$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a525a691-83ca-3334-8085-c21e4f6b991c.roa File: a525a691-83ca-3334-8085-c21e4f6b991c.roa (raw, json) Hash identifier: ri3AA9XnMS0/qmn/eyCxShe5eF3/NMqyxSmaZnd5i3Q= Subject key identifier: EE:12:29:44:05:E6:A3:1F:07:98:65:9C:B4:14:AE:C5:3B:59:7A:03 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF891534068C5091492F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a525a691-83ca-3334-8085-c21e4f6b991c.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.23.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:89:15:34:06:8c:50:91:49:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=bdf66827-4d64-4ca0-9bf8-37fc28a1c4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:a4:d1:b4:f6:6b:f5:60:13:18:28:7d:bc: c8:32:6d:47:1f:ef:da:a4:02:16:1a:d0:7b:53:03: bf:2d:8a:9f:e6:e0:4e:03:b2:e0:84:69:8a:99:33: 2a:cc:bb:7d:e2:2b:0c:4d:64:41:24:ae:db:f2:0a: a1:ef:e1:c9:0a:19:76:90:1d:ec:48:e3:3b:1f:02: f9:df:2e:92:3f:ac:c1:7e:b3:36:74:6b:4f:b1:10: 09:5d:80:83:99:01:54:4f:f4:30:8f:a9:ed:f4:c6: 5d:b4:f6:1f:60:4a:7a:ca:73:1a:f6:60:3e:a1:0a: 7c:e6:c6:b9:48:2e:c4:73:df:45:39:74:c2:a4:03: 1a:f9:92:68:b7:37:b5:84:9c:27:be:c2:a1:e4:6f: 04:a8:70:6d:5d:b4:cd:41:bb:25:33:c6:2e:95:46: ee:da:46:a4:1b:e5:a9:4f:49:ae:c8:93:3f:e8:c9: 0a:a7:6b:5d:71:e1:82:27:47:f1:fe:70:3f:8c:66: d0:5c:81:b4:46:8a:82:a1:89:a1:fb:f0:f1:ee:e6: 69:63:81:cb:4b:3e:0f:8d:7d:e5:f8:f8:57:f9:0e: 06:3d:7f:ef:c3:c8:6d:0b:72:07:57:ef:73:29:4d: 2c:c5:21:2f:bd:47:e6:48:52:d8:20:00:47:6b:24: eb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:12:29:44:05:E6:A3:1F:07:98:65:9C:B4:14:AE:C5:3B:59:7A:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a525a691-83ca-3334-8085-c21e4f6b991c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b0:f1:8f:96:88:d3:81:34:1d:13:f3:23:0e:ad:08:31:b4: 0e:6a:64:5b:cc:73:75:d9:8f:4a:e1:4f:50:40:23:ab:56:58: d1:3a:8e:4d:24:f1:ca:9d:ba:ba:e0:d4:ef:de:bb:ae:d7:63: a8:23:ab:16:ac:dc:54:53:4f:e7:9b:19:07:ec:7a:b2:8f:57: 3c:10:ad:58:c4:89:27:8b:6c:16:81:fb:22:45:18:65:bc:2b: e9:24:95:19:d2:a3:27:63:da:d8:47:06:1a:ce:b0:f0:fa:88: 44:2a:b9:67:e9:46:a6:fd:84:d9:32:a6:44:d0:a0:04:cd:d0: 9b:aa:3f:4a:52:80:82:86:1a:df:dc:0e:36:8b:77:ad:71:1e: fd:0f:0c:57:a7:e7:0e:cc:66:47:31:64:6d:8a:38:5e:22:d4: ea:58:fb:a2:a4:fa:03:e5:66:99:d9:1d:8d:70:29:f7:b7:c9: 9f:2e:68:1d:61:6f:4f:01:af:63:39:be:87:64:b0:a5:90:58: 27:7e:ab:15:9b:7c:f7:02:f1:29:c9:49:13:58:a5:32:92:54: 00:c6:66:08:5f:6e:32:09:88:02:82:10:1e:48:91:3f:ee:7a: 7e:0c:cb:0a:3a:0e:69:39:7d:68:52:44:b3:47:e7:6c:63:67: 10:a3:29:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k34kVNAaMUJFJLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YmRmNjY4MjctNGQ2NC00Y2EwLTliZjgtMzdmYzI4YTFjNGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTyk0bT2a/VgExgofbzIMm1HH+/apAIWGtB7 UwO/LYqf5uBOA7LghGmKmTMqzLt94isMTWRBJK7b8gqh7+HJChl2kB3sSOM7HwL5 3y6SP6zBfrM2dGtPsRAJXYCDmQFUT/Qwj6nt9MZdtPYfYEp6ynMa9mA+oQp85sa5 SC7Ec99FOXTCpAMa+ZJotze1hJwnvsKh5G8EqHBtXbTNQbslM8YulUbu2kakG+Wp T0muyJM/6MkKp2tdceGCJ0fx/nA/jGbQXIG0RoqCoYmh+/Dx7uZpY4HLSz4PjX3l +PhX+Q4GPX/vw8htC3IHV+9zKU0sxSEvvUfmSFLYIABHayTrwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4SKUQF5qMfB5hlnLQUrsU7WXoDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTUyNWE2OTEtODNjYS0z MzM0LTgwODUtYzIxZTRmNmI5OTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWw8Y+WiNOBNB0T8yMOrQgxtA5qZFvMc3XZj0rhT1BAI6tWWNE6jk0k 8cqdurrg1O/eu67XY6gjqxas3FRTT+ebGQfserKPVzwQrVjEiSeLbBaB+yJFGGW8 K+kklRnSoydj2thHBhrOsPD6iEQquWfpRqb9hNkypkTQoATN0JuqP0pSgIKGGt/c DjaLd61xHv0PDFen5w7MZkcxZG2KOF4i1OpY+6Kk+gPlZpnZHY1wKfe3yZ8uaB1h b08Br2M5vodksKWQWCd+qxWbfPcC8SnJSRNYpTKSVADGZghfbjIJiAKCEB5IkT/u en4Mywo6Dmk5fWhSRLNH52xjZxCjKXw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:24:10 2026 by rpki-client