$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9249e6f-a2ea-3eab-9b3c-8b95681cc88d.roa File: a9249e6f-a2ea-3eab-9b3c-8b95681cc88d.roa (raw, json) Hash identifier: qxmXGuy/x4K+D7ze4HaXY5vp2zk9n2V59hKKyuRHgC8= Subject key identifier: 7F:3C:D3:48:89:1E:38:CB:BA:31:C0:76:0B:2E:97:BA:A3:25:81:0B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2A74E3E8AF22DCD51569CE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9249e6f-a2ea-3eab-9b3c-8b95681cc88d.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 19905 IP address blocks: 173.22.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e3:e8:af:22:dc:d5:15:69:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=55c9d939-8226-48e2-9d9b-586a925c51f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:5d:02:4c:3d:eb:1e:4e:f5:2f:33:2b:e8: e3:f5:88:68:55:d7:f7:5d:94:08:85:03:86:e6:3b: 4f:92:9f:8f:73:b1:13:61:f6:63:92:bf:42:f2:9b: ec:88:b7:4a:6b:65:bd:97:dc:54:93:51:fa:bd:d1: 79:be:c6:49:65:ff:44:7e:a6:a7:6c:95:cf:5b:d1: c0:90:ad:fe:c1:32:be:91:29:a7:70:24:ed:9d:4d: ba:2f:c3:d1:93:ed:6a:4f:bb:61:a2:dc:3e:81:ce: d5:45:05:f5:6a:a7:ce:f7:59:38:e0:46:a3:de:c9: 09:9f:0b:c0:12:aa:71:63:2e:fc:43:28:d8:4e:9b: 05:9f:00:2c:2d:2f:c8:16:36:a6:ca:ca:db:fd:8c: 57:24:bf:fe:52:20:b3:6b:a6:d5:92:6d:01:d2:c8: 0a:49:d5:9f:2c:80:77:cd:56:c6:d1:ec:ac:10:fd: a6:99:0c:72:5a:34:7b:3e:1e:b0:f3:ee:cb:e6:b4: 03:f0:0e:f1:f4:6d:e7:d9:a4:57:8f:b5:20:57:eb: 7a:da:a5:73:c4:3e:9f:c5:6b:c1:90:68:98:50:84: e0:d2:3c:b9:e2:93:34:6f:a4:62:74:78:34:69:51: bf:8d:a2:ad:3a:e1:6d:cf:9e:40:2a:a9:b6:66:71: f2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3C:D3:48:89:1E:38:CB:BA:31:C0:76:0B:2E:97:BA:A3:25:81:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9249e6f-a2ea-3eab-9b3c-8b95681cc88d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:9f:f3:82:d4:0b:b0:83:3e:81:48:f8:0f:83:dc:b9:6d:fb: 7b:3c:2d:9f:03:d6:88:fc:a6:cf:8e:1b:e4:89:de:f2:95:4a: a3:88:65:20:f0:d5:57:42:90:f6:09:9e:55:a5:f0:c6:ef:7b: 85:e1:b2:83:9f:90:8a:b7:7f:3d:68:6c:0b:5b:5c:bd:16:d3: 80:a4:5d:1c:88:0b:1a:24:04:58:a2:18:ab:4f:cd:fa:59:c9: 7d:60:f6:1e:19:b7:8e:98:f1:fe:32:74:6e:ed:d7:ef:38:ca: b2:fb:df:ce:d6:ab:01:9d:de:4d:97:56:74:a2:fe:74:a1:c9: 76:ed:26:b2:f4:30:53:45:ad:92:58:24:0d:f6:f4:32:98:62: 8d:67:25:c0:69:3f:20:3f:8b:78:43:c3:67:51:2e:96:9b:12: 8a:67:d2:04:69:47:f9:96:2e:f6:91:45:96:4e:ce:6c:47:8d: 21:57:14:4e:76:37:6e:05:aa:2e:8c:41:02:3a:eb:3f:ad:be: 02:45:d9:14:94:f3:6e:1e:c0:7e:f9:7e:9b:d7:20:8c:7d:7c: 26:f4:d0:1f:a4:a0:70:9d:e7:e6:a5:16:29:2b:d9:15:1d:09: b5:fd:56:f9:da:0e:f3:4a:d0:ad:98:d5:c9:85:93:a5:77:8a: a3:77:6b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdOPoryLc1RVpzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NTVjOWQ5MzktODIyNi00OGUyLTlkOWItNTg2YTkyNWM1MWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVVdAkw96x5O9S8zK+jj9YhoVdf3XZQIhQOG 5jtPkp+Pc7ETYfZjkr9C8pvsiLdKa2W9l9xUk1H6vdF5vsZJZf9EfqanbJXPW9HA kK3+wTK+kSmncCTtnU26L8PRk+1qT7thotw+gc7VRQX1aqfO91k44Eaj3skJnwvA EqpxYy78QyjYTpsFnwAsLS/IFjamysrb/YxXJL/+UiCza6bVkm0B0sgKSdWfLIB3 zVbG0eysEP2mmQxyWjR7Ph6w8+7L5rQD8A7x9G3n2aRXj7UgV+t62qVzxD6fxWvB kGiYUITg0jy54pM0b6RidHg0aVG/jaKtOuFtz55AKqm2ZnHyRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8800iJHjjLujHAdgsul7qjJYELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTkyNDllNmYtYTJlYS0z ZWFiLTliM2MtOGI5NTY4MWNjODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRZjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaf84LUC7CDPoFI+A+D3Llt+3s8LZ8D1oj8ps+OG+SJ3vKVSqOIZSDw 1VdCkPYJnlWl8Mbve4XhsoOfkIq3fz1obAtbXL0W04CkXRyICxokBFiiGKtPzfpZ yX1g9h4Zt46Y8f4ydG7t1+84yrL7387WqwGd3k2XVnSi/nShyXbtJrL0MFNFrZJY JA329DKYYo1nJcBpPyA/i3hDw2dRLpabEopn0gRpR/mWLvaRRZZOzmxHjSFXFE52 N24Fqi6MQQI66z+tvgJF2RSU824ewH75fpvXIIx9fCb00B+koHCd5+alFikr2RUd CbX9VvnaDvNK0K2Y1cmFk6V3iqN3a5Q= -----END CERTIFICATE-----Generated at Thu Mar 26 07:25:58 2026 by rpki-client