$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ce4d8bf-df83-3fb5-8092-c0603d4d6510.roa File: 4ce4d8bf-df83-3fb5-8092-c0603d4d6510.roa (raw, json) Hash identifier: bOF5HUazUnfj/XXuJEUs4QOSZ7MjK3161SSO3RsmWjQ= Subject key identifier: 89:E9:2E:15:B6:10:A7:3C:3E:2A:CA:DE:C2:66:44:1B:74:9E:37:23 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF72A1D64D38C52B33EE40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ce4d8bf-df83-3fb5-8092-c0603d4d6510.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.22.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:72:a1:d6:4d:38:c5:2b:33:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=42e4766d-9f84-4549-9a81-bb8f80e9e529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:25:35:0d:22:8a:f0:7f:9a:d9:28:58:07: bb:0d:18:5c:dd:ea:3f:04:5c:68:52:e7:b4:25:03: f7:ab:44:09:a7:aa:a4:c8:98:8a:56:ae:79:8d:05: 81:50:89:6b:1a:f6:56:6c:18:17:ce:cf:fe:53:a1: b2:c0:78:e5:7a:ea:70:7c:fc:23:96:d6:95:3a:2e: 2f:55:d7:46:b9:c5:e3:ec:74:0d:93:12:ea:ba:5a: f5:0a:04:1b:51:9b:41:de:a0:a7:de:5a:09:a0:93: 94:1c:34:22:85:9b:0e:3c:f2:f0:14:7d:20:cc:97: 6f:3c:71:58:de:82:4f:3e:0c:ef:6e:93:13:f9:57: 99:e2:30:5f:e3:38:e4:88:6e:ce:03:b7:95:fd:3a: 58:f4:eb:ae:ea:2f:de:0c:ee:0c:3e:0b:61:22:a9: d6:65:af:9a:d4:dc:dd:4b:39:97:b8:ad:13:4c:f3: e2:88:4f:e8:ed:e3:02:05:36:8e:00:97:92:08:02: 02:8a:67:bd:91:82:6f:70:30:86:c2:4f:e7:33:45: 65:67:30:3a:94:e3:cd:e2:09:d1:92:cd:8c:fa:32: 61:38:ba:60:a1:35:e8:fe:ed:54:21:4f:8a:09:0d: 7e:e1:4d:4f:b0:eb:05:7b:be:b0:b8:21:23:2a:34: 04:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E9:2E:15:B6:10:A7:3C:3E:2A:CA:DE:C2:66:44:1B:74:9E:37:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4ce4d8bf-df83-3fb5-8092-c0603d4d6510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e5:99:30:b7:a4:e0:4e:c1:93:01:d6:12:2e:fb:46:9c:85: 1a:5e:02:33:e2:51:ef:3d:b2:2d:60:56:7a:d0:ea:30:7d:7d: d7:8a:e9:53:ee:96:79:c4:1a:b8:94:1a:68:25:42:11:9d:ec: 8f:43:6c:15:5f:1f:3b:53:e7:9b:91:d7:15:1b:ef:1d:f1:fd: 8f:da:75:1f:af:7a:cd:bb:78:69:d9:8a:76:c4:2c:98:33:e0: f9:10:91:5b:1c:f0:49:62:62:70:1b:c3:a3:c6:af:a3:e3:1c: 7c:db:98:ae:b0:46:c8:31:ed:d1:ef:21:e3:25:c7:c5:25:6b: a1:a7:ef:7d:dd:f9:70:e7:bf:bc:8f:99:78:d5:73:b4:1b:d8: 0e:99:1a:fe:15:d0:bc:56:3d:1b:c3:5b:c6:8e:c2:f7:e4:cf: 40:09:f3:d9:b5:bc:2d:5c:cb:fb:3f:ca:36:16:18:09:b4:70: 3d:d2:71:05:d0:83:48:08:7f:f1:df:b4:d0:d9:3f:12:58:b2: a5:03:f8:62:2f:02:38:55:1c:f5:a5:32:28:74:02:b7:b7:98: 00:bd:b8:1c:38:d5:ba:aa:7b:70:92:f4:25:b4:d5:91:47:53: 7d:58:87:f0:4b:59:60:a3:1d:6b:5b:bd:bc:84:5e:51:e5:a7: 72:90:3d:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k33Kh1k04xSsz7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDJlNDc2NmQtOWY4NC00NTQ5LTlhODEtYmI4ZjgwZTllNTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgMlNQ0iivB/mtkoWAe7DRhc3eo/BFxoUue0 JQP3q0QJp6qkyJiKVq55jQWBUIlrGvZWbBgXzs/+U6GywHjleupwfPwjltaVOi4v VddGucXj7HQNkxLqulr1CgQbUZtB3qCn3loJoJOUHDQihZsOPPLwFH0gzJdvPHFY 3oJPPgzvbpMT+VeZ4jBf4zjkiG7OA7eV/TpY9Ouu6i/eDO4MPgthIqnWZa+a1Nzd SzmXuK0TTPPiiE/o7eMCBTaOAJeSCAICime9kYJvcDCGwk/nM0VlZzA6lOPN4gnR ks2M+jJhOLpgoTXo/u1UIU+KCQ1+4U1PsOsFe76wuCEjKjQEVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInpLhW2EKc8PirK3sJmRBt0njcjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGNlNGQ4YmYtZGY4My0z ZmI1LTgwOTItYzA2MDNkNGQ2NTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRb+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnlmTC3pOBOwZMB1hIu+0achRpeAjPiUe89si1gVnrQ6jB9fdeK6VPu lnnEGriUGmglQhGd7I9DbBVfHztT55uR1xUb7x3x/Y/adR+ves27eGnZinbELJgz 4PkQkVsc8EliYnAbw6PGr6PjHHzbmK6wRsgx7dHvIeMlx8Ula6Gn733d+XDnv7yP mXjVc7Qb2A6ZGv4V0LxWPRvDW8aOwvfkz0AJ89m1vC1cy/s/yjYWGAm0cD3ScQXQ g0gIf/HftNDZPxJYsqUD+GIvAjhVHPWlMih0Are3mAC9uBw41bqqe3CS9CW01ZFH U31Yh/BLWWCjHWtbvbyEXlHlp3KQPag= -----END CERTIFICATE-----Generated at Thu Mar 26 18:19:36 2026 by rpki-client