$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/79d7e0ea-58a5-3a09-a529-a73f1ee1e5ad.roa File: 79d7e0ea-58a5-3a09-a529-a73f1ee1e5ad.roa (raw, json) Hash identifier: /EfkfNiRUXSFjATaGNlqzX7NrHvJ6CoezTXbrtNFBAA= Subject key identifier: 57:21:AE:0E:74:CC:17:9A:BC:A6:9B:72:66:BE:C6:BD:A7:6F:E0:27 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AA230C91535B7E14B1DF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/79d7e0ea-58a5-3a09-a529-a73f1ee1e5ad.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.20.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:23:0c:91:53:5b:7e:14:b1:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=288a07f2-7d92-4cac-a243-9d17e4b1d30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:54:af:c6:e4:cc:2b:34:2f:06:27:72:f7:42: 56:e2:6b:96:82:4b:fb:3e:54:1a:9c:50:29:67:71: b2:74:e2:ed:58:05:ab:7b:71:91:2a:28:44:68:c0: da:d5:29:07:95:cb:e3:93:bc:f4:f6:64:bf:30:58: a9:7d:39:25:f3:84:7e:7d:2a:c9:1a:33:71:42:ab: ec:ad:17:22:16:f0:cb:7d:56:39:e5:6a:28:ca:4e: f1:f1:11:2d:12:66:9c:90:1e:9c:fc:af:2f:a9:b4: eb:0a:8e:58:15:dc:9b:ae:d3:74:1f:d0:33:4d:ad: db:66:c7:c5:89:ae:aa:81:1f:c7:db:38:6a:89:77: 62:3c:f1:cd:3b:7c:49:59:7f:34:51:cc:bd:0d:c0: bc:25:e0:4b:c2:3d:e1:28:dc:b3:3f:cd:10:62:f2: 26:2e:d8:06:88:ca:01:c7:c7:47:a1:87:28:ea:09: 4b:ca:d8:f1:19:a7:e3:af:df:e5:91:48:e6:2c:e9: 02:34:e9:45:73:78:33:a4:c0:22:82:1d:e4:ad:5f: 6a:b8:ad:46:b4:6b:d7:41:27:00:ab:8f:e9:c2:d7: 93:bc:cd:55:81:b7:2b:1b:a5:9c:c5:4a:2b:a2:0e: a0:d8:46:a7:b9:db:43:61:fa:e2:59:e8:c2:ca:d6: b4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:21:AE:0E:74:CC:17:9A:BC:A6:9B:72:66:BE:C6:BD:A7:6F:E0:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/79d7e0ea-58a5-3a09-a529-a73f1ee1e5ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:47:b6:48:d3:9c:66:c4:f5:1b:78:aa:fe:d8:b6:f3:5c:96: f1:ed:19:fb:e8:f1:d3:c7:3b:c4:cb:18:bc:b2:01:7a:ca:68: c2:67:fe:3a:52:51:13:52:ed:8f:cd:9a:ec:3b:9c:34:0e:fc: ab:16:34:c3:12:59:06:e2:c1:b6:e4:87:61:24:3b:ca:08:f0: 7e:a7:8a:06:b5:ad:55:e8:78:5b:7b:74:a0:e5:16:79:bf:51: 7e:4d:df:87:e2:f8:3c:b5:fa:e1:c6:a5:62:25:b9:9c:ce:16: 93:10:5a:a9:a0:26:29:ce:45:89:a7:bc:05:08:d0:4b:f5:dc: 3e:7b:b9:f8:2e:b2:e3:1d:00:29:b3:6a:57:e8:70:c1:85:e9: 1d:fc:de:dd:eb:59:61:2c:91:73:f0:17:06:66:30:99:4a:e2: 6c:06:da:e8:73:01:1b:f6:73:58:eb:ad:77:96:87:ce:c0:7d: aa:79:cf:ca:d8:ae:07:b6:e1:0a:92:e8:fd:a5:b8:29:05:a8: 24:f0:ac:bc:28:e7:f7:11:a3:d7:d6:39:67:44:66:17:bc:f7: 85:72:1f:6d:01:c8:15:dc:79:0f:3d:b9:ae:9c:ac:e2:ae:6e: 9c:70:01:ca:58:10:ff:84:a1:36:4a:36:28:ba:4c:23:78:60: 07:0a:b1:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqiMMkVNbfhSx34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk Mjg4YTA3ZjItN2Q5Mi00Y2FjLWEyNDMtOWQxN2U0YjFkMzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFSvxuTMKzQvBidy90JW4muWgkv7PlQanFAp Z3GydOLtWAWre3GRKihEaMDa1SkHlcvjk7z09mS/MFipfTkl84R+fSrJGjNxQqvs rRciFvDLfVY55Wooyk7x8REtEmackB6c/K8vqbTrCo5YFdybrtN0H9AzTa3bZsfF ia6qgR/H2zhqiXdiPPHNO3xJWX80Ucy9DcC8JeBLwj3hKNyzP80QYvImLtgGiMoB x8dHoYco6glLytjxGafjr9/lkUjmLOkCNOlFc3gzpMAigh3krV9quK1GtGvXQScA q4/pwteTvM1VgbcrG6WcxUorog6g2EanudtDYfriWejCyta0+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFchrg50zBeavKabcma+xr2nb+AnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzlkN2UwZWEtNThhNS0z YTA5LWE1MjktYTczZjFlZTFlNWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZHtkjTnGbE9Rt4qv7YtvNclvHtGfvo8dPHO8TLGLyyAXrKaMJn/jpS URNS7Y/Nmuw7nDQO/KsWNMMSWQbiwbbkh2EkO8oI8H6niga1rVXoeFt7dKDlFnm/ UX5N34fi+Dy1+uHGpWIluZzOFpMQWqmgJinORYmnvAUI0Ev13D57ufgusuMdACmz alfocMGF6R383t3rWWEskXPwFwZmMJlK4mwG2uhzARv2c1jrrXeWh87Afap5z8rY rge24QqS6P2luCkFqCTwrLwo5/cRo9fWOWdEZhe894VyH20ByBXceQ89ua6crOKu bpxwAcpYEP+EoTZKNii6TCN4YAcKsWs= -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:25 2026 by rpki-client