$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40a8cb52-aa04-349c-bd6c-d1d7c69086c9.roa File: 40a8cb52-aa04-349c-bd6c-d1d7c69086c9.roa (raw, json) Hash identifier: JRGNr1V+UFwnhQeoodCKVCJ6WA282H9g/WG+y04wDwg= Subject key identifier: BE:64:98:12:14:9E:AC:BA:84:52:F0:7F:3E:D0:6C:A0:FA:7C:89:7B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D3F64D227017E8943AE502900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40a8cb52-aa04-349c-bd6c-d1d7c69086c9.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.24.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d2:27:01:7e:89:43:ae:50:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=9e0e93c3-2890-4788-8007-e78f43de07b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:16:2d:7d:f2:11:69:80:e2:26:29:38:06: 7f:5b:c5:0f:0f:8b:cd:2c:e6:c8:71:a3:86:9c:ab: f3:e6:5a:c4:e0:34:f2:9e:d9:eb:77:a0:56:16:e9: 5f:b7:f1:6c:fa:8b:e8:43:87:39:0e:70:83:e5:03: 52:42:1d:66:91:b2:8f:d4:7a:6b:a6:77:9b:14:49: 7b:f4:d3:08:bb:b4:48:d4:59:d2:c6:98:27:b9:47: 38:b7:95:05:a6:70:4a:b8:04:1e:4c:07:da:ac:26: ad:c5:c1:89:3e:ba:aa:5b:67:cf:d2:c7:d3:39:50: 79:76:d1:07:27:e9:51:94:e3:a4:a4:83:6b:34:60: a0:bc:a1:fb:42:0c:bd:47:85:1c:d4:33:bd:f3:b5: 42:de:d7:30:d5:91:6a:11:ec:92:ed:23:b9:94:b4: 86:b8:7e:d2:80:4e:f0:cb:a5:db:67:09:54:e3:6f: d6:5a:df:e1:30:ac:13:09:59:4e:7e:fc:9c:08:56: de:69:8c:5a:5b:1d:14:fb:9e:7c:a7:b3:59:0a:fc: 34:1d:b5:53:1d:8e:d7:51:82:64:38:94:d3:af:6b: 28:32:c2:25:6d:b5:fc:f8:2c:87:08:51:1d:a2:9b: db:ef:d6:6b:65:b9:db:fd:7b:94:96:0e:3d:26:10: b1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:64:98:12:14:9E:AC:BA:84:52:F0:7F:3E:D0:6C:A0:FA:7C:89:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40a8cb52-aa04-349c-bd6c-d1d7c69086c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:11:b4:24:08:62:8e:4f:b2:47:93:c7:3c:40:28:35:15:6c: 87:74:32:22:a5:78:db:cd:a5:b1:e1:f5:51:6f:5d:fa:7b:b0: d4:b2:62:b3:5f:c7:c2:03:bb:8f:29:7f:3c:79:b5:d7:8c:af: cb:be:d3:eb:43:7a:45:aa:27:e6:bc:56:03:8e:6f:ec:df:52: 39:1e:d7:e5:05:1a:2d:41:3c:a1:b8:28:f2:47:9c:25:01:f8: 65:b9:49:74:15:6c:db:22:73:3e:29:10:bd:29:54:23:e2:8f: b7:e5:5d:00:29:05:61:d6:f2:58:4c:d5:3c:22:27:05:c4:39: 58:d9:71:40:ef:58:c7:68:cd:7d:6c:08:51:cd:9b:22:fe:5f: c5:e1:91:a1:77:53:dc:83:ce:98:ba:05:d4:fe:1b:31:9d:26: 23:2a:47:ab:83:76:d6:b5:23:f0:74:2e:ed:ed:e3:2d:e8:92: 9e:49:6a:9f:c1:a0:bf:35:1b:21:68:f8:d8:c3:b7:cc:81:7a: 6d:88:f0:19:3f:d2:1d:c7:bd:d8:2e:67:50:99:d1:cf:34:17: 0e:1d:72:e0:e8:56:d3:c9:42:c8:e6:c2:4f:00:e0:49:e5:79: 57:58:6a:3e:4f:03:f0:d7:c2:fb:ac:8d:b4:c6:de:79:db:8a: e3:15:03:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNInAX6JQ65QKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk OWUwZTkzYzMtMjg5MC00Nzg4LTgwMDctZTc4ZjQzZGUwN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKcWLX3yEWmA4iYpOAZ/W8UPD4vNLObIcaOG nKvz5lrE4DTyntnrd6BWFulft/Fs+ovoQ4c5DnCD5QNSQh1mkbKP1HprpnebFEl7 9NMIu7RI1FnSxpgnuUc4t5UFpnBKuAQeTAfarCatxcGJPrqqW2fP0sfTOVB5dtEH J+lRlOOkpINrNGCgvKH7Qgy9R4Uc1DO987VC3tcw1ZFqEeyS7SO5lLSGuH7SgE7w y6XbZwlU42/WWt/hMKwTCVlOfvycCFbeaYxaWx0U+558p7NZCvw0HbVTHY7XUYJk OJTTr2soMsIlbbX8+CyHCFEdopvb79ZrZbnb/XuUlg49JhCxOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5kmBIUnqy6hFLwfz7QbKD6fIl7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDBhOGNiNTItYWEwNC0z NDljLWJkNmMtZDFkN2M2OTA4NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRj/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8RtCQIYo5PskeTxzxAKDUVbId0MiKleNvNpbHh9VFvXfp7sNSyYrNf x8IDu48pfzx5tdeMr8u+0+tDekWqJ+a8VgOOb+zfUjke1+UFGi1BPKG4KPJHnCUB +GW5SXQVbNsicz4pEL0pVCPij7flXQApBWHW8lhM1TwiJwXEOVjZcUDvWMdozX1s CFHNmyL+X8XhkaF3U9yDzpi6BdT+GzGdJiMqR6uDdta1I/B0Lu3t4y3okp5Jap/B oL81GyFo+NjDt8yBem2I8Bk/0h3HvdguZ1CZ0c80Fw4dcuDoVtPJQsjmwk8A4Enl eVdYaj5PA/DXwvusjbTG3nnbiuMVA94= -----END CERTIFICATE-----Generated at Thu Mar 26 10:58:24 2026 by rpki-client