$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af3520ed-e043-3001-b695-d4f401a42f6d.roa File: af3520ed-e043-3001-b695-d4f401a42f6d.roa (raw, json) Hash identifier: aZDaAuyIV5C3StPy4BXYNtmtJNafM0zZdEcAXv6gzCc= Subject key identifier: C2:9F:92:34:1D:2F:51:43:A1:78:1B:7D:FC:68:1B:0E:88:99:72:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AA211E2AD6C04C92F9FE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af3520ed-e043-3001-b695-d4f401a42f6d.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.24.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:21:1e:2a:d6:c0:4c:92:f9:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=52abf42f-5181-4873-b048-c90a3aa2bb97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:0d:4d:bb:4e:0e:d9:93:6f:42:f6:00:b7: 73:d7:57:6f:f8:4d:d4:85:19:a4:a7:77:ec:7c:e4: 28:47:3b:bc:69:99:4e:d9:97:d3:20:bc:8d:51:b5: 83:70:7e:7b:33:ab:8f:9c:aa:4d:71:c4:2c:aa:41: 68:fc:60:00:46:84:fc:e0:61:31:f9:28:3c:d2:c0: ab:aa:68:7a:a4:80:f0:c9:ae:ba:85:f4:f0:aa:0b: da:1f:65:6b:c0:eb:d7:d8:d0:b6:58:f7:eb:d7:ab: a5:6d:fb:67:14:7d:0d:a9:8e:29:2f:0d:13:e3:f0: 93:ca:6e:f3:81:cf:ca:1a:ce:6e:b2:52:88:0e:bd: 7a:96:b1:6e:87:1a:3f:df:e0:70:b6:0e:46:0c:92: 23:a4:d5:ae:78:79:98:02:82:fe:52:e2:43:9d:3b: 0d:32:c1:b3:d4:c3:f0:dc:95:97:ca:24:34:77:69: 70:15:f9:ac:bb:df:0d:f4:ef:2e:53:56:e7:83:3d: d3:a5:4c:3f:df:4c:7a:de:cc:11:a2:dc:e2:bc:f7: 14:94:70:e8:0e:09:68:b4:ff:82:c0:d8:8c:d7:93: b2:bb:19:bf:d9:5b:57:c4:10:3f:60:8f:86:40:d3: bc:27:2c:5a:39:e1:ae:e1:df:f7:48:b4:7a:39:49: 99:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9F:92:34:1D:2F:51:43:A1:78:1B:7D:FC:68:1B:0E:88:99:72:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af3520ed-e043-3001-b695-d4f401a42f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:bd:bc:5a:0a:c6:42:f5:0c:6d:0f:11:30:7d:6f:e6:a4:45: 32:30:d5:1f:ae:59:a2:5b:b7:93:8c:96:67:3b:6f:28:fa:ff: 0b:91:b4:16:eb:62:a1:51:4a:e5:05:ad:8b:04:1d:2c:64:ad: 16:fe:b0:65:ac:c3:88:44:3c:5d:6d:eb:37:5b:61:d2:68:5b: a5:70:bd:63:fa:44:cf:2f:1a:ed:85:7d:25:22:70:08:8a:ab: ce:ef:82:ce:00:2c:62:6b:15:62:96:12:77:3e:41:c6:9e:cc: e4:4f:c7:77:41:54:29:78:2c:3c:d2:17:ab:91:2b:6f:5a:32: 43:3c:21:5e:b2:4a:69:f1:1d:91:72:ab:a5:a4:0a:0b:e2:1a: 42:64:85:c1:84:c9:26:e5:fb:c3:ac:08:d9:19:81:6d:f5:de: 6e:61:68:ad:1b:c8:ca:24:c1:0c:b1:f1:b0:1e:f8:1b:78:20: 48:53:95:13:0d:f3:22:3b:41:1d:6f:53:cd:b0:02:2f:b5:0c: 48:ef:92:f9:4b:10:0c:41:35:3e:e4:ce:4c:6d:67:33:97:47: 46:bf:b8:02:dc:54:df:c1:41:79:03:96:5e:77:a8:a4:fa:39: 08:44:80:16:98:bc:c8:d0:a1:36:6a:82:36:d9:88:c8:bd:66: cd:06:52:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqiEeKtbATJL5/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NTJhYmY0MmYtNTE4MS00ODczLWIwNDgtYzkwYTNhYTJiYjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJwNTbtODtmTb0L2ALdz11dv+E3UhRmkp3fs fOQoRzu8aZlO2ZfTILyNUbWDcH57M6uPnKpNccQsqkFo/GAARoT84GEx+Sg80sCr qmh6pIDwya66hfTwqgvaH2VrwOvX2NC2WPfr16ulbftnFH0NqY4pLw0T4/CTym7z gc/KGs5uslKIDr16lrFuhxo/3+Bwtg5GDJIjpNWueHmYAoL+UuJDnTsNMsGz1MPw 3JWXyiQ0d2lwFfmsu98N9O8uU1bngz3TpUw/30x63swRotzivPcUlHDoDglotP+C wNiM15Oyuxm/2VtXxBA/YI+GQNO8JyxaOeGu4d/3SLR6OUmZNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKfkjQdL1FDoXgbffxoGw6ImXJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWYzNTIwZWQtZTA0My0z MDAxLWI2OTUtZDRmNDAxYTQyZjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK9vFoKxkL1DG0PETB9b+akRTIw1R+uWaJbt5OMlmc7byj6/wuRtBbr YqFRSuUFrYsEHSxkrRb+sGWsw4hEPF1t6zdbYdJoW6VwvWP6RM8vGu2FfSUicAiK q87vgs4ALGJrFWKWEnc+QcaezORPx3dBVCl4LDzSF6uRK29aMkM8IV6ySmnxHZFy q6WkCgviGkJkhcGEySbl+8OsCNkZgW313m5haK0byMokwQyx8bAe+Bt4IEhTlRMN 8yI7QR1vU82wAi+1DEjvkvlLEAxBNT7kzkxtZzOXR0a/uALcVN/BQXkDll53qKT6 OQhEgBaYvMjQoTZqgjbZiMi9Zs0GUlY= -----END CERTIFICATE-----Generated at Thu Mar 26 13:54:38 2026 by rpki-client