$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f84a67d-069b-3eea-a9fa-d2f53a417a46.roa File: 4f84a67d-069b-3eea-a9fa-d2f53a417a46.roa (raw, json) Hash identifier: lp7teXYz6lvlXgMFzjGZ7HdZZF9LtSC+9ykiTJ80pdY= Subject key identifier: 34:11:C6:FF:C1:E1:56:14:7B:41:4C:8A:84:6B:77:55:DF:90:5C:A3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2A74BFB003302AF5C1D6EE40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f84a67d-069b-3eea-a9fa-d2f53a417a46.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.23.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:bf:b0:03:30:2a:f5:c1:d6:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=252e1ef6-9a80-440e-b6bb-9488a57613bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1e:0c:55:63:b6:e2:24:e5:2c:16:54:ec:cd: 03:36:77:7a:34:7a:0f:db:b2:a8:76:d8:9d:81:8c: 58:21:71:71:e7:e1:b2:b9:19:f8:db:9e:bb:ba:8a: dd:ee:38:9e:90:8a:42:47:b0:ab:38:68:71:6e:fa: 09:34:8e:e8:e6:91:bb:e2:0a:59:18:77:b9:66:d1: 72:e7:5d:58:0c:cd:f1:e4:fb:7e:09:5d:ac:a2:25: a8:d2:6f:f7:7c:7f:cc:b4:b2:b9:40:f2:55:88:c6: 73:b9:47:85:11:1d:eb:e2:bc:4c:02:d9:9a:6c:97: e3:e4:a1:a3:48:2f:a7:a7:0e:84:01:39:f2:22:46: a7:40:10:44:17:58:2f:d8:5f:2d:7a:a0:b0:47:ff: 2d:3d:5f:41:69:95:14:db:e8:29:2c:12:6c:c5:3b: 0b:13:84:8e:95:21:33:30:03:9d:54:41:f9:80:35: 8a:28:e0:81:bd:fe:c7:b7:02:7a:26:30:c0:43:70: b3:a0:a2:cb:98:f9:d3:6a:a0:56:09:86:b0:81:8f: 66:35:ff:b9:eb:2c:44:ec:53:30:a0:2c:b0:b4:6e: b2:e3:d1:92:9f:33:7f:51:43:b4:13:84:2d:73:93: 8f:98:0a:63:cf:2e:df:a4:65:1b:bf:02:ba:fe:6c: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:11:C6:FF:C1:E1:56:14:7B:41:4C:8A:84:6B:77:55:DF:90:5C:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f84a67d-069b-3eea-a9fa-d2f53a417a46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:a6:d7:77:b1:93:50:b8:32:f6:d6:28:e7:d0:2a:2b:59:b1: 15:05:3c:78:55:f0:69:9f:ca:b2:1b:b9:c3:a8:2e:78:a7:a7: 64:28:13:0f:bb:7f:24:33:82:0a:13:c1:c0:f0:7c:52:49:11: d9:83:61:b7:c1:23:96:db:8f:22:55:f8:9b:30:b6:20:7e:45: 59:04:fa:f5:eb:af:b0:2d:9e:4c:22:7f:8d:36:ef:9c:53:df: aa:25:16:c0:e2:3a:0f:f4:58:3c:3d:95:4c:04:87:30:c8:e2: 36:61:ef:5d:0a:0a:0c:9a:fc:e7:17:be:55:9b:af:4a:f1:ad: 66:3a:c4:9c:5d:3e:23:2c:9c:56:86:9b:c4:4d:9b:d5:d0:2f: f2:d6:bd:5b:fb:c6:3e:29:0e:a9:9e:5b:a3:8e:d2:47:83:58: ae:09:c3:28:c4:37:f1:c3:06:38:eb:4d:be:fc:b4:92:3c:4d: 6f:d0:71:93:77:7e:80:11:0c:c0:fc:34:07:86:6c:27:10:b9: 98:37:ba:74:1a:17:d3:4c:2c:8b:17:74:0b:e0:59:de:66:a5: da:79:02:23:3f:04:b5:44:58:14:93:55:1b:65:69:84:fd:5a: 0a:9a:d7:b9:dc:1c:bb:48:69:fd:a7:a3:07:d4:0d:0a:40:4b: 23:26:af:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdL+wAzAq9cHW7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MjUyZTFlZjYtOWE4MC00NDBlLWI2YmItOTQ4OGE1NzYxM2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB4MVWO24iTlLBZU7M0DNnd6NHoP27Kodtid gYxYIXFx5+GyuRn42567uord7jiekIpCR7CrOGhxbvoJNI7o5pG74gpZGHe5ZtFy 511YDM3x5Pt+CV2soiWo0m/3fH/MtLK5QPJViMZzuUeFER3r4rxMAtmabJfj5KGj SC+npw6EATnyIkanQBBEF1gv2F8teqCwR/8tPV9BaZUU2+gpLBJsxTsLE4SOlSEz MAOdVEH5gDWKKOCBvf7HtwJ6JjDAQ3CzoKLLmPnTaqBWCYawgY9mNf+56yxE7FMw oCywtG6y49GSnzN/UUO0E4Qtc5OPmApjzy7fpGUbvwK6/my6dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQRxv/B4VYUe0FMioRrd1XfkFyjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY4NGE2N2QtMDY5Yi0z ZWVhLWE5ZmEtZDJmNTNhNDE3YTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrReQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+m13exk1C4MvbWKOfQKitZsRUFPHhV8GmfyrIbucOoLninp2QoEw+7 fyQzggoTwcDwfFJJEdmDYbfBI5bbjyJV+JswtiB+RVkE+vXrr7Atnkwif40275xT 36olFsDiOg/0WDw9lUwEhzDI4jZh710KCgya/OcXvlWbr0rxrWY6xJxdPiMsnFaG m8RNm9XQL/LWvVv7xj4pDqmeW6OO0keDWK4JwyjEN/HDBjjrTb78tJI8TW/QcZN3 foARDMD8NAeGbCcQuZg3unQaF9NMLIsXdAvgWd5mpdp5AiM/BLVEWBSTVRtlaYT9 Wgqa17ncHLtIaf2nowfUDQpASyMmrw0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:08:57 2026 by rpki-client