$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58f406bb-493c-3c9e-86e0-18a746e8c8b1.roa File: 58f406bb-493c-3c9e-86e0-18a746e8c8b1.roa (raw, json) Hash identifier: bT67nS8Y9Z6qQPGJrLgdxt/CK+D7gjnTCpQ2Wg7hpoI= Subject key identifier: 88:93:9C:83:32:85:AF:78:C2:86:E4:28:B4:45:42:B2:CD:69:5D:52 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D39CF8862AEF116403C3AD080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58f406bb-493c-3c9e-86e0-18a746e8c8b1.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.23.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:88:62:ae:f1:16:40:3c:3a:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=c197509b-387e-4af2-beff-03b38cc1a66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ba:f5:19:be:b6:1b:d5:9f:64:d6:47:55:a9: e6:2c:f3:b1:20:12:6e:b1:ac:b2:e4:c5:0f:bc:34: f5:72:94:5a:2f:a7:1b:2a:74:45:f3:64:fd:d6:52: e0:34:32:f8:f7:72:32:2b:7c:2c:71:00:e3:61:64: 13:a1:6c:1d:6d:dc:71:ba:e2:cc:e3:bb:70:18:da: 3a:fa:0c:ea:97:7b:29:fe:f1:93:1a:9c:be:0b:b4: 6c:72:db:62:82:95:ed:ea:bf:18:c9:43:02:e2:3a: b8:51:b4:54:b6:2e:e4:ce:fa:3d:21:fa:9c:3c:d7: 51:7d:01:55:37:49:96:06:f3:57:95:af:0c:8f:3a: e4:17:b2:be:1f:1c:fa:e2:6f:45:43:b3:96:85:d0: e1:2b:8b:3c:b2:6f:e6:ed:ad:3b:1d:cc:31:9b:09: f0:2a:59:3d:2b:de:bf:b7:c7:5f:b6:ef:85:41:fb: a4:d4:5f:98:59:bb:d9:67:63:e0:52:35:e6:f6:ce: 41:e6:86:a3:4d:0b:07:aa:4c:f9:18:17:a1:09:9b: 32:48:ab:08:af:b6:ce:d0:76:93:c5:fb:83:b2:d8: ed:b5:5f:fa:dc:8c:a7:99:7b:69:f1:b5:65:9a:54: 17:1e:8e:0f:c8:a3:24:dd:65:c6:b0:a2:b8:4a:1f: e8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:93:9C:83:32:85:AF:78:C2:86:E4:28:B4:45:42:B2:CD:69:5D:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58f406bb-493c-3c9e-86e0-18a746e8c8b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:46:ee:c0:f9:9c:0a:0c:6b:5f:0c:64:4e:e3:b4:1c:fd:08: d3:ac:3a:31:69:15:e8:2a:9e:1f:e0:f1:de:d6:a7:5c:22:95: 8a:1a:be:bb:1f:ca:27:4d:57:46:8a:1a:fb:57:8a:1b:a5:63: c8:bd:f8:1a:37:83:9e:15:38:fe:9b:7c:cd:14:79:44:c8:16: 95:5c:61:aa:d8:3e:96:9f:e2:e7:2c:7e:05:67:a2:03:8b:a2: a7:6b:6e:b6:ad:3e:4e:ca:25:69:4d:c3:f3:65:11:15:01:ab: a9:e2:9a:ab:f5:26:f3:f4:da:51:4b:b7:70:f8:e3:b2:38:b4: 1c:3b:33:e8:56:dc:fb:18:43:fe:bf:b0:9b:3b:3e:6d:e8:a0: 3a:9f:fd:02:d1:39:58:33:36:b9:68:5e:05:fa:ec:49:46:a8: e5:bd:91:8f:ac:19:66:55:ad:e1:09:67:72:06:6c:05:d0:88: 7a:10:88:a8:a1:c2:c0:83:13:ed:43:97:d0:3c:a1:91:79:dc: 0e:42:87:1c:2d:54:db:30:30:b9:47:16:dd:0c:a2:ab:ac:5f: 0a:dc:dc:65:67:e5:60:6b:d3:ef:21:c1:e9:d6:8b:18:5f:56: 31:2a:00:bd:6c:88:ec:80:b7:62:8b:93:33:55:5a:a6:66:7d: 50:3b:24:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z4hirvEWQDw60IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk YzE5NzUwOWItMzg3ZS00YWYyLWJlZmYtMDNiMzhjYzFhNjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7r1Gb62G9WfZNZHVanmLPOxIBJusayy5MUP vDT1cpRaL6cbKnRF82T91lLgNDL493IyK3wscQDjYWQToWwdbdxxuuLM47twGNo6 +gzql3sp/vGTGpy+C7RscttigpXt6r8YyUMC4jq4UbRUti7kzvo9IfqcPNdRfQFV N0mWBvNXla8MjzrkF7K+Hxz64m9FQ7OWhdDhK4s8sm/m7a07HcwxmwnwKlk9K96/ t8dftu+FQfuk1F+YWbvZZ2PgUjXm9s5B5oajTQsHqkz5GBehCZsySKsIr7bO0HaT xfuDstjttV/63IynmXtp8bVlmlQXHo4PyKMk3WXGsKK4Sh/oSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiTnIMyha94wobkKLRFQrLNaV1SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNThmNDA2YmItNDkzYy0z YzllLTg2ZTAtMThhNzQ2ZThjOGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRd1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChG7sD5nAoMa18MZE7jtBz9CNOsOjFpFegqnh/g8d7Wp1wilYoavrsf yidNV0aKGvtXihulY8i9+Bo3g54VOP6bfM0UeUTIFpVcYarYPpaf4ucsfgVnogOL oqdrbratPk7KJWlNw/NlERUBq6nimqv1JvP02lFLt3D447I4tBw7M+hW3PsYQ/6/ sJs7Pm3ooDqf/QLROVgzNrloXgX67ElGqOW9kY+sGWZVreEJZ3IGbAXQiHoQiKih wsCDE+1Dl9A8oZF53A5ChxwtVNswMLlHFt0MoqusXwrc3GVn5WBr0+8hwenWixhf VjEqAL1siOyAt2KLkzNVWqZmfVA7JHM= -----END CERTIFICATE-----Generated at Thu Mar 26 05:46:40 2026 by rpki-client