$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d708938-22f2-3972-88e2-9f3220f892ad.roa File: 8d708938-22f2-3972-88e2-9f3220f892ad.roa (raw, json) Hash identifier: bIXA5TPSqyN1Re2EUrC65FRYSrzKiwhd10VoZ/r51Rc= Subject key identifier: B6:DA:74:5C:46:C7:4C:20:CC:FB:94:60:02:85:B6:54:B7:88:36:2E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DCDC5D4EA724497B7342BA200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d708938-22f2-3972-88e2-9f3220f892ad.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 19905 IP address blocks: 173.23.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:d4:ea:72:44:97:b7:34:2b:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=0d5af298-eac4-47a3-a1bb-aed0712d34cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1f:12:3d:88:9c:ca:28:d9:0b:9f:1d:3d:06: ff:21:8e:7b:94:e0:76:39:d0:51:5c:5d:67:2e:b4: b9:c4:84:0d:9e:fb:4b:41:6d:df:4a:60:48:2e:3c: 03:a9:45:43:3d:1c:2e:06:a7:61:c1:ee:c0:98:d6: a4:2b:84:6a:0a:05:b9:5f:ab:25:a4:f8:ca:6d:b6: 13:7e:cb:40:27:22:d8:51:63:f4:3c:08:76:b7:cd: af:e0:42:6b:62:4a:ee:8c:d1:c8:49:60:bc:5c:57: f8:3d:7c:ca:58:96:b1:06:da:95:79:e3:72:b8:f9: 89:ad:26:db:71:9a:04:8b:3c:43:86:33:18:f8:ea: cc:9c:04:ba:53:ed:e1:9b:52:a4:9e:f5:e1:c3:81: 49:5e:6d:25:07:56:0f:65:9d:05:ac:38:00:ff:de: d0:35:9a:a6:4a:fb:6b:c7:82:fe:96:a2:38:6c:fb: 51:62:a5:b0:98:cf:bc:a3:a5:2b:07:2b:f0:bf:1b: 3f:44:8a:0b:24:0d:0b:f6:25:a1:5a:93:39:9c:3f: ee:64:f8:0e:0d:f9:25:a8:53:4a:e3:27:c9:b8:4f: 5b:44:9d:7a:f0:c2:1a:ff:c4:95:3c:0c:6c:3d:a8: b1:a8:2d:64:bc:09:8a:d9:77:45:e1:7c:98:d6:8d: 6b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DA:74:5C:46:C7:4C:20:CC:FB:94:60:02:85:B6:54:B7:88:36:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d708938-22f2-3972-88e2-9f3220f892ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:37:30:28:86:80:9d:39:27:83:9b:57:53:88:b1:ea:6a:a5: 2a:78:13:19:60:13:14:4a:5b:3b:ad:cf:0f:9f:3a:48:55:3c: 7b:bc:2e:57:d7:4c:45:85:4d:c4:0c:7b:ac:df:84:a2:a2:43: bc:64:01:75:77:19:a6:a8:56:bd:97:43:9b:c7:e8:02:cb:b0: 01:12:eb:f9:3e:e6:76:1e:79:89:f3:e5:04:8f:b5:16:b1:06: f1:1d:4b:69:76:51:1c:4d:3c:c2:54:72:8a:62:5d:a6:3c:89: 2f:16:0c:66:7b:4e:28:05:2a:57:23:eb:21:84:b6:ae:c3:eb: 16:16:fd:be:91:7b:ad:88:20:38:9d:32:e5:38:c5:3a:96:43: 97:6b:98:54:74:90:60:39:93:d9:ce:e2:21:5c:24:a0:c1:ea: b8:30:02:af:25:61:ef:ad:f3:01:b8:5b:7a:28:bb:7a:be:74: 8d:dc:f5:3d:c4:d7:0b:41:de:b8:ca:03:3c:45:50:3e:46:5b: 53:98:a8:c9:f9:b0:af:5a:0b:d9:6c:c8:3a:bc:c7:f2:9a:56: 94:69:d4:26:01:e7:db:60:ba:c5:e6:ca:99:ec:0c:44:9e:ec: 2b:f2:6c:4d:f7:04:a2:37:e4:c2:a6:cf:29:09:cd:32:ac:87: 6f:5c:c4:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxdTqckSXtzQrogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk MGQ1YWYyOTgtZWFjNC00N2EzLWExYmItYWVkMDcxMmQzNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh8SPYicyijZC58dPQb/IY57lOB2OdBRXF1n LrS5xIQNnvtLQW3fSmBILjwDqUVDPRwuBqdhwe7AmNakK4RqCgW5X6slpPjKbbYT fstAJyLYUWP0PAh2t82v4EJrYkrujNHISWC8XFf4PXzKWJaxBtqVeeNyuPmJrSbb cZoEizxDhjMY+OrMnAS6U+3hm1KknvXhw4FJXm0lB1YPZZ0FrDgA/97QNZqmSvtr x4L+lqI4bPtRYqWwmM+8o6UrByvwvxs/RIoLJA0L9iWhWpM5nD/uZPgODfklqFNK 4yfJuE9bRJ168MIa/8SVPAxsPaixqC1kvAmK2XdF4XyY1o1rgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbadFxGx0wgzPuUYAKFtlS3iDYuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGQ3MDg5MzgtMjJmMi0z OTcyLTg4ZTItOWYzMjIwZjg5MmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA3MCiGgJ05J4ObV1OIsepqpSp4ExlgExRKWzutzw+fOkhVPHu8LlfX TEWFTcQMe6zfhKKiQ7xkAXV3GaaoVr2XQ5vH6ALLsAES6/k+5nYeeYnz5QSPtRax BvEdS2l2URxNPMJUcopiXaY8iS8WDGZ7TigFKlcj6yGEtq7D6xYW/b6Re62IIDid MuU4xTqWQ5drmFR0kGA5k9nO4iFcJKDB6rgwAq8lYe+t8wG4W3oou3q+dI3c9T3E 1wtB3rjKAzxFUD5GW1OYqMn5sK9aC9lsyDq8x/KaVpRp1CYB59tgusXmypnsDESe 7CvybE33BKI35MKmzykJzTKsh29cxF4= -----END CERTIFICATE-----Generated at Wed May 13 08:57:33 2026 by rpki-client