$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1af58f65-539a-35e4-8e11-237912be598c.roa File: 1af58f65-539a-35e4-8e11-237912be598c.roa (raw, json) Hash identifier: jot4ic9EYvPVhePSspZyZg2THrxLleHIBvNixngfhE0= Subject key identifier: 41:9A:FD:DF:F1:84:11:AE:3E:BF:D1:11:1A:D9:CD:B4:9E:0E:90:EF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF92348FF1AB5886865D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1af58f65-539a-35e4-8e11-237912be598c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.18.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:92:34:8f:f1:ab:58:86:86:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b57c046c-b037-45ca-bfa4-6fb7554e102c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7d:a6:64:8f:d9:07:a6:61:23:98:e3:27:a4: a6:5b:70:7b:3e:75:ba:28:d6:3b:ed:a9:a9:9f:35: ec:36:e3:6a:cc:ea:5d:1f:26:4d:61:c9:18:78:e6: bf:3c:21:2d:b9:73:2f:fd:ae:ed:1e:a5:5d:12:67: d8:c8:f9:f5:e9:05:74:ff:5d:d4:aa:2d:5a:da:e3: f7:71:50:d1:70:ad:11:49:2b:8d:19:86:24:ee:4c: ca:56:a9:57:63:bc:6c:59:1b:f0:b6:a7:d3:63:0f: 41:8f:49:e7:ac:79:a7:a2:2f:f8:33:b8:cc:2a:18: d9:c1:4c:04:f6:bd:7a:c9:69:7a:ac:ba:a1:0e:4b: 7d:bd:7d:8f:97:5c:06:0d:05:15:3c:93:7d:6f:3a: 92:81:62:7f:70:87:63:0b:e3:cd:cd:cb:48:de:f5: c1:dc:24:86:fb:96:00:c2:a3:7c:11:48:20:c4:cd: 74:5a:f1:b1:b1:b4:a5:c3:d1:87:25:3e:28:2c:12: 96:08:8e:89:db:ca:05:8f:c9:63:7e:c9:a5:3a:51: eb:ce:7e:91:72:42:55:0c:32:4f:a9:06:42:48:da: ed:26:2a:cd:14:cc:73:9d:5b:04:3c:c4:dd:fd:62: 28:fc:ea:33:90:8b:f1:c7:d7:99:5e:02:f9:45:12: bd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9A:FD:DF:F1:84:11:AE:3E:BF:D1:11:1A:D9:CD:B4:9E:0E:90:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1af58f65-539a-35e4-8e11-237912be598c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:4d:96:65:01:d3:0c:24:6e:ac:bf:c6:bc:77:57:8a:d4:71: e4:74:5e:2b:99:02:dc:84:63:57:09:7a:0a:0b:fb:d0:2c:d5: 68:6a:9d:ff:15:b0:14:a8:d2:02:55:bd:2b:fe:d3:51:54:be: 80:f5:29:ab:36:01:7d:d0:bc:9e:f8:e5:5d:12:6c:99:67:df: ac:0e:14:f3:12:47:89:01:63:b5:f4:0c:27:65:cb:ba:04:c7: 93:71:dd:30:95:9f:30:5b:08:ba:18:72:6f:88:00:2f:ef:da: fa:ea:50:ea:a6:4d:7d:bf:18:bd:00:a1:87:d4:58:95:e9:18: 56:34:79:7f:19:74:2b:39:a9:27:6e:6c:a6:3e:ed:3a:91:9b: 35:c1:94:82:f3:f1:3f:04:79:79:54:5b:3a:25:36:04:0b:c6: e7:82:12:2d:06:e2:4d:9d:5b:b9:fd:c0:ff:1c:42:a2:d4:73: 08:83:6b:2a:d3:97:90:15:66:ad:44:04:3c:5c:cc:c6:da:8f: 2e:8e:24:d7:af:87:ab:d9:3d:e7:25:e8:d8:c3:57:64:8b:01: 09:28:1d:fe:cb:2e:c8:7e:0d:ec:30:5a:78:fd:29:1a:9c:0f: 67:60:d9:7f:41:0e:ca:c1:db:ea:0b:09:1e:e9:f9:63:04:c4: c9:d0:87:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35I0j/GrWIaGXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjU3YzA0NmMtYjAzNy00NWNhLWJmYTQtNmZiNzU1NGUxMDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7X2mZI/ZB6ZhI5jjJ6SmW3B7PnW6KNY77amp nzXsNuNqzOpdHyZNYckYeOa/PCEtuXMv/a7tHqVdEmfYyPn16QV0/13Uqi1a2uP3 cVDRcK0RSSuNGYYk7kzKVqlXY7xsWRvwtqfTYw9Bj0nnrHmnoi/4M7jMKhjZwUwE 9r16yWl6rLqhDkt9vX2Pl1wGDQUVPJN9bzqSgWJ/cIdjC+PNzctI3vXB3CSG+5YA wqN8EUggxM10WvGxsbSlw9GHJT4oLBKWCI6J28oFj8ljfsmlOlHrzn6RckJVDDJP qQZCSNrtJirNFMxznVsEPMTd/WIo/OozkIvxx9eZXgL5RRK93wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGa/d/xhBGuPr/RERrZzbSeDpDvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWFmNThmNjUtNTM5YS0z NWU0LThlMTEtMjM3OTEyYmU1OThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9NlmUB0wwkbqy/xrx3V4rUceR0XiuZAtyEY1cJegoL+9As1Whqnf8V sBSo0gJVvSv+01FUvoD1Kas2AX3QvJ745V0SbJln36wOFPMSR4kBY7X0DCdly7oE x5Nx3TCVnzBbCLoYcm+IAC/v2vrqUOqmTX2/GL0AoYfUWJXpGFY0eX8ZdCs5qSdu bKY+7TqRmzXBlILz8T8EeXlUWzolNgQLxueCEi0G4k2dW7n9wP8cQqLUcwiDayrT l5AVZq1EBDxczMbajy6OJNevh6vZPecl6NjDV2SLAQkoHf7LLsh+DewwWnj9KRqc D2dg2X9BDsrB2+oLCR7p+WMExMnQh+E= -----END CERTIFICATE-----Generated at Thu Mar 26 15:28:20 2026 by rpki-client