$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cc3a410-ebf1-3596-a963-8eb5af1c7b4c.roa File: 8cc3a410-ebf1-3596-a963-8eb5af1c7b4c.roa (raw, json) Hash identifier: Ii1z0knFrBglPsxXfj7pLSuAs0StlS7PeBNjg2mruZo= Subject key identifier: B0:0B:90:9C:A3:7A:C5:6B:2B:FF:86:44:54:EC:C5:2C:67:8A:AD:3C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF9CECB29AD3920FF0E900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cc3a410-ebf1-3596-a963-8eb5af1c7b4c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.23.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:9c:ec:b2:9a:d3:92:0f:f0:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=439e14f8-7274-4e21-bd67-05c6c788a590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:05:b5:fb:5f:f5:76:e3:2a:a4:b1:8e:1a: 5a:b8:04:43:47:69:37:cc:39:ed:ef:41:0c:49:60: eb:fd:08:56:aa:81:4f:d4:2a:25:18:63:0a:d1:ea: 11:b3:8c:79:b6:4a:e7:81:7e:a3:dd:e3:ee:1f:99: bb:bc:39:66:50:4d:fc:4b:57:ef:06:5b:a9:a4:c1: 1a:5b:f2:00:3d:8c:75:cd:17:11:b2:72:3d:64:a3: 30:6a:85:a8:9c:28:51:60:ff:b8:fc:86:d6:d0:5e: 23:20:25:30:11:d6:74:10:19:a7:c9:eb:2a:bc:1a: 83:1d:25:5c:4b:d7:24:5f:a2:81:9b:5d:c3:c2:4d: 96:8a:02:9d:1c:11:0e:fd:f2:40:64:d3:6b:38:61: 8b:56:8e:64:d0:0c:25:28:ee:63:f8:94:fe:be:82: 3e:ad:b1:73:e3:0e:3b:88:e3:fb:61:94:01:f6:7f: 9b:af:a2:46:dc:b2:a8:8a:e8:60:14:42:40:5f:2f: d8:cb:9b:fe:79:0e:22:6f:de:aa:bb:25:3f:23:e8: dc:56:06:64:70:7d:f5:67:55:e3:d2:83:fc:bb:53: 84:04:4b:d9:51:c4:00:56:11:3a:e3:d6:c9:7e:e9: af:26:ce:de:f3:ed:61:f4:e8:5b:65:1c:ef:4f:a2: 17:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0B:90:9C:A3:7A:C5:6B:2B:FF:86:44:54:EC:C5:2C:67:8A:AD:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8cc3a410-ebf1-3596-a963-8eb5af1c7b4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e1:e7:e1:9c:45:77:db:7d:03:8b:2f:30:3b:4c:38:16:55: 82:be:be:3e:68:e4:71:7e:eb:9b:6d:2a:01:02:c9:86:f0:b2: 91:ff:10:c2:a1:af:ac:b7:f1:15:4f:18:8f:25:aa:78:7f:83: dd:1c:08:e1:17:d3:f8:dc:d2:a9:52:26:c0:1e:0c:45:34:4b: 61:bb:db:57:4b:c6:85:c6:5b:4d:de:37:5b:5d:13:e8:93:f1: 07:bb:88:d3:45:85:21:22:4b:c1:b5:9e:fe:e5:0f:5f:76:f1: c4:24:3f:28:e3:4f:d8:54:b8:df:45:d4:b6:38:83:98:a6:ad: ff:91:ee:7b:d1:0a:b3:6a:f9:52:8e:bc:02:77:3a:9f:78:6d: d2:af:86:35:a3:98:51:8d:ab:0b:4f:a3:d2:d4:4b:7d:20:52: cf:ea:2c:a8:94:6e:48:3a:a9:a6:62:64:4a:20:c5:31:34:6a: cb:d3:5f:4e:59:cf:61:07:fb:fe:da:b0:96:41:d6:50:db:5a: 5d:60:85:76:26:00:ba:a9:2f:32:4d:96:08:b0:7d:22:0e:26: 2e:f9:79:f9:d9:00:0d:be:83:7e:86:2b:8e:c1:e4:4e:14:c1: 36:50:bd:eb:a7:ed:55:fb:b2:ef:74:3d:b0:7b:07:3c:9d:e8: 87:ef:89:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35zssprTkg/w6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDM5ZTE0ZjgtNzI3NC00ZTIxLWJkNjctMDVjNmM3ODhhNTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4MFtftf9XbjKqSxjhpauARDR2k3zDnt70EM SWDr/QhWqoFP1ColGGMK0eoRs4x5tkrngX6j3ePuH5m7vDlmUE38S1fvBluppMEa W/IAPYx1zRcRsnI9ZKMwaoWonChRYP+4/IbW0F4jICUwEdZ0EBmnyesqvBqDHSVc S9ckX6KBm13Dwk2WigKdHBEO/fJAZNNrOGGLVo5k0AwlKO5j+JT+voI+rbFz4w47 iOP7YZQB9n+br6JG3LKoiuhgFEJAXy/Yy5v+eQ4ib96quyU/I+jcVgZkcH31Z1Xj 0oP8u1OEBEvZUcQAVhE649bJfumvJs7e8+1h9OhbZRzvT6IXKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLALkJyjesVrK/+GRFTsxSxniq08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGNjM2E0MTAtZWJmMS0z NTk2LWE5NjMtOGViNWFmMWM3YjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLh5+GcRXfbfQOLLzA7TDgWVYK+vj5o5HF+65ttKgECyYbwspH/EMKh r6y38RVPGI8lqnh/g90cCOEX0/jc0qlSJsAeDEU0S2G721dLxoXGW03eN1tdE+iT 8Qe7iNNFhSEiS8G1nv7lD1928cQkPyjjT9hUuN9F1LY4g5imrf+R7nvRCrNq+VKO vAJ3Op94bdKvhjWjmFGNqwtPo9LUS30gUs/qLKiUbkg6qaZiZEogxTE0asvTX05Z z2EH+/7asJZB1lDbWl1ghXYmALqpLzJNlgiwfSIOJi75efnZAA2+g36GK47B5E4U wTZQveun7VX7su90PbB7Bzyd6IfviSg= -----END CERTIFICATE-----Generated at Thu Mar 26 07:41:35 2026 by rpki-client