$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0aa404fd-f943-3948-b38d-f28d7079d601.roa File: 0aa404fd-f943-3948-b38d-f28d7079d601.roa (raw, json) Hash identifier: K0WZYzqs1Uplxr4YnMgytfYJihNSYQ862FUua5W/1CU= Subject key identifier: FD:A8:B8:F2:7D:FC:BD:09:19:CF:8A:B8:61:A9:CA:55:F4:99:B3:35 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF9A6232B8698E0BD6BC80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0aa404fd-f943-3948-b38d-f28d7079d601.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.23.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:9a:62:32:b8:69:8e:0b:d6:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0efc5d3d-21b8-4b83-90de-0893dce44f76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dd:80:16:12:0d:cf:ff:ca:68:ac:81:eb:7f: 14:17:9e:5c:c3:62:74:02:df:45:1d:e4:e6:e8:d6: 88:3e:18:c1:79:e9:3d:f7:d4:b7:a5:53:59:14:61: 6f:e1:e7:eb:23:5c:59:2b:8c:da:de:9c:34:40:43: b7:1d:b3:52:45:15:86:4d:10:14:0a:b0:8a:e7:77: 03:42:11:76:e8:5e:69:ca:7c:d0:75:80:1e:95:4b: 2f:31:d1:76:5d:f0:23:3c:98:ca:79:31:12:d9:60: 67:dd:2d:3e:56:18:2a:d6:b6:51:c4:0f:aa:cb:24: 5a:9f:4b:f1:3f:06:f9:70:40:d8:9b:20:bf:45:fa: e3:fe:6c:14:85:e8:0a:1b:9e:72:89:7c:7f:ee:bc: 32:b7:30:3b:5c:99:84:b3:06:d1:d2:a2:e8:9b:03: de:10:c9:1b:7d:67:86:6a:b2:de:73:12:8b:2f:b2: 9f:3e:d6:5a:0a:ab:cf:b0:52:83:21:ab:1d:88:81: 29:56:e4:62:1d:d9:cb:53:1a:27:01:b3:0c:e8:0a: c3:2c:c5:05:87:72:20:1a:4c:bc:a5:b2:18:ef:0d: 73:76:2f:0f:3c:31:06:87:23:fc:1b:c7:ad:35:b6: 35:e3:df:22:7b:c8:86:08:b2:06:13:84:5e:73:13: 7f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A8:B8:F2:7D:FC:BD:09:19:CF:8A:B8:61:A9:CA:55:F4:99:B3:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0aa404fd-f943-3948-b38d-f28d7079d601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:05:ad:5f:88:10:9a:5e:87:86:05:9c:de:36:59:8e:5d:db: ec:d4:11:b0:18:c2:11:48:ec:15:10:36:d8:c0:27:68:e9:2f: b6:00:70:43:10:30:37:af:5b:79:39:d6:61:24:af:3e:f6:00: 83:ed:c7:57:34:8f:86:5d:a1:2b:36:a1:e7:6b:1d:ea:58:07: c1:fb:fd:e1:f7:01:f7:96:31:61:8b:51:b6:23:45:81:01:fb: df:71:cf:16:97:0b:2a:f5:ee:ba:7c:84:12:1c:06:5b:99:91: 7d:21:08:50:87:e5:50:6b:ff:dc:f5:95:78:9b:07:0c:73:51: fb:b1:85:cf:da:b2:ab:06:44:24:33:92:ed:f0:1a:83:45:91: 07:70:8d:89:24:53:fc:ea:f8:8b:f7:18:fa:ad:76:e5:3e:be: 6c:f0:30:1a:28:be:c9:a2:1f:22:46:8f:d8:cc:35:fe:e1:4e: ac:47:4d:c9:0b:ca:1f:ea:3e:3a:80:4b:7f:2d:23:ce:ca:e7: 54:15:c6:d8:8a:33:63:d3:34:33:c1:25:11:cc:7e:c0:4f:83: dc:6a:a0:ae:94:f6:af:d1:ec:78:70:9c:cc:84:28:62:f5:14: 3f:f4:cb:47:a1:c0:03:2c:78:5f:76:4c:34:84:dd:cd:ab:cb: 5d:d3:86:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35piMrhpjgvWvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGVmYzVkM2QtMjFiOC00YjgzLTkwZGUtMDg5M2RjZTQ0Zjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi92AFhINz//KaKyB638UF55cw2J0At9FHeTm 6NaIPhjBeek999S3pVNZFGFv4efrI1xZK4za3pw0QEO3HbNSRRWGTRAUCrCK53cD QhF26F5pynzQdYAelUsvMdF2XfAjPJjKeTES2WBn3S0+Vhgq1rZRxA+qyyRan0vx Pwb5cEDYmyC/Rfrj/mwUhegKG55yiXx/7rwytzA7XJmEswbR0qLomwPeEMkbfWeG arLecxKLL7KfPtZaCqvPsFKDIasdiIEpVuRiHdnLUxonAbMM6ArDLMUFh3IgGky8 pbIY7w1zdi8PPDEGhyP8G8etNbY1498ie8iGCLIGE4RecxN/jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2ouPJ9/L0JGc+KuGGpylX0mbM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGFhNDA0ZmQtZjk0My0z OTQ4LWIzOGQtZjI4ZDcwNzlkNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRfLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQFrV+IEJpeh4YFnN42WY5d2+zUEbAYwhFI7BUQNtjAJ2jpL7YAcEMQ MDevW3k51mEkrz72AIPtx1c0j4ZdoSs2oedrHepYB8H7/eH3AfeWMWGLUbYjRYEB +99xzxaXCyr17rp8hBIcBluZkX0hCFCH5VBr/9z1lXibBwxzUfuxhc/asqsGRCQz ku3wGoNFkQdwjYkkU/zq+Iv3GPqtduU+vmzwMBoovsmiHyJGj9jMNf7hTqxHTckL yh/qPjqAS38tI87K51QVxtiKM2PTNDPBJRHMfsBPg9xqoK6U9q/R7HhwnMyEKGL1 FD/0y0ehwAMseF92TDSE3c2ry13Thv8= -----END CERTIFICATE-----Generated at Fri Mar 27 01:58:37 2026 by rpki-client