$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55a2fa81-3e0c-3ef8-a494-40b73990f4d1.roa File: 55a2fa81-3e0c-3ef8-a494-40b73990f4d1.roa (raw, json) Hash identifier: is/rhezoSbsVjQkR/meXmmcXIn3HXZ1XGKevXmgaWAM= Subject key identifier: 20:A5:72:A3:57:94:23:14:BB:B8:A3:64:FB:4F:32:F3:C8:D8:F0:61 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E13505E66D8455CAF0DF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55a2fa81-3e0c-3ef8-a494-40b73990f4d1.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.25.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:35:05:e6:6d:84:55:ca:f0:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=448b0931-9914-4783-ab51-6138ec520146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:0b:f1:9e:ac:e1:42:85:e1:80:cb:37:96: a6:45:31:bd:31:bc:27:c0:40:f8:be:72:b9:db:fa: 2d:cd:a0:13:af:21:80:22:cf:11:a1:24:fe:4c:cd: c4:c9:8c:2c:71:eb:75:24:6b:cc:5f:99:7c:ce:26: a4:e2:8a:6a:a7:eb:b2:8d:37:a1:6b:e0:97:05:0e: a2:a8:01:cd:28:d8:fd:b5:b8:3c:3c:ad:66:32:6f: 58:3b:5c:c4:18:f4:8c:aa:c5:88:c1:ce:ee:ea:3c: 67:8c:02:2b:9c:95:13:f3:33:c4:b2:44:e8:bf:59: b1:ae:70:f6:ab:0a:58:b4:4b:9e:7d:f0:04:d1:b3: 3c:f8:6d:f4:5b:5a:e0:5a:b5:22:50:f7:9d:7f:0a: ef:dc:95:eb:74:44:3d:65:70:a6:4b:b6:3c:ac:83: d1:23:fc:30:13:4e:38:3b:9a:9b:4e:b9:9d:50:a4: 41:b4:1d:b0:94:50:1d:10:1e:a6:1e:07:60:bd:f8: d1:b7:fd:c9:8c:6b:3e:0e:0c:37:59:72:7e:74:ec: 4d:d2:99:68:c5:ff:ca:27:7d:d2:9d:ec:23:e3:2b: 8e:f9:a7:61:64:da:e4:99:54:8a:1c:92:8b:2a:fb: dd:05:ac:81:7c:5f:2f:98:e5:d1:57:ea:be:4a:53: fc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A5:72:A3:57:94:23:14:BB:B8:A3:64:FB:4F:32:F3:C8:D8:F0:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/55a2fa81-3e0c-3ef8-a494-40b73990f4d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:dc:98:3c:14:f8:03:db:ec:35:6e:9a:8b:7f:b4:33:e6:ea: 95:da:4c:8d:2b:46:28:bd:63:a7:89:24:d3:0c:93:4b:34:d2: 1c:3b:41:8c:2a:f8:dc:89:a5:14:52:64:ad:91:54:67:83:71: c1:16:a2:89:93:eb:d9:dc:19:43:ed:7a:ef:35:09:8e:61:80: af:e0:61:4b:06:21:b4:ef:c6:38:43:af:0b:bb:dc:3e:43:70: 6e:dc:c7:14:c7:4d:25:d7:31:a1:80:3f:3d:f6:c3:6d:03:20: 83:17:24:6e:dc:1f:2d:cb:b7:47:84:47:01:ef:31:a4:8f:cf: f2:7d:22:73:06:1f:47:b5:ca:f3:26:27:da:18:2d:5d:d3:48: ae:75:95:44:e0:0b:ff:5a:0d:9f:36:a6:18:98:b5:3f:b1:47: 5a:16:dc:b0:2a:05:10:6e:5e:36:92:53:02:71:e9:53:52:87: 49:da:49:62:df:57:34:5a:25:6a:e7:88:90:46:48:11:c0:d8: 07:88:34:b7:db:27:20:ff:ca:82:25:3d:0b:68:c7:5e:3a:cc: c0:38:d4:0c:21:3f:78:54:14:21:a5:f1:5e:e8:9b:1a:27:e9: fb:05:84:9f:e3:55:0f:1d:7a:cd:7e:c8:68:91:e5:f5:7b:0c: 05:94:13:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4TUF5m2EVcrw34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDQ4YjA5MzEtOTkxNC00NzgzLWFiNTEtNjEzOGVjNTIwMTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux4L8Z6s4UKF4YDLN5amRTG9MbwnwED4vnK5 2/otzaATryGAIs8RoST+TM3EyYwscet1JGvMX5l8ziak4opqp+uyjTeha+CXBQ6i qAHNKNj9tbg8PK1mMm9YO1zEGPSMqsWIwc7u6jxnjAIrnJUT8zPEskTov1mxrnD2 qwpYtEueffAE0bM8+G30W1rgWrUiUPedfwrv3JXrdEQ9ZXCmS7Y8rIPRI/wwE044 O5qbTrmdUKRBtB2wlFAdEB6mHgdgvfjRt/3JjGs+Dgw3WXJ+dOxN0ploxf/KJ33S newj4yuO+adhZNrkmVSKHJKLKvvdBayBfF8vmOXRV+q+SlP8DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCClcqNXlCMUu7ijZPtPMvPI2PBhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTVhMmZhODEtM2UwYy0z ZWY4LWE0OTQtNDBiNzM5OTBmNGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRkiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrcmDwU+APb7DVumot/tDPm6pXaTI0rRii9Y6eJJNMMk0s00hw7QYwq +NyJpRRSZK2RVGeDccEWoomT69ncGUPteu81CY5hgK/gYUsGIbTvxjhDrwu73D5D cG7cxxTHTSXXMaGAPz32w20DIIMXJG7cHy3Lt0eERwHvMaSPz/J9InMGH0e1yvMm J9oYLV3TSK51lUTgC/9aDZ82phiYtT+xR1oW3LAqBRBuXjaSUwJx6VNSh0naSWLf VzRaJWrniJBGSBHA2AeINLfbJyD/yoIlPQtox146zMA41AwhP3hUFCGl8V7omxon 6fsFhJ/jVQ8des1+yGiR5fV7DAWUEwA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:06:45 2026 by rpki-client