$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a54ac22a-ccab-3e28-b897-e5b1a6d46e4b.roa File: a54ac22a-ccab-3e28-b897-e5b1a6d46e4b.roa (raw, json) Hash identifier: gS7rAghdrBgPsCx0hmEaNiUUJX18w2tCuoyP+8xP0Ko= Subject key identifier: 63:87:1B:51:71:6E:69:D6:BB:94:67:6E:A0:FA:F6:31:D6:92:04:90 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E12B8942432E4DDA1CDE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a54ac22a-ccab-3e28-b897-e5b1a6d46e4b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.23.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2b:89:42:43:2e:4d:da:1c:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=101386d9-6e6f-4234-9c7b-205306d8b084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:6c:71:12:fc:bc:5b:b3:ec:82:e7:cd:e1: c5:06:64:44:bb:ff:76:9a:85:50:9a:20:62:78:21: 09:83:f3:00:4e:b9:13:f9:f9:68:af:14:3e:8c:e2: 3e:d1:d3:6d:f3:db:9b:5b:ee:47:ae:6f:68:2a:fe: 28:4a:70:e4:32:9f:3d:e1:78:55:82:94:8f:31:fb: d7:02:6d:3e:be:8f:b2:ef:50:b1:43:53:5c:a1:03: e9:d2:a7:2a:31:fe:66:b0:01:71:af:82:ff:0c:00: d4:ed:a3:cc:95:fc:a2:f2:b2:fa:df:58:99:24:e3: 10:ab:68:f1:8d:fa:09:f7:53:c2:a8:b5:0f:a9:e0: 8a:2f:a2:f5:a5:66:e4:29:10:78:e6:f1:71:49:54: f2:93:af:a0:b1:db:7f:b5:a3:89:79:54:10:02:53: fd:92:a0:75:2a:75:4d:e9:ab:3c:80:c1:f1:bb:7d: 6d:17:87:82:8a:65:bc:9e:00:88:72:04:af:ac:c6: 86:71:1d:15:19:83:77:1b:88:c3:03:14:ec:67:a8: 76:ee:0a:29:ff:d2:d5:c0:50:35:46:08:8c:17:49: 90:79:13:27:9c:d9:83:ca:59:8f:61:10:38:c7:58: 56:41:8e:d7:21:43:8c:09:ee:65:0d:7f:08:2e:94: 65:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:87:1B:51:71:6E:69:D6:BB:94:67:6E:A0:FA:F6:31:D6:92:04:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a54ac22a-ccab-3e28-b897-e5b1a6d46e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:56:99:65:b0:a3:e8:f8:76:62:be:fa:fc:eb:9b:7c:d7:8d: 0b:f2:50:4f:58:e1:9a:03:e6:24:c8:17:16:6e:a3:b2:84:85: 0a:a1:92:bb:59:bf:11:bd:09:47:d6:e6:7e:69:0b:27:c4:84: 1f:59:7a:d8:57:d2:3b:75:ec:39:e1:15:08:fc:dd:2b:4f:2c: ac:06:b8:6a:2e:55:d3:e4:95:36:17:0f:13:86:dc:c1:ca:23: 2c:d1:15:5e:69:ab:13:c1:77:fe:cc:bc:30:eb:a1:11:55:7c: 72:24:da:91:04:6d:70:ae:29:72:93:05:58:a6:59:71:8c:24: d9:8e:f1:14:fa:16:fe:49:bf:34:a7:cf:5f:55:26:58:76:6a: bf:7f:8d:85:59:0d:dd:5c:72:32:d1:2f:b3:9d:25:cd:d2:93: 68:31:ec:44:04:de:37:79:59:b1:8c:27:9a:50:2a:11:d0:ef: e1:72:16:5b:3d:54:83:01:c0:92:45:48:76:83:c1:9c:7e:ee: 1e:09:19:65:d9:f3:eb:ca:d0:29:85:f6:5b:5f:ed:f5:07:97: 79:55:fb:13:6e:09:b5:1a:8d:71:e0:76:47:65:fe:4e:0d:6d: d1:00:f5:3f:97:15:cd:2b:ec:bf:09:76:40:cc:72:d5:81:e3: 89:cd:02:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4SuJQkMuTdoc3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MTAxMzg2ZDktNmU2Zi00MjM0LTljN2ItMjA1MzA2ZDhiMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApINscRL8vFuz7ILnzeHFBmREu/92moVQmiBi eCEJg/MATrkT+florxQ+jOI+0dNt89ubW+5Hrm9oKv4oSnDkMp894XhVgpSPMfvX Am0+vo+y71CxQ1NcoQPp0qcqMf5msAFxr4L/DADU7aPMlfyi8rL631iZJOMQq2jx jfoJ91PCqLUPqeCKL6L1pWbkKRB45vFxSVTyk6+gsdt/taOJeVQQAlP9kqB1KnVN 6as8gMHxu31tF4eCimW8ngCIcgSvrMaGcR0VGYN3G4jDAxTsZ6h27gop/9LVwFA1 RgiMF0mQeRMnnNmDylmPYRA4x1hWQY7XIUOMCe5lDX8ILpRlDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOHG1FxbmnWu5RnbqD69jHWkgSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTU0YWMyMmEtY2NhYi0z ZTI4LWI4OTctZTViMWE2ZDQ2ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRcmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9WmWWwo+j4dmK++vzrm3zXjQvyUE9Y4ZoD5iTIFxZuo7KEhQqhkrtZ vxG9CUfW5n5pCyfEhB9ZethX0jt17DnhFQj83StPLKwGuGouVdPklTYXDxOG3MHK IyzRFV5pqxPBd/7MvDDroRFVfHIk2pEEbXCuKXKTBVimWXGMJNmO8RT6Fv5JvzSn z19VJlh2ar9/jYVZDd1ccjLRL7OdJc3Sk2gx7EQE3jd5WbGMJ5pQKhHQ7+FyFls9 VIMBwJJFSHaDwZx+7h4JGWXZ8+vK0CmF9ltf7fUHl3lV+xNuCbUajXHgdkdl/k4N bdEA9T+XFc0r7L8JdkDMctWB44nNAvI= -----END CERTIFICATE-----Generated at Thu Mar 26 07:24:23 2026 by rpki-client