$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa File: a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa (raw, json) Hash identifier: JUR2OaqCpCDpcPOx34X8lGfsv1OfnyhtwsgSOkOijGo= Subject key identifier: CF:FC:F0:58:F9:D7:B8:96:3B:CC:3B:84:05:F8:FE:86:E0:6F:D4:19 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E11235B76BA566EB21F860 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.24.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:12:35:b7:6b:a5:66:eb:21:f8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0ea52928-762b-4c5d-a299-9e3035223788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:df:9a:92:3f:92:bf:02:8a:aa:88:e3:7c:7a: c0:ef:fd:69:c0:36:bf:ee:a0:ce:01:29:72:3b:99: 34:db:7b:bd:ce:e2:ca:36:9e:1c:15:19:8b:36:c5: 44:ac:ab:d9:7d:81:31:ca:37:77:d7:b1:f6:5e:55: d1:4a:7a:18:70:41:c6:55:4d:a2:e2:49:05:0e:4e: 31:d5:16:7a:bc:93:c8:b2:7a:25:77:58:8d:ce:e7: 15:21:d1:3d:cd:6b:a0:d6:3f:25:69:eb:b2:c1:bd: 9b:d5:ba:10:d0:b5:09:c3:76:83:aa:4a:8b:a9:f7: 06:3c:a5:9d:c7:ce:7e:df:d2:ff:bb:55:69:69:35: 01:2f:50:8d:ef:de:cd:0d:0d:ce:56:18:ad:2b:93: 68:1e:fc:f5:96:a0:d0:5d:7e:c8:bc:00:62:a2:47: 84:61:d4:a8:6a:76:f6:9e:d8:8c:30:61:77:3a:06: 8e:bf:f2:1a:45:d2:ed:d7:13:d8:f6:5a:08:e0:2c: eb:f8:25:be:55:2f:0d:af:66:0f:97:74:d7:e7:76: 48:54:ef:93:ae:94:3a:0e:e8:4a:24:2e:16:22:23: 68:85:0b:36:1f:f2:c7:b1:b1:5c:33:a6:a3:48:d3: e4:c3:02:26:42:02:e3:16:fc:c6:57:97:98:40:39: ab:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FC:F0:58:F9:D7:B8:96:3B:CC:3B:84:05:F8:FE:86:E0:6F:D4:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a3a3efa4-4f4d-3b97-9820-b0a5a7b2471e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:fd:b5:6b:51:1e:19:2c:d0:69:ab:63:53:46:50:28:b1:0a: 05:1f:71:94:7f:dc:a8:a5:17:f3:c7:46:fb:cf:ac:a9:c5:33: db:66:f9:73:53:4c:9b:2e:1a:a3:9a:8c:5e:e9:e6:01:bf:fb: 82:bc:a8:22:98:97:d4:5c:a4:c2:5b:64:54:98:eb:cc:a1:4b: 45:af:26:64:62:f5:2e:7c:a7:42:b1:a9:ee:17:27:32:32:28: b0:3a:f5:69:77:f9:21:20:f5:20:50:ad:d6:b1:a1:eb:75:cc: bc:11:64:09:35:29:92:80:e8:d8:a9:ce:db:7d:60:db:ce:ca: c7:e3:09:28:68:2b:72:08:9f:cb:a5:8a:8d:72:ce:94:27:6c: c5:8a:d1:8b:14:70:69:6d:82:42:9e:d4:13:82:18:66:a3:0c: 89:f6:05:53:33:29:48:f7:20:67:65:8d:ec:90:a5:09:d0:e1: 67:f8:fb:9e:28:61:ee:60:5d:3a:e8:67:da:61:0a:a3:bd:38: 20:86:61:dc:9f:61:99:87:41:8c:99:a1:60:45:a1:94:9a:28: 32:2c:d3:f5:bf:d3:2c:4f:62:9c:be:e3:7f:cd:ab:40:62:51: 42:87:bd:6b:40:e9:00:a5:01:27:2a:c5:c5:cb:02:03:fd:15: 53:db:b2:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RI1t2ulZush+GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MGVhNTI5MjgtNzYyYi00YzVkLWEyOTktOWUzMDM1MjIzNzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9+akj+SvwKKqojjfHrA7/1pwDa/7qDOASly O5k023u9zuLKNp4cFRmLNsVErKvZfYExyjd317H2XlXRSnoYcEHGVU2i4kkFDk4x 1RZ6vJPIsnold1iNzucVIdE9zWug1j8laeuywb2b1boQ0LUJw3aDqkqLqfcGPKWd x85+39L/u1VpaTUBL1CN797NDQ3OVhitK5NoHvz1lqDQXX7IvABiokeEYdSoanb2 ntiMMGF3OgaOv/IaRdLt1xPY9loI4Czr+CW+VS8Nr2YPl3TX53ZIVO+TrpQ6DuhK JC4WIiNohQs2H/LHsbFcM6ajSNPkwwImQgLjFvzGV5eYQDmrxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/88Fj517iWO8w7hAX4/obgb9QZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTNhM2VmYTQtNGY0ZC0z Yjk3LTk4MjAtYjBhNWE3YjI0NzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT9tWtRHhks0GmrY1NGUCixCgUfcZR/3KilF/PHRvvPrKnFM9tm+XNT TJsuGqOajF7p5gG/+4K8qCKYl9RcpMJbZFSY68yhS0WvJmRi9S58p0Kxqe4XJzIy KLA69Wl3+SEg9SBQrdaxoet1zLwRZAk1KZKA6Nipztt9YNvOysfjCShoK3IIn8ul io1yzpQnbMWK0YsUcGltgkKe1BOCGGajDIn2BVMzKUj3IGdljeyQpQnQ4Wf4+54o Ye5gXTroZ9phCqO9OCCGYdyfYZmHQYyZoWBFoZSaKDIs0/W/0yxPYpy+43/Nq0Bi UUKHvWtA6QClAScqxcXLAgP9FVPbsu4= -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:11 2026 by rpki-client