$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae69f72c-1a33-3636-8017-ad9957fe4afa.roa File: ae69f72c-1a33-3636-8017-ad9957fe4afa.roa (raw, json) Hash identifier: /3xKZRWIOxwqR+HcDJuPZdClTn8jNWghR17BnsQWpYs= Subject key identifier: 2B:D7:18:26:40:12:23:2E:D6:D3:55:9C:D9:F1:21:09:E0:22:2A:5C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF70F7BDD9D4E551D7BA20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae69f72c-1a33-3636-8017-ad9957fe4afa.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.23.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:70:f7:bd:d9:d4:e5:51:d7:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=69072ef0-ce22-4763-9414-531adb16de17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:91:97:45:a4:ed:18:93:b7:b8:36:4a:21:d3: b8:69:bd:ef:02:f6:66:f8:a1:96:6c:f4:a1:91:4a: 34:45:67:10:25:eb:17:0b:d4:ce:df:bd:d6:a6:18: 1b:4a:6e:7f:42:51:41:f4:eb:ec:49:c0:69:30:0b: 3d:ed:08:16:db:32:c3:8a:ee:b5:e5:aa:ef:3e:55: b8:9d:f5:ef:cd:22:e9:9b:21:16:d2:7b:3e:ab:03: 66:3b:a5:71:50:e7:07:7c:d2:43:97:2b:d4:49:c0: ca:c2:d6:05:e4:75:8e:d0:5e:02:52:39:f2:d1:23: c9:47:d6:41:ab:06:55:e8:8c:fa:25:a0:b4:35:90: 03:48:66:29:41:7d:e3:93:b9:a9:57:5e:7c:17:aa: c6:74:b7:dc:9c:78:b8:2f:70:1c:d3:1d:a3:e9:40: 58:80:7c:95:36:a7:2a:f6:31:de:54:d8:1e:23:42: 80:be:ef:b8:18:26:be:02:f5:09:50:0b:03:e3:b7: 27:1b:6f:d8:29:6f:c6:69:26:d1:76:bd:ed:96:92: 6a:92:b6:05:aa:72:29:68:ec:e2:04:c5:85:86:57: 7b:d5:77:b8:37:85:9b:1f:61:9c:9e:86:ce:45:25: 2f:de:71:56:a5:65:27:3e:5e:ee:8f:00:10:a8:00: 71:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D7:18:26:40:12:23:2E:D6:D3:55:9C:D9:F1:21:09:E0:22:2A:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae69f72c-1a33-3636-8017-ad9957fe4afa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:c1:e8:27:c7:a5:51:56:ac:5c:4b:50:c4:c2:9a:c6:fe:75: d0:56:c4:a6:cd:5e:dc:2b:88:38:22:a8:14:7b:a0:fc:2f:ca: b2:01:06:d2:5c:e1:da:84:d4:33:61:ed:c3:47:62:c2:28:fc: 71:3c:c0:9c:32:c3:77:5a:10:61:2d:20:34:25:70:df:21:df: ec:cf:43:4c:84:02:4c:06:28:d1:29:36:c8:6b:d7:f9:3a:7b: b8:51:4c:58:5d:c7:95:75:b8:5f:1b:2e:7e:90:45:c3:27:6e: a3:9d:0a:12:5e:44:fa:88:db:bb:a7:a5:5e:ae:03:16:79:4d: 47:85:43:49:33:06:50:37:00:5c:5f:e4:df:15:30:78:29:9d: bc:68:d5:6d:c0:5c:f7:f1:15:08:cb:32:5a:bc:f7:aa:7c:e4: 1a:da:10:a5:15:2c:1f:a5:68:1f:51:f2:5b:7a:03:3d:41:25: d3:a7:c9:96:21:85:de:3e:7d:15:e8:31:b5:2e:c2:7d:bc:69: b5:52:f3:2a:dd:d8:42:52:cd:fb:11:89:7b:bd:b9:ea:15:25: 46:b6:1b:06:68:26:1a:21:fa:01:15:dc:61:08:1e:0b:a7:4d: 90:1a:a0:1d:5f:ee:50:6e:43:fa:c8:c2:3f:55:a2:1f:2d:a3: 40:8a:1d:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k33D3vdnU5VHXuiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjkwNzJlZjAtY2UyMi00NzYzLTk0MTQtNTMxYWRiMTZkZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5GXRaTtGJO3uDZKIdO4ab3vAvZm+KGWbPSh kUo0RWcQJesXC9TO373WphgbSm5/QlFB9OvsScBpMAs97QgW2zLDiu615arvPlW4 nfXvzSLpmyEW0ns+qwNmO6VxUOcHfNJDlyvUScDKwtYF5HWO0F4CUjny0SPJR9ZB qwZV6Iz6JaC0NZADSGYpQX3jk7mpV158F6rGdLfcnHi4L3Ac0x2j6UBYgHyVNqcq 9jHeVNgeI0KAvu+4GCa+AvUJUAsD47cnG2/YKW/GaSbRdr3tlpJqkrYFqnIpaOzi BMWFhld71Xe4N4WbH2GcnobORSUv3nFWpWUnPl7ujwAQqABxMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvXGCZAEiMu1tNVnNnxIQngIipcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWU2OWY3MmMtMWEzMy0z NjM2LTgwMTctYWQ5OTU3ZmU0YWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRdkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzB6CfHpVFWrFxLUMTCmsb+ddBWxKbNXtwriDgiqBR7oPwvyrIBBtJc 4dqE1DNh7cNHYsIo/HE8wJwyw3daEGEtIDQlcN8h3+zPQ0yEAkwGKNEpNshr1/k6 e7hRTFhdx5V1uF8bLn6QRcMnbqOdChJeRPqI27unpV6uAxZ5TUeFQ0kzBlA3AFxf 5N8VMHgpnbxo1W3AXPfxFQjLMlq896p85BraEKUVLB+laB9R8lt6Az1BJdOnyZYh hd4+fRXoMbUuwn28abVS8yrd2EJSzfsRiXu9ueoVJUa2GwZoJhoh+gEV3GEIHgun TZAaoB1f7lBuQ/rIwj9Voh8to0CKHVE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:14:21 2026 by rpki-client