$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4dce1a3d-3868-3955-980a-db5f2fc13635.roa File: 4dce1a3d-3868-3955-980a-db5f2fc13635.roa (raw, json) Hash identifier: khoP1nFBw90dJQLC8DVFzHtz3TnrTUD0diHgUBSXcDo= Subject key identifier: D3:B8:90:E6:95:91:BB:D0:81:8F:33:AC:74:AB:6F:D3:B0:2A:F3:6F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AABDB56CF14237A0F21DD0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4dce1a3d-3868-3955-980a-db5f2fc13635.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.24.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:bd:b5:6c:f1:42:37:a0:f2:1d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=2de9e085-9a80-4966-be41-676a15698174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f7:0a:54:c8:6e:6b:db:fd:38:64:d2:14:92: 4c:4f:e2:55:84:64:b3:3b:a8:61:5d:e3:74:f3:eb: fb:73:d0:8a:bc:2d:42:ca:30:27:ac:ac:15:2b:eb: 9b:7b:43:95:76:7b:84:18:32:b5:09:4c:6d:f0:d4: 4f:e2:90:0f:08:20:11:a2:aa:15:23:0f:59:0e:0f: 03:3d:9e:30:74:83:6e:ec:1e:e8:bf:ab:4f:86:d9: 3a:3a:44:39:e0:7e:24:11:6d:f6:5e:33:5b:0e:6a: f3:a6:13:6d:b5:0b:53:c5:9b:53:f3:a6:f8:39:31: ba:50:98:af:f1:73:e9:ba:25:4e:bc:a6:40:69:59: 0b:77:06:95:8a:a9:7f:54:59:c6:88:4f:33:60:4c: d0:55:50:78:67:5d:ed:b3:b4:a9:af:97:1b:dd:f0: 54:bd:ef:cb:b8:e2:97:ed:0f:25:0c:9d:8a:73:e9: ce:d3:90:32:4a:0d:55:c9:e7:04:af:04:91:b2:88: bc:b1:80:ae:1b:46:73:2c:b8:ce:ef:4a:d1:ac:11: 7e:ab:b0:0c:16:5d:49:f9:dc:48:23:06:3d:37:e3: 51:41:7e:ff:f9:74:ec:c4:4f:62:70:57:d7:a1:b3: d0:9f:49:67:0c:2a:1b:9f:a4:84:6e:8c:17:42:c6: 1d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B8:90:E6:95:91:BB:D0:81:8F:33:AC:74:AB:6F:D3:B0:2A:F3:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4dce1a3d-3868-3955-980a-db5f2fc13635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:37:f9:75:1e:96:8f:11:df:49:e3:7d:73:15:3d:17:37:7a: 79:30:78:2b:75:a1:04:4a:88:ee:e5:42:a4:02:8a:1b:a7:79: c4:bc:78:f7:6f:04:6a:00:13:c4:1c:b6:20:75:10:41:fe:be: b0:91:a4:07:d1:58:20:92:cc:d2:d1:93:db:cb:b1:70:c0:ab: d1:0b:e0:3d:11:38:2a:59:67:95:53:af:04:9c:57:ab:5e:e7: 6b:84:e9:a8:12:b0:29:2a:09:a1:bf:4d:bf:9f:6d:d9:22:b1: 86:d7:a9:9f:ac:e8:77:7a:6f:09:3b:8d:f0:d7:99:5c:9f:ac: dc:e8:fb:d2:77:20:bb:6a:00:c2:1e:d4:9d:21:65:3f:fe:91: 06:9c:81:4d:dd:51:45:fe:d1:a8:80:d0:98:b8:69:5e:bb:73: ab:92:1a:8b:ba:2f:4e:e6:87:40:22:58:f0:2b:7b:a4:5b:0e: 34:39:e8:aa:13:0a:a2:9f:c2:19:32:c2:2a:85:aa:5c:e6:a6: 91:ce:05:bd:e7:cf:b3:3a:fa:21:ec:3e:7a:8a:0b:1b:80:0a: 11:c9:21:41:c6:43:01:cb:ec:92:72:99:7c:66:b0:10:b2:80: 81:2a:c2:ab:61:ef:0c:c4:af:6d:7d:14:dd:42:50:86:ba:cc: 7e:94:a7:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqr21bPFCN6DyHdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk MmRlOWUwODUtOWE4MC00OTY2LWJlNDEtNjc2YTE1Njk4MTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvcKVMhua9v9OGTSFJJMT+JVhGSzO6hhXeN0 8+v7c9CKvC1CyjAnrKwVK+ube0OVdnuEGDK1CUxt8NRP4pAPCCARoqoVIw9ZDg8D PZ4wdINu7B7ov6tPhtk6OkQ54H4kEW32XjNbDmrzphNttQtTxZtT86b4OTG6UJiv 8XPpuiVOvKZAaVkLdwaViql/VFnGiE8zYEzQVVB4Z13ts7Spr5cb3fBUve/LuOKX 7Q8lDJ2Kc+nO05AySg1VyecErwSRsoi8sYCuG0ZzLLjO70rRrBF+q7AMFl1J+dxI IwY9N+NRQX7/+XTsxE9icFfXobPQn0lnDCobn6SEbowXQsYdPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNO4kOaVkbvQgY8zrHSrb9OwKvNvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGRjZTFhM2QtMzg2OC0z OTU1LTk4MGEtZGI1ZjJmYzEzNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRhSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg3+XUelo8R30njfXMVPRc3enkweCt1oQRKiO7lQqQCihunecS8ePdv BGoAE8QctiB1EEH+vrCRpAfRWCCSzNLRk9vLsXDAq9EL4D0ROCpZZ5VTrwScV6te 52uE6agSsCkqCaG/Tb+fbdkisYbXqZ+s6Hd6bwk7jfDXmVyfrNzo+9J3ILtqAMIe 1J0hZT/+kQacgU3dUUX+0aiA0Ji4aV67c6uSGou6L07mh0AiWPAre6RbDjQ56KoT CqKfwhkywiqFqlzmppHOBb3nz7M6+iHsPnqKCxuAChHJIUHGQwHL7JJymXxmsBCy gIEqwqth7wzEr219FN1CUIa6zH6Upxo= -----END CERTIFICATE-----Generated at Thu Mar 26 19:05:21 2026 by rpki-client