$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d7744eb-a801-3a77-ac0f-94654a3ad1e5.roa File: 8d7744eb-a801-3a77-ac0f-94654a3ad1e5.roa (raw, json) Hash identifier: a9+x3zwHWYyHnEzCzhgHCrt1rqIwfrPUlVK15Rl2LGc= Subject key identifier: 18:71:6B:16:A4:18:38:DB:93:92:64:A6:F4:9C:54:40:FE:CF:B3:01 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D422F88BB2FDC6667E5E9B840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d7744eb-a801-3a77-ac0f-94654a3ad1e5.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.25.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:88:bb:2f:dc:66:67:e5:e9:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=394169b6-1dbd-4a93-99f7-780d7489b845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:96:0b:be:7f:aa:e5:3c:35:d4:e2:59:66:08: d0:ad:d3:79:09:d7:6f:ff:8b:7e:86:66:62:7f:40: 14:e6:86:2f:51:e5:39:12:d0:d0:86:9a:96:18:f8: 86:3b:f7:48:ed:dc:14:aa:bb:0d:05:5f:21:e0:ed: d1:5c:11:8b:f6:46:7b:80:a8:89:9c:a9:5c:94:90: 1c:1d:30:cb:c5:6b:f7:c2:28:62:47:21:49:30:7f: 04:48:f7:f1:29:30:93:93:84:7c:89:9f:08:58:60: 4e:79:83:b1:29:f0:78:59:3d:4e:2d:79:aa:8d:20: b6:ca:b7:cf:1d:fc:a1:68:73:80:56:86:9d:ec:59: f2:b3:5f:8b:e9:a3:84:64:b5:b6:26:ac:d7:63:4b: 2b:7c:35:68:0e:9b:d5:77:c6:ae:45:fa:9d:33:a7: 05:89:f7:a4:20:eb:33:63:34:ff:eb:cb:d4:99:79: 71:16:37:97:0d:6c:19:d6:a4:a7:af:5f:d2:f0:16: 8d:43:da:8f:58:97:e9:e0:2c:83:bb:a5:22:26:bf: 9f:5f:71:93:94:e7:c3:6a:39:c1:ae:37:7e:a4:e1: 40:32:ad:c0:65:5b:8d:2e:b3:02:52:e2:b7:52:71: e5:52:e4:5f:d9:08:5c:13:32:59:57:40:66:14:cc: 46:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:71:6B:16:A4:18:38:DB:93:92:64:A6:F4:9C:54:40:FE:CF:B3:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8d7744eb-a801-3a77-ac0f-94654a3ad1e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d6:cd:4e:a7:9b:71:5f:0a:34:c1:2b:3b:0c:50:ee:d2:ac: c3:fe:74:7b:5f:3c:dd:7a:02:a6:c6:04:92:fb:3f:d9:33:6d: c7:2f:4a:e1:c3:1c:01:91:f3:fe:68:2c:14:b3:df:50:02:89: 35:9d:2c:11:d0:9d:2b:e0:09:6c:b8:20:62:77:61:94:e5:73: 3b:10:4f:fa:47:c4:af:59:9e:76:56:c0:78:2f:54:9f:e7:a7: ea:91:a4:1a:67:f8:44:6c:a4:c6:66:ae:5d:f9:49:a4:cf:45: a6:84:a3:92:4c:5b:57:4d:eb:3c:05:d8:9f:d1:26:4a:7e:86: 40:4d:33:66:15:53:b0:9e:8d:61:36:f6:9d:b2:20:24:a6:74: f8:05:6b:1b:6a:81:03:4d:2d:f8:80:32:f0:55:bc:63:f3:26: 8a:47:33:89:9f:90:c3:15:77:eb:33:56:11:98:af:3d:05:0e: 71:62:08:06:f8:f4:6a:bb:37:6a:d3:f8:a3:29:d2:e1:22:4f: a4:84:04:de:38:1f:c0:2a:8a:45:d8:50:bb:78:09:39:ca:c1: ce:7a:3e:dc:5a:40:ce:40:2b:92:e0:e8:26:2e:f3:79:15:b1: 8a:91:c0:54:b6:44:1a:36:36:10:1a:70:ba:7a:a5:9f:e7:1c: ed:8d:2e:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4i7L9xmZ+XpuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk Mzk0MTY5YjYtMWRiZC00YTkzLTk5ZjctNzgwZDc0ODliODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJYLvn+q5Tw11OJZZgjQrdN5Cddv/4t+hmZi f0AU5oYvUeU5EtDQhpqWGPiGO/dI7dwUqrsNBV8h4O3RXBGL9kZ7gKiJnKlclJAc HTDLxWv3wihiRyFJMH8ESPfxKTCTk4R8iZ8IWGBOeYOxKfB4WT1OLXmqjSC2yrfP HfyhaHOAVoad7Fnys1+L6aOEZLW2JqzXY0srfDVoDpvVd8auRfqdM6cFifekIOsz YzT/68vUmXlxFjeXDWwZ1qSnr1/S8BaNQ9qPWJfp4CyDu6UiJr+fX3GTlOfDajnB rjd+pOFAMq3AZVuNLrMCUuK3UnHlUuRf2QhcEzJZV0BmFMxGBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhxaxakGDjbk5JkpvScVED+z7MBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGQ3NzQ0ZWItYTgwMS0z YTc3LWFjMGYtOTQ2NTRhM2FkMWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXWzU6nm3FfCjTBKzsMUO7SrMP+dHtfPN16AqbGBJL7P9kzbccvSuHD HAGR8/5oLBSz31ACiTWdLBHQnSvgCWy4IGJ3YZTlczsQT/pHxK9ZnnZWwHgvVJ/n p+qRpBpn+ERspMZmrl35SaTPRaaEo5JMW1dN6zwF2J/RJkp+hkBNM2YVU7CejWE2 9p2yICSmdPgFaxtqgQNNLfiAMvBVvGPzJopHM4mfkMMVd+szVhGYrz0FDnFiCAb4 9Gq7N2rT+KMp0uEiT6SEBN44H8AqikXYULt4CTnKwc56PtxaQM5AK5Lg6CYu83kV sYqRwFS2RBo2NhAacLp6pZ/nHO2NLmE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:34 2026 by rpki-client