$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fef5b18-1101-33fe-94e4-3854402a4e7a.roa File: 3fef5b18-1101-33fe-94e4-3854402a4e7a.roa (raw, json) Hash identifier: GDjwZL6ZFKNY6u14VdyweXVrsdzStK23gD6T+8ucQKI= Subject key identifier: CC:5D:9D:FD:21:3E:0A:B5:01:8F:C6:4B:13:39:5B:49:6A:95:88:A5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AA228505B15BB971746C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fef5b18-1101-33fe-94e4-3854402a4e7a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.23.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:22:85:05:b1:5b:b9:71:74:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=dd8dc6fd-54f6-4246-9ad7-d45661b0d107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f1:2a:d6:0f:fe:bc:a8:9b:04:85:c8:6e:85: ce:4f:c7:6d:36:1c:b1:df:ba:6a:b8:7a:fc:db:fe: 8b:29:c5:5e:a7:99:b9:75:d1:b1:cc:68:7c:a7:44: e6:b8:52:ce:ba:94:94:29:55:af:1f:65:aa:5f:3f: 2d:15:32:ed:d3:08:b6:4e:c3:38:77:97:3a:4e:a1: 38:da:12:12:9c:38:47:21:8f:22:bc:e7:3b:35:f0: ca:1d:c1:2a:9c:41:93:0d:41:bb:a9:4d:c9:bf:8e: b2:c6:55:28:07:d2:dd:2e:88:9f:72:ef:e2:7f:0e: f2:2f:35:7b:02:36:da:90:36:be:03:8f:96:fa:85: 2d:27:ad:4d:88:2d:b8:cc:d9:c8:b3:33:a1:7b:6b: 92:f2:ed:2a:42:eb:44:1a:50:e5:92:39:37:c2:ff: cd:2a:56:7e:c2:4e:0c:4a:e1:08:db:b3:f7:45:86: 88:78:5e:8c:55:a7:e8:b0:af:f3:b4:bc:f8:86:46: 60:53:d0:79:b3:da:77:99:c5:1c:a4:e7:7c:6a:c6: 43:11:4c:0c:5b:5a:fc:29:5c:1a:56:b6:69:13:00: a8:67:96:23:c3:9e:ba:5e:df:9e:e1:14:60:14:27: 14:df:9f:2b:08:a6:91:b8:6f:d1:9b:eb:1c:9d:42: e2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5D:9D:FD:21:3E:0A:B5:01:8F:C6:4B:13:39:5B:49:6A:95:88:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3fef5b18-1101-33fe-94e4-3854402a4e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:60:d6:8a:bb:fd:26:78:d5:dc:58:25:56:78:25:97:ab:8b: 28:73:03:be:2a:98:ef:06:cb:36:a8:cc:06:38:20:02:e8:b6: 17:0a:2f:92:f4:88:a7:6d:f2:db:56:e2:fe:36:bb:2a:b2:b0: 48:cf:59:44:1a:c1:3e:f4:85:32:23:92:2f:52:0e:16:49:69: 30:38:7d:24:15:03:e6:ac:4e:f5:c3:c4:16:5d:56:78:76:3e: db:fb:1c:8e:9c:8c:d2:ed:a9:58:f6:2f:14:6a:15:4c:15:ca: 90:65:fb:33:ea:2a:f2:f6:6b:39:71:25:2b:8e:48:37:94:99: a4:31:40:40:a6:25:e2:8a:c9:68:d7:59:44:db:d2:30:5f:5e: e2:7f:5f:69:ec:67:9f:c7:a1:cf:f8:ac:a4:8a:ac:ac:65:f8: b2:3b:25:42:e5:0e:43:90:3a:6f:d2:53:7c:7a:d4:2f:89:88: ed:85:0e:c7:d2:b2:e0:bd:24:f1:28:43:8c:75:f5:80:f1:5c: 11:dd:94:2b:89:60:89:b3:3d:e5:34:33:22:af:43:ca:56:ca: 0c:21:56:f7:44:ad:ef:b1:0d:b1:5f:09:50:0b:7c:e0:67:73: ca:88:6a:ba:05:d5:70:8c:f6:24:df:5b:2c:4b:5d:ad:ea:77: 15:2e:34:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqiKFBbFbuXF0bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZGQ4ZGM2ZmQtNTRmNi00MjQ2LTlhZDctZDQ1NjYxYjBkMTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvEq1g/+vKibBIXIboXOT8dtNhyx37pquHr8 2/6LKcVep5m5ddGxzGh8p0TmuFLOupSUKVWvH2WqXz8tFTLt0wi2TsM4d5c6TqE4 2hISnDhHIY8ivOc7NfDKHcEqnEGTDUG7qU3Jv46yxlUoB9LdLoifcu/ifw7yLzV7 AjbakDa+A4+W+oUtJ61NiC24zNnIszOhe2uS8u0qQutEGlDlkjk3wv/NKlZ+wk4M SuEI27P3RYaIeF6MVafosK/ztLz4hkZgU9B5s9p3mcUcpOd8asZDEUwMW1r8KVwa VrZpEwCoZ5Yjw566Xt+e4RRgFCcU358rCKaRuG/Rm+scnULigQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxdnf0hPgq1AY/GSxM5W0lqlYilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2ZlZjViMTgtMTEwMS0z M2ZlLTk0ZTQtMzg1NDQwMmE0ZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRe4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJg1oq7/SZ41dxYJVZ4JZeriyhzA74qmO8GyzaozAY4IALothcKL5L0 iKdt8ttW4v42uyqysEjPWUQawT70hTIjki9SDhZJaTA4fSQVA+asTvXDxBZdVnh2 Ptv7HI6cjNLtqVj2LxRqFUwVypBl+zPqKvL2azlxJSuOSDeUmaQxQECmJeKKyWjX WUTb0jBfXuJ/X2nsZ5/Hoc/4rKSKrKxl+LI7JULlDkOQOm/SU3x61C+JiO2FDsfS suC9JPEoQ4x19YDxXBHdlCuJYImzPeU0MyKvQ8pWygwhVvdEre+xDbFfCVALfOBn c8qIaroF1XCM9iTfWyxLXa3qdxUuNHo= -----END CERTIFICATE-----Generated at Thu Mar 26 10:37:31 2026 by rpki-client