$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af8a31e-2de6-3582-8263-f79aff9c711e.roa File: 8af8a31e-2de6-3582-8263-f79aff9c711e.roa (raw, json) Hash identifier: BTNVTWcwd6lfZSfMSsoQ9/GYBGWS+LgSokVDOdyKcrU= Subject key identifier: 5E:F8:9E:C0:8D:89:BF:10:58:74:4D:90:C2:78:5A:09:E2:84:FF:C0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E11F56373FBCF6056B8080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af8a31e-2de6-3582-8263-f79aff9c711e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.24.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:1f:56:37:3f:bc:f6:05:6b:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=8a0429dd-7eeb-4f09-82ce-9ef4774a4044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:7d:5b:f7:6e:04:8d:28:39:12:50:ca:31: cd:ec:f9:62:33:5f:a4:45:83:79:5a:c2:d0:be:5d: 70:76:fc:cb:b3:95:8e:ce:31:48:ab:34:89:53:cf: 20:ac:d9:5e:84:e5:d6:e6:4e:36:56:2c:83:26:5f: 5d:f7:3d:22:b2:62:46:3a:b9:8d:64:44:0e:15:1a: a4:5f:d3:51:c2:c4:10:7a:71:df:a3:aa:a8:20:cf: 1f:57:f8:46:ce:e1:32:32:5d:7f:e4:4b:79:04:ae: 5a:e4:1e:96:23:6a:40:fb:a6:c2:a3:30:d9:f9:83: 16:7e:1f:81:d5:6d:b6:1c:1d:95:4a:71:6e:44:ce: 54:31:bf:f5:fc:74:fa:8e:3a:6b:7b:1a:ff:5f:9c: 2d:8b:4b:8d:d8:6d:42:ba:3c:e5:ea:4f:77:01:79: 15:a2:cd:b0:ba:dd:f9:db:58:57:1d:5d:46:57:fd: 9a:8b:b5:43:6c:aa:7d:62:88:f4:4a:b6:ff:dc:4b: 65:03:cc:88:63:df:5d:45:64:8c:f6:53:59:3e:cc: 2b:03:f6:7b:c8:ee:b0:a2:10:50:1a:39:09:85:db: 13:95:fd:bc:93:8f:8d:ca:43:17:d1:84:79:ab:53: 62:da:4f:15:b4:d9:71:19:9d:f7:b6:03:e0:c7:07: 7e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F8:9E:C0:8D:89:BF:10:58:74:4D:90:C2:78:5A:09:E2:84:FF:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af8a31e-2de6-3582-8263-f79aff9c711e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:18:99:49:d3:3a:c7:a0:29:7b:f2:52:5c:a5:4e:b5:3e:82: 1c:f6:08:d8:8b:2a:34:44:d2:9c:b9:37:2d:23:41:ef:24:f4: d6:88:1b:88:0a:00:cc:6e:0f:cc:b6:ec:9f:ff:57:13:41:2f: 27:f7:08:b6:05:e2:da:0b:01:0b:64:62:91:57:01:4b:6d:05: 3c:50:c3:e3:e2:12:77:28:1d:87:ad:85:42:99:6b:8d:98:6f: 3b:0c:40:79:f4:96:13:01:05:b3:ab:85:89:09:03:0d:1c:4e: f0:43:41:d2:d4:bc:2b:fc:ce:41:d7:15:3d:d1:52:ab:0a:00: f1:b5:23:d3:66:65:de:d5:61:6e:05:14:ce:8b:73:40:5d:49: 7c:98:d0:1c:30:48:95:04:0b:6c:2a:5f:b3:de:ed:5f:9e:14: a6:93:66:60:66:92:61:59:3a:63:30:e6:ad:e8:88:a7:b3:40: 5c:36:dc:55:eb:d5:b8:9c:ff:39:94:ed:ec:8a:b9:72:e7:59: 79:62:5b:93:ed:7f:37:53:50:2e:d8:1c:5e:88:8c:14:ea:0f: 41:0e:f0:39:dd:21:35:40:de:99:9b:ef:36:7b:f0:cd:58:a6: 4b:0c:ae:ee:c6:6b:ca:05:e4:f8:ee:c5:62:c1:0a:08:20:62: 66:27:22:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4R9WNz+89gVrgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OGEwNDI5ZGQtN2VlYi00ZjA5LTgyY2UtOWVmNDc3NGE0MDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSl9W/duBI0oORJQyjHN7PliM1+kRYN5WsLQ vl1wdvzLs5WOzjFIqzSJU88grNlehOXW5k42ViyDJl9d9z0ismJGOrmNZEQOFRqk X9NRwsQQenHfo6qoIM8fV/hGzuEyMl1/5Et5BK5a5B6WI2pA+6bCozDZ+YMWfh+B 1W22HB2VSnFuRM5UMb/1/HT6jjprexr/X5wti0uN2G1Cujzl6k93AXkVos2wut35 21hXHV1GV/2ai7VDbKp9Yoj0Srb/3EtlA8yIY99dRWSM9lNZPswrA/Z7yO6wohBQ GjkJhdsTlf28k4+NykMX0YR5q1Ni2k8VtNlxGZ33tgPgxwd+/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF74nsCNib8QWHRNkMJ4WgnihP/AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGFmOGEzMWUtMmRlNi0z NTgyLTgyNjMtZjc5YWZmOWM3MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRhWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMYmUnTOsegKXvyUlylTrU+ghz2CNiLKjRE0py5Ny0jQe8k9NaIG4gK AMxuD8y27J//VxNBLyf3CLYF4toLAQtkYpFXAUttBTxQw+PiEncoHYethUKZa42Y bzsMQHn0lhMBBbOrhYkJAw0cTvBDQdLUvCv8zkHXFT3RUqsKAPG1I9NmZd7VYW4F FM6Lc0BdSXyY0BwwSJUEC2wqX7Pe7V+eFKaTZmBmkmFZOmMw5q3oiKezQFw23FXr 1bic/zmU7eyKuXLnWXliW5PtfzdTUC7YHF6IjBTqD0EO8DndITVA3pmb7zZ78M1Y pksMru7Ga8oF5PjuxWLBCgggYmYnIu8= -----END CERTIFICATE-----Generated at Thu Mar 26 14:41:16 2026 by rpki-client