$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa File: b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa (raw, json) Hash identifier: ACG7YeZUn0XDhKMyIP0bKo6PtPJ9fB3rmJbO8j6kvuM= Subject key identifier: 74:3D:21:B7:58:A5:8F:03:64:15:65:82:E2:B1:B1:32:83:FE:4F:BD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E1158E45672D951B765100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.25.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:15:8e:45:67:2d:95:1b:76:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=cca5c9cd-3905-471d-91cc-de7e517428a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:39:73:25:6c:49:11:b1:0c:e0:ce:58:67:42: a5:af:d7:9d:89:1e:bb:89:23:12:99:e9:f1:1d:df: 48:92:90:be:c0:d9:4f:15:b1:40:d8:ca:79:1f:af: 81:8f:4c:15:89:9f:1d:a2:e8:f6:7b:6e:3d:6d:39: 15:86:07:2e:ae:a7:4e:c3:d8:d2:a4:cb:54:33:62: f8:a4:73:03:ea:b1:c1:d9:2b:54:92:01:e0:54:9a: c1:f3:cf:71:97:46:a3:e7:4e:90:08:9e:53:cd:83: 01:8a:5c:38:48:2c:2d:3a:fc:b5:a3:0f:3b:f8:bf: b4:27:ee:8c:9d:be:bd:98:b8:93:60:7f:6a:b7:98: bc:53:de:75:97:55:35:d3:7b:2a:66:4d:fa:ed:08: 8c:91:4e:76:d9:7a:f3:6c:28:2e:7e:59:30:d6:e7: 81:32:32:71:40:a7:60:08:cc:02:af:99:e5:7a:f3: 02:d1:44:c1:96:fa:d8:02:5f:08:f5:9b:01:73:24: 51:18:53:54:60:f4:81:db:26:23:ba:38:ed:2a:74: c4:23:3d:19:e6:6d:d7:e7:68:57:99:c9:31:e0:82: 17:dd:03:4b:22:82:e5:90:6d:9d:ba:41:b1:89:d8: 1e:5a:db:f5:ce:b5:8b:0c:ac:dd:e8:bf:6f:c5:12: 98:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3D:21:B7:58:A5:8F:03:64:15:65:82:E2:B1:B1:32:83:FE:4F:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b5cba6b0-4073-3daa-b297-eaca8d095ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ef:48:2f:90:bc:3b:37:f9:5a:31:c6:21:80:0a:f9:3c:89: eb:02:9b:6e:c1:20:13:ab:ed:60:9a:57:12:c2:cb:81:c8:a0: 99:66:63:07:c3:6e:81:7f:60:04:68:33:53:ef:22:aa:69:74: d8:73:cb:89:95:e2:55:06:bc:21:67:ff:53:40:77:60:e9:c6: f3:37:0c:94:b5:95:a1:f7:7a:b2:62:af:6d:46:aa:8a:6a:07: 77:9e:a9:e4:9f:3d:ee:ae:47:68:97:65:29:49:98:b3:aa:b7: 18:26:82:18:69:0f:c8:32:d1:f7:a5:08:ba:eb:2a:b9:97:5f: 5e:9e:5e:72:b9:32:21:9f:d7:00:b0:d6:e5:6c:57:6b:22:6c: 9b:de:d7:51:a1:66:81:d4:57:2d:c5:7f:da:1f:21:63:0d:12: d8:45:1f:e6:6e:bb:5d:af:d5:ea:66:9c:cc:01:dd:fe:fe:3e: b3:5c:08:e5:99:b3:3c:ae:a8:c2:ae:ee:e5:0a:2c:89:df:8b: ee:6e:af:91:e8:b9:d3:9d:dd:76:ec:5d:f8:80:70:3e:18:d0: 1d:0c:86:56:ff:27:91:e7:43:98:f3:0d:84:a6:9a:00:a2:1e: f2:6c:a1:64:94:4b:2c:f5:6a:3a:56:7c:c7:02:bb:40:ad:5b: 28:dd:87:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RWORWctlRt2UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2NhNWM5Y2QtMzkwNS00NzFkLTkxY2MtZGU3ZTUxNzQyOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTlzJWxJEbEM4M5YZ0Klr9ediR67iSMSmenx Hd9IkpC+wNlPFbFA2Mp5H6+Bj0wViZ8douj2e249bTkVhgcurqdOw9jSpMtUM2L4 pHMD6rHB2StUkgHgVJrB889xl0aj506QCJ5TzYMBilw4SCwtOvy1ow87+L+0J+6M nb69mLiTYH9qt5i8U951l1U103sqZk367QiMkU522XrzbCguflkw1ueBMjJxQKdg CMwCr5nlevMC0UTBlvrYAl8I9ZsBcyRRGFNUYPSB2yYjujjtKnTEIz0Z5m3X52hX mckx4IIX3QNLIoLlkG2dukGxidgeWtv1zrWLDKzd6L9vxRKY4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQ9IbdYpY8DZBVlguKxsTKD/k+9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjVjYmE2YjAtNDA3My0z ZGFhLWIyOTctZWFjYThkMDk1ZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRnuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3vSC+QvDs3+VoxxiGACvk8iesCm27BIBOr7WCaVxLCy4HIoJlmYwfD boF/YARoM1PvIqppdNhzy4mV4lUGvCFn/1NAd2DpxvM3DJS1laH3erJir21Gqopq B3eeqeSfPe6uR2iXZSlJmLOqtxgmghhpD8gy0felCLrrKrmXX16eXnK5MiGf1wCw 1uVsV2sibJve11GhZoHUVy3Ff9ofIWMNEthFH+Zuu12v1epmnMwB3f7+PrNcCOWZ szyuqMKu7uUKLInfi+5ur5HoudOd3XbsXfiAcD4Y0B0Mhlb/J5HnQ5jzDYSmmgCi HvJsoWSUSyz1ajpWfMcCu0CtWyjdh8g= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:22 2026 by rpki-client