$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa File: 28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa (raw, json) Hash identifier: UkcwjguJdYvV4NtVukeIvDrFx9F4i7+ilRkIC9W6D4Y= Subject key identifier: CB:FE:2C:58:F7:47:76:6C:E3:B9:FA:9F:6F:FC:2A:EB:05:95:77:4C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2644A754B72315D8F2B7D600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 30036 IP address blocks: 173.20.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:a7:54:b7:23:15:d8:f2:b7:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=ece7d4ac-5e1d-45ec-8217-293ffa0faa97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:9a:34:97:ff:d6:ff:e0:30:63:9c:9e:eb: 69:4d:af:d7:22:e9:cf:93:dc:a8:e5:04:44:c1:b3: 81:eb:23:23:6c:86:f6:b7:6b:7d:fb:69:89:79:5b: 65:97:d1:91:39:ae:e8:4a:8b:4c:29:2e:0d:20:24: e1:f8:9d:87:27:aa:c8:2a:57:4d:af:a3:0e:0b:88: ea:98:cd:20:49:be:a5:33:79:0d:56:7c:0d:74:69: 6f:b7:9a:5c:8a:3a:2b:8d:8c:09:02:6a:78:08:29: bf:66:4f:91:69:45:09:42:92:ac:5e:7f:20:ac:87: 1a:dc:6d:f2:b0:24:09:13:ef:bc:83:99:86:f6:e0: 20:5d:d5:a6:41:99:36:c0:a8:7d:57:d4:b1:ba:c4: 51:6c:9f:3e:01:d7:71:bc:5c:56:15:8f:b2:18:dc: cb:e4:36:6f:2f:00:0c:fc:c1:a0:08:c5:34:b4:03: f5:25:be:19:3d:7f:b1:d4:cf:e8:7e:87:ae:ce:38: 9d:7a:14:2c:cd:20:25:5a:27:5f:33:d2:bd:1b:78: 9b:fa:4c:ad:91:58:9d:d9:03:51:d3:c1:cf:e6:c1: 44:cc:fb:13:66:9a:b0:6b:bc:24:36:89:70:b4:3f: ad:40:f6:7e:d0:14:3d:dd:dd:8b:75:7d:dc:06:17: b0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FE:2C:58:F7:47:76:6C:E3:B9:FA:9F:6F:FC:2A:EB:05:95:77:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28e7d268-26bd-3bb8-b1c3-81fa2718a02a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c0:26:3b:45:13:e5:e5:41:28:2f:3d:fd:31:ee:c3:91:e7: 6b:00:48:32:f6:d6:d3:06:54:cd:52:f6:62:ca:68:14:f7:3b: 75:7c:2c:21:a8:c2:79:0a:62:a3:9d:8b:e6:73:05:62:9b:5d: 93:d1:0f:7d:7d:f7:80:ca:dc:72:a7:07:48:74:ee:2e:f0:fd: 98:51:91:3f:6a:f2:a5:0e:34:00:4f:f6:ef:d5:aa:9d:4d:9c: 70:3b:0f:a0:f7:b1:29:1a:ed:9f:9d:42:3a:e3:7e:89:ad:4f: 7d:ab:5f:76:c9:70:ce:cd:a0:96:fa:af:2d:ef:7f:2f:5e:7f: f5:f0:ec:63:a0:15:1a:fd:61:aa:79:9f:83:2a:a7:fa:eb:66: 8d:23:41:22:d9:54:2a:d2:80:c1:36:33:52:8f:e3:a0:cb:07: fd:61:15:b3:cc:ab:c3:9a:d2:af:a5:e8:3b:03:bc:7e:e9:7d: 0a:2b:c4:5f:b0:7c:63:0b:0d:77:e5:83:aa:ff:d2:7b:6e:56: df:65:c9:80:20:fe:e8:b6:a3:20:a1:ff:d1:7d:da:86:db:45: 05:eb:7c:53:25:89:b4:3b:65:76:d4:eb:cd:18:07:5f:6d:18: 07:c7:93:0f:6d:ac:cb:4a:1d:18:95:b7:d2:9d:5c:04:ce:7a: e0:2f:ed:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRKdUtyMV2PK31gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk ZWNlN2Q0YWMtNWUxZC00NWVjLTgyMTctMjkzZmZhMGZhYTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNaaNJf/1v/gMGOcnutpTa/XIunPk9yo5QRE wbOB6yMjbIb2t2t9+2mJeVtll9GROa7oSotMKS4NICTh+J2HJ6rIKldNr6MOC4jq mM0gSb6lM3kNVnwNdGlvt5pcijorjYwJAmp4CCm/Zk+RaUUJQpKsXn8grIca3G3y sCQJE++8g5mG9uAgXdWmQZk2wKh9V9SxusRRbJ8+AddxvFxWFY+yGNzL5DZvLwAM /MGgCMU0tAP1Jb4ZPX+x1M/ofoeuzjidehQszSAlWidfM9K9G3ib+kytkVid2QNR 08HP5sFEzPsTZpqwa7wkNolwtD+tQPZ+0BQ93d2LdX3cBhew8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv+LFj3R3Zs47n6n2/8KusFlXdMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjhlN2QyNjgtMjZiZC0z YmI4LWIxYzMtODFmYTI3MThhMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTAJjtFE+XlQSgvPf0x7sOR52sASDL21tMGVM1S9mLKaBT3O3V8LCGo wnkKYqOdi+ZzBWKbXZPRD31994DK3HKnB0h07i7w/ZhRkT9q8qUONABP9u/Vqp1N nHA7D6D3sSka7Z+dQjrjfomtT32rX3bJcM7NoJb6ry3vfy9ef/Xw7GOgFRr9Yap5 n4Mqp/rrZo0jQSLZVCrSgME2M1KP46DLB/1hFbPMq8Oa0q+l6DsDvH7pfQorxF+w fGMLDXflg6r/0ntuVt9lyYAg/ui2oyCh/9F92obbRQXrfFMlibQ7ZXbU680YB19t GAfHkw9trMtKHRiVt9KdXATOeuAv7bY= -----END CERTIFICATE-----Generated at Thu Mar 26 07:43:48 2026 by rpki-client