$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23957716-4faa-35cf-b99d-97d2f25c2a2e.roa File: 23957716-4faa-35cf-b99d-97d2f25c2a2e.roa (raw, json) Hash identifier: 3OD7DmpUxGA2oy/cSiL5RUAI+ZFnJ2MCdkoY2peCn8I= Subject key identifier: EB:28:62:3D:CE:80:DE:90:6B:D3:4A:47:4E:24:C4:52:02:4E:88:D5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF6605A5A0031E765B0F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23957716-4faa-35cf-b99d-97d2f25c2a2e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.29.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:66:05:a5:a0:03:1e:76:5b:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2267b056-e053-447a-bb2f-8e3e189e0745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:17:8d:41:85:a6:29:9b:8c:03:ac:eb:b1:83: c3:01:83:d9:59:56:7b:cc:ac:de:f4:39:9b:bc:21: 15:ce:15:19:3f:c2:bd:06:c6:41:03:41:4e:9a:e6: 08:52:84:86:d5:46:57:75:f4:33:cf:19:35:fe:36: 51:e1:7e:90:3b:bc:d2:0a:b9:cc:a1:d8:90:32:94: 50:da:17:3b:3e:42:dd:20:7a:dd:2a:2d:b7:15:98: 6d:c3:b2:b0:41:cd:52:52:92:43:77:9c:1f:c8:6f: 33:fb:ae:4d:77:c7:de:83:d6:ce:3c:f8:83:a4:fb: f7:c4:00:ae:e1:34:81:a2:a9:20:a2:10:ec:38:52: 96:a3:81:35:39:50:55:9f:2b:c7:2e:56:d6:1d:07: 49:65:0a:94:ac:40:65:4a:e7:ba:38:ac:27:1d:ee: 4d:4e:a3:b0:52:67:93:1a:e7:b8:42:b8:a9:29:d8: c3:bc:d5:9b:84:aa:a4:22:57:a8:dd:d4:16:73:ff: 83:da:e7:7a:26:20:bb:60:c7:18:bf:29:5b:f8:13: 7e:65:79:65:98:18:c1:18:e8:d9:fc:64:fa:28:aa: 18:94:67:f3:28:5d:e8:ed:71:6f:9b:4b:d7:ee:1d: 46:63:08:d5:6b:c3:14:3b:5c:8d:eb:28:81:33:09: 29:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:28:62:3D:CE:80:DE:90:6B:D3:4A:47:4E:24:C4:52:02:4E:88:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23957716-4faa-35cf-b99d-97d2f25c2a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d2:8e:ce:99:c1:68:5a:ff:bd:f7:c1:4c:a4:77:d1:33:dc: 40:4f:25:8d:78:41:ce:77:40:ec:c9:4e:a5:db:54:1d:92:2a: 5b:4b:d3:d4:04:81:86:0e:da:6f:43:27:bc:f3:bb:56:1d:d3: 19:ec:53:b3:ca:b5:4f:db:55:3e:d3:8a:f6:ae:5c:d7:30:f6: b6:c3:4a:d9:2c:31:ab:be:93:4c:46:f3:91:a8:ec:4b:52:e6: 16:25:e4:e4:98:11:d0:b1:17:7d:24:88:72:a3:99:ed:35:47: a6:c4:8e:78:f9:7f:e7:f4:c9:45:99:85:59:b3:d1:9d:69:66: 04:45:5a:9a:41:01:29:22:96:03:a2:53:c4:7d:f4:ec:ea:79: 4e:c4:0e:76:44:76:9b:54:ca:c2:46:77:32:50:4e:76:b5:28: 14:ca:fd:37:45:6f:77:52:45:df:6e:ab:db:35:3b:a8:92:d8: 79:f2:21:e7:3e:0b:e8:55:29:21:bf:26:0a:b3:f1:b7:d9:bc: 17:36:68:21:7e:d5:23:9a:67:74:45:b9:7e:92:dd:f5:27:d4: db:7d:90:d6:a1:ce:54:25:2c:1c:f4:70:c7:d1:33:ef:3e:9f: d2:b5:c6:e1:d6:16:ec:dd:31:c4:d0:a8:61:54:12:22:dd:b2: 02:b1:b8:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k32YFpaADHnZbDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjI2N2IwNTYtZTA1My00NDdhLWJiMmYtOGUzZTE4OWUwNzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BeNQYWmKZuMA6zrsYPDAYPZWVZ7zKze9Dmb vCEVzhUZP8K9BsZBA0FOmuYIUoSG1UZXdfQzzxk1/jZR4X6QO7zSCrnModiQMpRQ 2hc7PkLdIHrdKi23FZhtw7KwQc1SUpJDd5wfyG8z+65Nd8feg9bOPPiDpPv3xACu 4TSBoqkgohDsOFKWo4E1OVBVnyvHLlbWHQdJZQqUrEBlSue6OKwnHe5NTqOwUmeT Gue4QripKdjDvNWbhKqkIleo3dQWc/+D2ud6JiC7YMcYvylb+BN+ZXllmBjBGOjZ /GT6KKoYlGfzKF3o7XFvm0vX7h1GYwjVa8MUO1yN6yiBMwkp9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsoYj3OgN6Qa9NKR04kxFICTojVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjM5NTc3MTYtNGZhYS0z NWNmLWI5OWQtOTdkMmYyNWMyYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHSjs6ZwWha/733wUykd9Ez3EBPJY14Qc53QOzJTqXbVB2SKltL09QE gYYO2m9DJ7zzu1Yd0xnsU7PKtU/bVT7TivauXNcw9rbDStksMau+k0xG85Go7EtS 5hYl5OSYEdCxF30kiHKjme01R6bEjnj5f+f0yUWZhVmz0Z1pZgRFWppBASkilgOi U8R99OzqeU7EDnZEdptUysJGdzJQTna1KBTK/TdFb3dSRd9uq9s1O6iS2HnyIec+ C+hVKSG/Jgqz8bfZvBc2aCF+1SOaZ3RFuX6S3fUn1Nt9kNahzlQlLBz0cMfRM+8+ n9K1xuHWFuzdMcTQqGFUEiLdsgKxuIo= -----END CERTIFICATE-----Generated at Thu Mar 26 08:56:55 2026 by rpki-client