$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b973fbf-d3c0-3e37-95cb-e7aa25e7947c.roa File: 2b973fbf-d3c0-3e37-95cb-e7aa25e7947c.roa (raw, json) Hash identifier: YyugVHiDubE9dTtYsbnPiJ5qy23Ri5fNzpFtFP+31TY= Subject key identifier: FE:F5:27:5C:F4:AA:F7:CB:7A:02:B9:06:86:F2:2B:25:BA:60:1D:3E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF8D0EB6B7A8867A347960 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b973fbf-d3c0-3e37-95cb-e7aa25e7947c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.23.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:8d:0e:b6:b7:a8:86:7a:34:79:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=e8980211-fc16-4cef-9c82-82e75ee95c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f4:ea:95:76:8d:c8:9e:42:39:f1:40:6f:67: 79:c4:46:d6:54:e8:d3:16:c0:c4:28:34:0a:12:5c: f7:a7:29:1d:29:41:6d:55:45:a5:fd:97:a7:92:75: 2b:69:63:c3:7b:89:bc:18:d4:22:3b:26:dd:7c:0c: 17:c0:d4:eb:4b:c6:3b:20:b3:ac:d7:8b:08:88:13: 3f:b2:56:5b:cc:de:91:26:be:89:b5:1e:53:b5:d0: ae:7e:7f:3a:d6:cc:8e:8a:d6:b3:03:21:1d:f2:b9: ea:95:ce:9e:ed:2e:c5:55:7d:94:81:42:ef:ee:bb: 43:99:86:7e:6c:1b:d8:ff:e1:dd:c0:91:83:a5:ad: 65:9f:75:51:dc:95:ce:19:96:58:37:86:ff:23:1a: 72:08:29:5e:67:30:0b:dc:1c:99:58:2f:ce:e9:29: fe:c4:ce:b5:a9:27:58:e6:35:35:25:30:4c:55:5c: 30:62:32:f6:c0:15:55:60:05:e6:7d:e5:91:b5:36: 8a:6a:17:39:ec:f6:0e:dd:2a:da:47:95:c0:45:2a: dc:30:eb:67:a4:00:2f:a1:b0:35:e1:3b:7a:b5:d4: 7c:86:a7:05:86:cb:77:bb:0c:12:0c:2b:40:a2:34: b3:85:17:9a:32:82:fb:50:10:bc:1f:03:f7:ef:30: db:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F5:27:5C:F4:AA:F7:CB:7A:02:B9:06:86:F2:2B:25:BA:60:1D:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2b973fbf-d3c0-3e37-95cb-e7aa25e7947c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:73:c9:cb:4e:90:2b:43:e2:ef:a5:ef:6b:27:1e:8f:61:4b: 8f:c5:61:63:90:20:42:9f:28:f9:30:39:19:a2:a4:8e:76:bb: a3:20:b9:61:23:88:18:e7:49:65:ba:3a:f8:63:07:f6:9a:26: 7d:a2:93:04:0e:fb:ed:ee:00:f4:b6:d5:b1:46:dc:be:40:d2: 46:65:ed:e8:82:72:23:8e:e7:25:db:c3:ed:a1:39:36:78:ea: a7:72:8c:ff:71:f6:e0:18:f3:05:a9:6b:8f:51:64:6c:ba:5a: 2e:33:c5:1b:5d:98:a1:05:66:09:ea:c2:df:41:bb:e0:4c:34: f2:7a:80:fa:28:21:7f:03:39:73:dc:cd:91:ed:33:20:54:be: ce:0d:42:df:53:5c:68:c4:73:2c:74:67:a0:90:72:44:2f:16: 5b:a2:2d:e6:75:e7:da:bd:4d:1d:c6:83:20:a6:e5:62:75:e5: d1:d9:4b:d1:5d:43:d5:19:4b:ef:3d:1e:af:48:f0:bc:78:76: c2:18:33:ed:d3:53:9c:9c:ce:2d:e8:db:47:1c:d6:bb:2f:5c: ac:52:aa:40:d3:db:c2:af:70:71:fb:dc:ca:c0:09:45:28:06: a2:dc:31:24:5b:bf:dd:4b:13:ba:9a:2b:c4:10:de:88:a2:70: 56:35:13:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k340Otreohno0eWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZTg5ODAyMTEtZmMxNi00Y2VmLTljODItODJlNzVlZTk1YzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/TqlXaNyJ5COfFAb2d5xEbWVOjTFsDEKDQK Elz3pykdKUFtVUWl/ZenknUraWPDe4m8GNQiOybdfAwXwNTrS8Y7ILOs14sIiBM/ slZbzN6RJr6JtR5TtdCufn861syOitazAyEd8rnqlc6e7S7FVX2UgULv7rtDmYZ+ bBvY/+HdwJGDpa1ln3VR3JXOGZZYN4b/IxpyCCleZzAL3ByZWC/O6Sn+xM61qSdY 5jU1JTBMVVwwYjL2wBVVYAXmfeWRtTaKahc57PYO3SraR5XARSrcMOtnpAAvobA1 4Tt6tdR8hqcFhst3uwwSDCtAojSzhReaMoL7UBC8HwP37zDb5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP71J1z0qvfLegK5BobyKyW6YB0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmI5NzNmYmYtZDNjMC0z ZTM3LTk1Y2ItZTdhYTI1ZTc5NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRcMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApzyctOkCtD4u+l72snHo9hS4/FYWOQIEKfKPkwORmipI52u6MguWEj iBjnSWW6OvhjB/aaJn2ikwQO++3uAPS21bFG3L5A0kZl7eiCciOO5yXbw+2hOTZ4 6qdyjP9x9uAY8wWpa49RZGy6Wi4zxRtdmKEFZgnqwt9Bu+BMNPJ6gPooIX8DOXPc zZHtMyBUvs4NQt9TXGjEcyx0Z6CQckQvFluiLeZ159q9TR3GgyCm5WJ15dHZS9Fd Q9UZS+89Hq9I8Lx4dsIYM+3TU5yczi3o20cc1rsvXKxSqkDT28KvcHH73MrACUUo BqLcMSRbv91LE7qaK8QQ3oiicFY1E8A= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:56 2026 by rpki-client