$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3afec743-baf7-3887-8c41-354a9f21be11.roa File: 3afec743-baf7-3887-8c41-354a9f21be11.roa (raw, json) Hash identifier: WEL7uoLBjHHnVsseYcOy/UhILPU/8c+pPaK9uFsXWpM= Subject key identifier: E8:AE:3F:ED:50:82:8B:A4:9A:8C:17:A8:D6:C0:12:FF:2C:23:41:F2 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584D0667F0681CCDB5FA0C885780 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3afec743-baf7-3887-8c41-354a9f21be11.roa Signing time: Sun 01 Mar 2026 15:05:51 +0000 ROA not before: Sun 01 Mar 2026 15:05:51 +0000 ROA not after: Sat 30 May 2026 14:05:51 +0000 asID: 30058 IP address blocks: 137.175.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:67:f0:68:1c:cd:b5:fa:0c:88:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Mar 1 15:05:51 2026 GMT Not After : May 30 14:05:51 2026 GMT Subject: CN=572a69f2-3874-472a-bf01-bd163e9aeb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:27:b8:72:f9:85:4f:49:a2:0e:23:45:ab: 25:69:61:a8:c8:de:f7:92:5c:8f:6f:f3:e3:a9:ac: 55:26:5e:91:91:e8:ae:f3:f6:82:96:94:b0:c9:66: 87:ee:a1:a2:cb:97:14:47:7e:53:bd:f4:27:81:9a: 30:cc:82:52:e3:7a:ce:e0:c0:4d:a0:c0:fd:24:75: 38:8c:40:bc:86:7f:86:59:61:20:27:08:59:70:a5: 19:f3:e6:e4:63:36:b7:44:c1:07:ed:ce:1e:0d:d9: 1a:4a:7d:7f:68:13:2b:15:da:d5:67:09:a9:70:b8: 05:b2:d8:3c:e6:65:bc:f2:75:5c:db:3c:09:6b:a0: b1:8c:19:eb:c4:16:a8:f1:16:2a:35:b1:3e:75:b6: 2c:16:07:07:28:2c:be:93:fe:d2:52:81:d2:a2:7b: 1c:fe:4d:f3:4d:ba:a1:5f:0c:00:77:cc:9f:69:a2: 90:b5:51:78:3d:9c:2e:af:cb:d5:be:41:6b:12:df: 47:e1:fc:1c:76:2d:34:68:ec:8a:e6:7b:0e:17:08: fe:e4:d4:aa:64:72:22:9c:78:a7:a0:1c:f2:d4:01: e6:fc:00:0c:4b:32:cd:a9:2c:36:3c:f6:be:c6:4f: ef:d2:7a:6d:34:2b:87:b9:8b:f0:10:a6:7c:52:05: b2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AE:3F:ED:50:82:8B:A4:9A:8C:17:A8:D6:C0:12:FF:2C:23:41:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3afec743-baf7-3887-8c41-354a9f21be11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 137.175.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:6a:c1:c3:44:c3:64:5b:04:da:0a:00:2b:5e:29:d1:7d:2c: 3e:8e:d3:8d:c2:9d:4c:0e:a1:a3:09:d9:3c:50:12:a0:61:aa: 2f:c9:73:5e:e5:18:af:1e:8d:02:02:e9:41:c7:8c:8f:0e:6e: 71:14:cb:6c:c2:15:cd:32:c8:d8:60:23:a3:06:3a:fe:75:f8: 04:a5:06:60:2a:37:ca:71:9f:cc:67:b3:7d:f0:b1:89:69:f0: ee:1d:1e:2c:b2:4d:ce:7c:f9:2c:b4:7e:8a:42:0a:7b:c6:ba: d7:37:91:7a:9f:0d:b1:b6:d7:b1:3f:3b:c3:b0:91:e7:19:b0: 79:8f:6e:9b:55:db:58:92:79:b9:5c:1f:0b:7e:e5:a3:ef:82: 75:ca:53:6a:5a:b9:1b:86:c8:78:78:b9:5f:44:2e:27:4a:05: 13:17:d8:4f:5f:f9:c0:c0:b9:69:45:0b:e6:62:3a:2b:c8:ba: ed:95:27:42:75:81:68:41:0d:0e:cd:e7:d4:5e:b9:02:f8:96: de:e2:5b:8a:90:46:dd:ac:0b:08:4b:c7:68:86:96:eb:c6:92: a2:4a:b0:cd:dd:ec:33:29:a1:0a:49:18:d7:0a:99:65:0e:6c: 00:2d:e5:3f:41:8a:cd:07:a3:d4:21:46:1a:dc:8c:74:ca:cc: f2:50:54:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GZ/BoHM21+gyIV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDMwMTE1MDU1MVoXDTI2MDUzMDE0MDU1MVowLzEtMCsGA1UEAxMk NTcyYTY5ZjItMzg3NC00NzJhLWJmMDEtYmQxNjNlOWFlYjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0onuHL5hU9Jog4jRaslaWGoyN73klyPb/Pj qaxVJl6Rkeiu8/aClpSwyWaH7qGiy5cUR35TvfQngZowzIJS43rO4MBNoMD9JHU4 jEC8hn+GWWEgJwhZcKUZ8+bkYza3RMEH7c4eDdkaSn1/aBMrFdrVZwmpcLgFstg8 5mW88nVc2zwJa6CxjBnrxBao8RYqNbE+dbYsFgcHKCy+k/7SUoHSonsc/k3zTbqh XwwAd8yfaaKQtVF4PZwur8vVvkFrEt9H4fwcdi00aOyK5nsOFwj+5NSqZHIinHin oBzy1AHm/AAMSzLNqSw2PPa+xk/v0nptNCuHuYvwEKZ8UgWylQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiuP+1QgoukmowXqNbAEv8sI0HyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvM2FmZWM3NDMtYmFmNy0z ODg3LThjNDEtMzU0YTlmMjFiZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAia8cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxqwcNEw2RbBNoKACteKdF9LD6O043CnUwOoaMJ2TxQEqBhqi/Jc17l GK8ejQIC6UHHjI8ObnEUy2zCFc0yyNhgI6MGOv51+ASlBmAqN8pxn8xns33wsYlp 8O4dHiyyTc58+Sy0fopCCnvGutc3kXqfDbG217E/O8OwkecZsHmPbptV21iSeblc Hwt+5aPvgnXKU2pauRuGyHh4uV9ELidKBRMX2E9f+cDAuWlFC+ZiOivIuu2VJ0J1 gWhBDQ7N59ReuQL4lt7iW4qQRt2sCwhLx2iGluvGkqJKsM3d7DMpoQpJGNcKmWUO bAAt5T9Bis0Ho9QhRhrcjHTKzPJQVDU= -----END CERTIFICATE-----Generated at Mon Mar 2 15:23:50 2026 by rpki-client