$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/33886230-909a-3c78-8a7d-882d456f43a0.roa File: 33886230-909a-3c78-8a7d-882d456f43a0.roa (raw, json) Hash identifier: 3JnMzxF68+FeU8G4gOGqSCWCzmcI0AVUUWXEHdhJrdY= Subject key identifier: AD:06:0C:5B:87:FB:76:8D:95:E3:EB:80:0D:2B:B7:D7:9B:9B:F0:F1 Certificate issuer: /CN=3506dd4b-c904-4daa-9013-78c3d05bbcce Certificate serial: 010D0C9F4328584D852FD1894A884BB989384700 Authority key identifier: 38:0F:6F:65:C3:DD:EB:FC:45:AC:6F:0A:2C:FB:47:BE:7C:E0:E0:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/33886230-909a-3c78-8a7d-882d456f43a0.roa Signing time: Thu 16 Apr 2026 01:00:23 +0000 ROA not before: Thu 16 Apr 2026 01:00:23 +0000 ROA not after: Wed 15 Jul 2026 01:00:23 +0000 asID: 399105 IP address blocks: 172.99.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/3506dd4b-c904-4daa-9013-78c3d05bbcce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/3506dd4b-c904-4daa-9013-78c3d05bbcce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:85:2f:d1:89:4a:88:4b:b9:89:38:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3506dd4b-c904-4daa-9013-78c3d05bbcce Validity Not Before: Apr 16 01:00:23 2026 GMT Not After : Jul 15 01:00:23 2026 GMT Subject: CN=0da047b3-c0a9-47f9-820a-74b7f946ab86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c7:39:ce:ba:cd:a0:4a:68:24:2f:d2:da:1a: 7e:51:24:4f:e3:c2:41:68:7c:89:3f:c6:c7:81:f7: 58:03:e2:0a:ad:51:50:76:9e:5c:34:75:c6:e0:6a: dc:67:b4:f4:5b:03:ac:b0:71:8b:a2:08:ff:d0:c1: fb:c0:5c:9a:70:8d:6c:cb:1c:a6:fa:12:7d:89:04: f4:32:10:05:2d:38:0d:b2:42:dd:9f:73:d8:9a:71: b2:5d:d0:96:bb:12:66:d2:d2:d8:3c:45:21:8a:c2: a7:23:f4:1d:10:63:20:a5:19:9a:d2:93:5b:0e:63: 69:96:60:78:1b:51:c9:7b:54:72:0d:86:58:50:4b: c0:c4:03:a4:4a:43:9e:15:23:82:49:03:d0:db:0d: 54:e8:a4:e7:04:87:b0:03:e4:fe:12:57:88:4f:9e: b4:e4:d6:97:bd:70:28:e3:1a:1a:53:97:ec:0e:75: 90:dd:c2:16:80:bb:17:96:31:7d:92:28:28:5b:b6: 1e:61:eb:da:36:41:8b:35:02:89:61:c0:68:63:44: 13:13:ac:51:51:b6:14:35:75:a0:02:a9:70:23:ed: 83:c2:31:83:19:dc:6d:1c:86:85:ec:e5:47:17:1a: 0d:35:91:2b:7c:da:28:c7:24:b2:dc:08:ca:9f:74: cc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:06:0C:5B:87:FB:76:8D:95:E3:EB:80:0D:2B:B7:D7:9B:9B:F0:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/33886230-909a-3c78-8a7d-882d456f43a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce/3506dd4b-c904-4daa-9013-78c3d05bbcce.crl X509v3 Authority Key Identifier: keyid:38:0F:6F:65:C3:DD:EB:FC:45:AC:6F:0A:2C:FB:47:BE:7C:E0:E0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3506dd4b-c904-4daa-9013-78c3d05bbcce.cer sbgp-ipAddrBlock: critical IPv4: 172.99.