$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a9b260a-6f4d-3884-a5a4-8c1df825f1ee.roa File: 5a9b260a-6f4d-3884-a5a4-8c1df825f1ee.roa (raw, json) Hash identifier: 8qmqMYToTeitpa6pbf8GPsJYRpWx6uV99UQkKNeoWgI= Subject key identifier: B8:6E:8F:04:17:B4:CF:26:15:C3:9B:08:09:74:C1:B9:A9:B1:54:D2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E12BDCBA7D707F3B688180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a9b260a-6f4d-3884-a5a4-8c1df825f1ee.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.25.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2b:dc:ba:7d:70:7f:3b:68:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=b3eab0d5-f973-4abe-ae51-355bde84334b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:48:12:bb:ec:35:b3:91:a7:2d:88:b2:8e:f1: ba:5b:b9:d2:59:a3:d3:6a:35:52:59:40:07:27:53: 02:e5:88:2c:5e:e8:da:f2:a7:96:af:93:97:2d:30: c5:17:2b:c4:84:9f:b6:79:4a:06:73:28:c1:cc:9b: 74:12:18:0d:61:62:5d:f3:eb:d9:98:ae:a0:14:14: 0e:04:0a:c2:20:cf:cf:6c:a2:92:78:69:b0:9a:3c: ad:16:0c:05:66:21:84:4c:09:a9:9b:e5:04:65:1e: ec:a1:8c:5f:80:db:a8:0e:9d:4d:fe:c0:75:73:be: 37:e8:87:eb:95:62:5c:cc:df:c0:f1:3f:48:92:f3: a9:50:f8:13:61:07:10:cb:d0:2a:c6:9e:5c:e7:21: 01:35:4f:90:90:77:5b:73:f9:a3:3d:a2:58:4d:4e: 03:07:87:98:97:fd:8b:37:17:25:d8:4d:f5:a7:9b: f9:3f:8b:ae:ab:ed:b8:09:af:de:2b:af:77:0a:2f: 9e:e7:4e:fa:c0:4b:11:b3:c0:19:8c:a8:86:bc:14: d9:7a:84:18:66:2b:d4:ef:84:6c:90:2e:e9:12:c8: 75:7e:fb:6a:08:77:6d:e5:14:24:f5:65:ad:e2:29: dd:c6:ba:d1:2a:39:ff:e0:2a:b8:a7:bb:c9:ca:9f: f5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6E:8F:04:17:B4:CF:26:15:C3:9B:08:09:74:C1:B9:A9:B1:54:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5a9b260a-6f4d-3884-a5a4-8c1df825f1ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b2:fa:a6:fd:59:7d:90:09:d7:7e:05:07:e5:b9:22:49:eb: 2f:57:fe:52:bd:62:b8:1d:0f:2e:ab:2e:67:1f:69:bd:83:68: 87:32:30:cf:cf:a3:95:ad:57:2e:ea:a3:ef:32:4e:1a:e2:d5: 85:3e:1c:da:27:73:c4:9e:92:82:52:57:44:62:02:d9:a4:ab: ba:29:e4:f9:3a:84:aa:5a:1b:63:38:d4:d5:64:a8:9a:33:27: f6:a5:0f:57:3a:6a:ee:ee:ef:6d:38:57:e8:64:0e:ee:be:31: df:aa:e7:df:db:cd:99:5f:69:e1:63:ce:2a:e2:aa:42:af:f2: b1:d5:f1:d4:c1:72:96:a2:b1:eb:2a:09:19:ed:57:50:a3:75: da:59:db:67:7b:df:2f:70:cf:a3:07:ae:ad:07:e4:b8:92:cf: e6:37:50:3e:10:65:1c:ce:c8:47:ac:9c:24:a1:21:4c:51:5d: cf:73:64:f3:79:19:3c:ca:ce:5a:47:07:d0:87:af:9b:90:77: dd:a3:da:90:f6:e3:bb:1e:f9:dd:c5:23:9b:7a:fe:08:b9:3c: 13:0b:61:03:af:22:7b:32:fe:21:18:58:db:46:84:84:be:be: b8:92:b8:50:89:cb:98:f6:17:32:9b:ac:f1:1b:07:a3:af:6a: 17:fb:fe:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Svcun1wfztogYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YjNlYWIwZDUtZjk3My00YWJlLWFlNTEtMzU1YmRlODQzMzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUgSu+w1s5GnLYiyjvG6W7nSWaPTajVSWUAH J1MC5YgsXuja8qeWr5OXLTDFFyvEhJ+2eUoGcyjBzJt0EhgNYWJd8+vZmK6gFBQO BArCIM/PbKKSeGmwmjytFgwFZiGETAmpm+UEZR7soYxfgNuoDp1N/sB1c7436Ifr lWJczN/A8T9IkvOpUPgTYQcQy9Aqxp5c5yEBNU+QkHdbc/mjPaJYTU4DB4eYl/2L Nxcl2E31p5v5P4uuq+24Ca/eK693Ci+e5076wEsRs8AZjKiGvBTZeoQYZivU74Rs kC7pEsh1fvtqCHdt5RQk9WWt4indxrrRKjn/4Cq4p7vJyp/1AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLhujwQXtM8mFcObCAl0wbmpsVTSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWE5YjI2MGEtNmY0ZC0z ODg0LWE1YTQtOGMxZGY4MjVmMWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRloMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+y+qb9WX2QCdd+BQfluSJJ6y9X/lK9YrgdDy6rLmcfab2DaIcyMM/P o5WtVy7qo+8yThri1YU+HNonc8SekoJSV0RiAtmkq7op5Pk6hKpaG2M41NVkqJoz J/alD1c6au7u7204V+hkDu6+Md+q59/bzZlfaeFjziriqkKv8rHV8dTBcpaisesq CRntV1CjddpZ22d73y9wz6MHrq0H5LiSz+Y3UD4QZRzOyEesnCShIUxRXc9zZPN5 GTzKzlpHB9CHr5uQd92j2pD247se+d3FI5t6/gi5PBMLYQOvInsy/iEYWNtGhIS+ vriSuFCJy5j2FzKbrPEbB6Ovahf7/iQ= -----END CERTIFICATE-----Generated at Thu Mar 26 13:37:21 2026 by rpki-client