$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4673b2fe-63ba-3416-a8e6-856bfcf145fb.roa File: 4673b2fe-63ba-3416-a8e6-856bfcf145fb.roa (raw, json) Hash identifier: eglHDy0Gy8f0rPCsFI9UlZ/NIc87xpMM327oDVicKk4= Subject key identifier: A1:B1:90:DC:3D:D2:71:74:1E:BD:5A:75:C7:04:23:81:1D:64:55:C5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF9B2809E0AC7A1776F700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4673b2fe-63ba-3416-a8e6-856bfcf145fb.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.19.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:9b:28:09:e0:ac:7a:17:76:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=25c73e8a-6f02-4a3f-b1c2-f78513af2088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:61:b0:2b:39:54:df:6a:aa:27:2a:99:55:fa: 40:34:5a:6d:f9:c4:9a:db:de:2d:c7:79:ef:ba:10: 71:8e:91:96:a4:84:b1:f9:fd:2d:2a:32:32:69:54: cb:86:62:a5:a6:dd:48:cf:77:8e:39:43:83:21:83: 41:7d:21:1f:28:99:2f:60:53:4d:bf:66:48:90:c6: 52:53:a7:e5:9b:4e:73:9b:a0:eb:78:55:45:ab:bd: f0:16:fc:ca:df:c9:35:35:3d:b4:b1:b7:da:6c:47: a6:c6:24:46:33:3a:95:da:88:9a:64:52:cd:f1:43: cd:0a:56:58:c3:03:51:9c:57:a1:65:b9:30:b0:c1: 46:dd:a3:3d:ac:5e:1e:3c:94:3b:73:ea:e2:23:da: a2:cf:18:74:60:f4:4c:7e:19:95:99:70:89:0e:63: 30:f9:9c:10:f1:7b:e0:98:1e:de:f0:c4:a2:6a:6b: 07:a1:f0:ab:20:01:ae:f6:f0:66:61:ce:1f:64:5c: c8:e8:72:82:b2:95:8c:9a:2d:fc:d2:ac:1b:ec:86: d0:2d:16:32:d1:11:68:08:fe:41:0f:1d:9b:6b:fb: c5:8e:5b:33:67:17:b5:3c:87:dc:df:be:e9:e0:11: 47:e5:37:2c:61:1b:eb:9f:b3:d6:49:9d:f8:48:92: 52:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:B1:90:DC:3D:D2:71:74:1E:BD:5A:75:C7:04:23:81:1D:64:55:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4673b2fe-63ba-3416-a8e6-856bfcf145fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:60:25:d4:c2:db:ba:61:b5:95:67:21:96:8b:81:61:37:69: 58:44:31:b3:b1:bd:6c:22:b9:d4:14:bb:89:ed:2e:5e:48:2a: 27:71:08:50:86:85:1c:ec:d9:23:8e:f0:76:38:c9:68:10:ea: 13:63:d2:8f:5b:a4:89:4c:42:12:a4:43:e7:0d:df:2b:2a:28: 16:3b:c7:88:13:7b:8d:a3:17:9e:3c:f2:3f:94:70:72:6e:45: e7:c0:91:0b:40:71:8f:ba:6e:27:9a:36:06:cd:56:91:c0:fa: 05:cc:46:34:f6:82:a0:75:36:d9:77:0c:b3:54:f0:ea:19:81: 5f:41:a8:07:0d:55:37:09:f9:ee:a2:8e:1c:64:70:50:51:4f: c0:5f:2e:bf:28:ff:ab:17:69:ce:38:0f:bb:fd:e8:21:e6:ee: 10:5f:d7:bf:ec:72:dd:57:8f:2b:d9:16:e1:c1:e8:e4:6e:a2: 68:bc:cf:ab:6e:16:33:7f:cd:f1:17:ac:e6:6d:96:d8:01:06: c6:c2:a0:ba:7c:8a:8e:38:4a:25:29:03:1b:fb:3b:e1:c0:86: d8:1b:b9:af:e1:be:28:98:65:b7:c1:27:ce:fa:ba:22:d2:1a: e9:00:2c:a4:ea:54:a1:8c:5b:0d:fd:30:9c:23:20:e6:b0:08: 42:c2:91:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35soCeCsehd29wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MjVjNzNlOGEtNmYwMi00YTNmLWIxYzItZjc4NTEzYWYyMDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWGwKzlU32qqJyqZVfpANFpt+cSa294tx3nv uhBxjpGWpISx+f0tKjIyaVTLhmKlpt1Iz3eOOUODIYNBfSEfKJkvYFNNv2ZIkMZS U6flm05zm6DreFVFq73wFvzK38k1NT20sbfabEemxiRGMzqV2oiaZFLN8UPNClZY wwNRnFehZbkwsMFG3aM9rF4ePJQ7c+riI9qizxh0YPRMfhmVmXCJDmMw+ZwQ8Xvg mB7e8MSiamsHofCrIAGu9vBmYc4fZFzI6HKCspWMmi380qwb7IbQLRYy0RFoCP5B Dx2ba/vFjlszZxe1PIfc377p4BFH5TcsYRvrn7PWSZ34SJJSMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGxkNw90nF0Hr1adccEI4EdZFXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDY3M2IyZmUtNjNiYS0z NDE2LWE4ZTYtODU2YmZjZjE0NWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtgJdTC27phtZVnIZaLgWE3aVhEMbOxvWwiudQUu4ntLl5IKidxCFCG hRzs2SOO8HY4yWgQ6hNj0o9bpIlMQhKkQ+cN3ysqKBY7x4gTe42jF5488j+UcHJu RefAkQtAcY+6bieaNgbNVpHA+gXMRjT2gqB1Ntl3DLNU8OoZgV9BqAcNVTcJ+e6i jhxkcFBRT8BfLr8o/6sXac44D7v96CHm7hBf17/sct1XjyvZFuHB6ORuomi8z6tu FjN/zfEXrOZtltgBBsbCoLp8io44SiUpAxv7O+HAhtgbua/hviiYZbfBJ876uiLS GukALKTqVKGMWw39MJwjIOawCELCkco= -----END CERTIFICATE-----Generated at Thu Mar 26 07:21:49 2026 by rpki-client