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:84:e5:35:67:24:fc:24:1d:2a:f9:e7:3c:b1:cc:72:07:9b: 92:49:0c:d9:5e:94:8c:64:a5:31:fd:1f:2e:20:4b:9d:00:45: 4b:58:39:28:fa:f5:f5:9d:2a:9a:74:99:88:52:8c:be:53:60: a6:2f:7f:70:e0:5e:62:bb:23:50:33:88:de:ee:cd:1f:f8:4c: 7c:a5:7e:79:6b:e9:f2:4f:79:98:99:f2:0b:d9:f5:9c:be:69: f4:46:ef:e9:01:bb:22:6a:4a:63:94:ce:01:52:4d:02:21:89: 5d:a8:7d:32:5b:48:42:32:1f:f3:a0:1f:1a:ea:7b:85:9b:1e: a9:48:30:d2:bc:2d:7a:a8:7c:f3:5d:92:22:1c:b1:aa:13:95: 87:2b:6d:b7:6e:6f:0d:04:12:4a:eb:8c:c6:d9:18:5d:f7:da: 1c:ef:fa:30:a5:4d:cd:2b:02:59:1d:4a:2b:aa:f5:ec:62:8b: d8:e5:b4:66:bd:94:b7:13:5b:f9:7c:c7:5a:f8:2e:a3:8f:95: bb:da:fb:26:ef:35:6f:61:46:4e:8a:33:7c:10:70:31:c8:f0: 10:ae:33:2a:31:fb:b8:c9:c1:79:ba:60:e5:f7:04:72:d1:84: 5e:8d:d6:2f:6a:5e:dd:2d:39:ab:84:66:24:b5:ad:bf:dc:0f: 46:44:07:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2FL9GJSohLuYk4RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzUwNmRkNGItYzkwNC00ZGFhLTkwMTMtNzhjM2QwNWJi Y2NlMB4XDTI2MDQxNjAxMDAyM1oXDTI2MDcxNTAxMDAyM1owLzEtMCsGA1UEAxMk MGRhMDQ3YjMtYzBhOS00N2Y5LTgyMGEtNzRiN2Y5NDZhYjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsc5zrrNoEpoJC/S2hp+USRP48JBaHyJP8bH gfdYA+IKrVFQdp5cNHXG4GrcZ7T0WwOssHGLogj/0MH7wFyacI1syxym+hJ9iQT0 MhAFLTgNskLdn3PYmnGyXdCWuxJm0tLYPEUhisKnI/QdEGMgpRma0pNbDmNplmB4 G1HJe1RyDYZYUEvAxAOkSkOeFSOCSQPQ2w1U6KTnBIewA+T+EleIT5605NaXvXAo 4xoaU5fsDnWQ3cIWgLsXljF9kigoW7YeYevaNkGLNQKJYcBoY0QTE6xRUbYUNXWg AqlwI+2DwjGDGdxtHIaF7OVHFxoNNZErfNooxySy3AjKn3TM+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0GDFuH+3aNlePrgA0rt9ebm/DxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zNTA2 ZGQ0Yi1jOTA0LTRkYWEtOTAxMy03OGMzZDA1YmJjY2UvMzM4ODYyMzAtOTA5YS0z Yzc4LThhN2QtODgyZDQ1NmY0M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzUwNmRkNGItYzkwNC00ZGFhLTkw MTMtNzhjM2QwNWJiY2NlLzM1MDZkZDRiLWM5MDQtNGRhYS05MDEzLTc4YzNkMDVi YmNjZS5jcmwwHwYDVR0jBBgwFoAUOA9vZcPd6/xFrG8KLPtHvnzg4HgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zNTA2ZGQ0Yi1jOTA0LTRkYWEtOTAxMy03OGMz ZDA1YmJjY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGP2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeE5TVnJPwkHSr55zyxzHIHm5JJDNlelIxkpTH9Hy4gS50ARUtYOSj6 9fWdKpp0mYhSjL5TYKYvf3DgXmK7I1AziN7uzR/4THylfnlr6fJPeZiZ8gvZ9Zy+ afRG7+kBuyJqSmOUzgFSTQIhiV2ofTJbSEIyH/OgHxrqe4WbHqlIMNK8LXqofPNd kiIcsaoTlYcrbbdubw0EEkrrjMbZGF332hzv+jClTc0rAlkdSiuq9exii9jltGa9 lLcTW/l8x1r4LqOPlbva+ybvNW9hRk6KM3wQcDHI8BCuMyox+7jJwXm6YOX3BHLR hF6N1i9qXt0tOauEZiS1rb/cD0ZEB9g= -----END CERTIFICATE-----Generated at Sun Apr 19 15:33:17 2026 by rpki-client