplHFQ8YU2xIWBEa1ZQjn6i/SQYvoSCUGQl IDbw5YWlzEUnkgWC8/kLwPSI8dG1KA4zNckfRcWlB+psUjY/y0SgC9FbEYT06Ri3 DuAswRQhDudkAgo3iMeCNMEwSSjqdz0E+8APWTIn2X7QJAhC9FJ2YKLv0QcCZztx 3HBc84pbO2Z2Oz8OZUXoK4b3FOssB0dCBZETaeNFh6z7ZAjhtHPdPo8oB7qpzhEL uO+K3X7zfWXSil21tXTW6TqOiKjv5+yVws3mSZzVD1AAjWFAIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEJCZjoS63RL1Jk8QBVJ+ATpn4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGZiM2FkMTEtOTFkYi0z NjNjLWI4NDktYzI2NzNlYzYzMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRjWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU71diC5yurxDHf/G9XXmtZNCdhHhD98sIre+G4ZscYMyTEMm+6tbEw CBMM0Xhd9hpu1Kl+8R5lsiT23ckDuFn9ISYU06q5RTLAPsnvL0SynLhrVB1iWWgW xueqQEMzMGLj97iygqPPzg4yZgS/Bccb8gH44iliKhJS6xZngvYMD2a/NQLrCEbx Nqxl2zw5p6GAtoC2yqRrhjuAV6QnEMiXS8jTotrqB3x8rSFW3spC9s2s6zu9Gx0J TJqtpBGB6fhb/eUHAP45k/gor7ZQ0EIfniyR5xWMawoYrzpdp68sSrtDnrwom5RI 2pOF39OzBqIQmOsjVMkaSXMiZdFW7Kk= -----END CERTIFICATE-----Generated at Mon Mar 2 11:39:13 2026 by rpki-client