$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcd42c79-dd5e-3c82-b992-91be371e11b3.roa File: fcd42c79-dd5e-3c82-b992-91be371e11b3.roa (raw, json) Hash identifier: NiBTv0qBbtR4CoG2LhngNKGZfvGFNG9vyuH1wutgtc8= Subject key identifier: 55:B7:83:4C:CF:2F:16:43:20:08:87:FA:E1:7F:38:9F:A5:14:30:3C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CBAE72E20086F67352CD76A40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcd42c79-dd5e-3c82-b992-91be371e11b3.roa Signing time: Mon 02 Feb 2026 14:00:40 +0000 ROA not before: Mon 02 Feb 2026 14:00:40 +0000 ROA not after: Sun 03 May 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.17.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ba:e7:2e:20:08:6f:67:35:2c:d7:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 2 14:00:40 2026 GMT Not After : May 3 13:00:40 2026 GMT Subject: CN=38b4f063-0e6b-47dc-92e2-de1f93005729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:e1:98:98:ee:88:6d:47:d8:8b:77:e2:72: 2a:2c:d4:03:44:61:c8:86:66:91:f0:2f:fb:be:e9: 96:53:8b:90:e1:3f:6f:e8:43:c5:0a:2b:4a:9a:75: bc:a9:21:aa:af:06:13:c7:f8:a0:85:c3:23:c3:6b: 3a:fa:56:02:d1:ae:60:7f:25:72:0d:4a:23:5d:f0: 8a:f0:2d:dc:20:31:af:6e:b2:5c:16:93:d7:74:b2: 9d:4e:10:85:77:d0:d6:a5:6c:75:d2:ae:49:d2:06: 90:77:8e:a9:65:6d:41:55:64:fe:14:f6:3f:a1:25: fc:a1:b3:e4:27:4d:0b:4b:a6:1e:29:f9:ff:14:cf: 18:e4:90:df:65:63:9f:49:a6:09:01:3a:be:16:43: 53:44:f8:83:76:09:fb:b5:a9:7c:b9:b6:1d:12:4f: 07:27:78:5f:4b:f1:93:94:80:82:d3:12:d6:8d:ea: 2b:a0:3a:09:39:a5:3a:ee:4f:35:8a:a2:22:06:76: bb:cb:a8:4f:fe:d7:d1:54:96:d4:f6:bd:d6:b8:9d: 99:1e:2c:bb:6e:b7:36:08:06:2c:02:f8:15:7e:71: 78:ac:ad:19:51:2b:1a:05:9b:27:b6:03:e2:41:ba: 24:2d:9c:14:aa:c1:7f:1c:99:b0:92:3d:46:16:8f: 0a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B7:83:4C:CF:2F:16:43:20:08:87:FA:E1:7F:38:9F:A5:14:30:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcd42c79-dd5e-3c82-b992-91be371e11b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:05:24:ff:98:7d:0f:7a:7e:1e:dd:25:e7:83:5d:84:1b:f6: a1:e5:ae:66:d6:30:7a:f2:c5:6d:ba:1d:00:15:96:b5:1d:a2: 0e:9a:42:b8:71:b1:57:0e:cc:38:4b:f9:92:10:bb:19:c6:47: ae:5c:bb:ae:24:99:94:32:ee:44:b5:03:79:34:f7:8f:de:c1: f0:6d:02:60:24:f7:a2:5b:f7:5f:a5:1b:78:e5:c1:fe:a8:14: c5:22:1b:75:e4:24:8c:6b:2c:3b:d1:eb:6b:73:8b:c4:29:89: f2:2c:ff:a5:9d:2c:a6:22:6b:e3:80:f2:37:45:37:08:9d:62: cf:86:bb:06:24:51:d3:e7:ce:08:25:94:57:2c:73:ab:50:4b: 7b:e5:41:71:87:5f:53:98:fc:bd:19:53:00:4c:75:d5:8c:b8: 10:29:56:c8:4a:97:77:ff:ac:c5:9e:e0:e3:6b:6a:6a:2a:07: ce:2d:9e:9c:77:70:1f:c3:da:77:4b:77:62:f2:87:48:d0:88: d8:2f:d0:b4:d9:a1:03:10:9d:a7:a6:fe:15:11:23:38:bf:c7: 8d:0c:ce:93:c0:cc:b4:42:0a:d5:b8:c1:f2:81:c2:89:6b:d5: e8:84:73:e2:03:11:1b:ef:88:25:e8:23:79:3f:de:82:14:91: a8:22:a4:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy65y4gCG9nNSzXakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIwMjE0MDA0MFoXDTI2MDUwMzEzMDA0MFowLzEtMCsGA1UEAxMk MzhiNGYwNjMtMGU2Yi00N2RjLTkyZTItZGUxZjkzMDA1NzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj3hmJjuiG1H2It34nIqLNQDRGHIhmaR8C/7 vumWU4uQ4T9v6EPFCitKmnW8qSGqrwYTx/ighcMjw2s6+lYC0a5gfyVyDUojXfCK 8C3cIDGvbrJcFpPXdLKdThCFd9DWpWx10q5J0gaQd46pZW1BVWT+FPY/oSX8obPk J00LS6YeKfn/FM8Y5JDfZWOfSaYJATq+FkNTRPiDdgn7tal8ubYdEk8HJ3hfS/GT lICC0xLWjeoroDoJOaU67k81iqIiBna7y6hP/tfRVJbU9r3WuJ2ZHiy7brc2CAYs AvgVfnF4rK0ZUSsaBZsntgPiQbokLZwUqsF/HJmwkj1GFo8KtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFW3g0zPLxZDIAiH+uF/OJ+lFDA8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmNkNDJjNzktZGQ1ZS0z YzgyLWI5OTItOTFiZTM3MWUxMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRH8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsFJP+YfQ96fh7dJeeDXYQb9qHlrmbWMHryxW26HQAVlrUdog6aQrhx sVcOzDhL+ZIQuxnGR65cu64kmZQy7kS1A3k094/ewfBtAmAk96Jb91+lG3jlwf6o FMUiG3XkJIxrLDvR62tzi8QpifIs/6WdLKYia+OA8jdFNwidYs+GuwYkUdPnzggl lFcsc6tQS3vlQXGHX1OY/L0ZUwBMddWMuBApVshKl3f/rMWe4ONramoqB84tnpx3 cB/D2ndLd2Lyh0jQiNgv0LTZoQMQnaem/hURIzi/x40MzpPAzLRCCtW4wfKBwolr 1eiEc+IDERvviCXoI3k/3oIUkagipJY= -----END CERTIFICATE-----Generated at Sun Mar 1 23:07:53 2026 by rpki-client