$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa File: bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa (raw, json) Hash identifier: XvYtCvDkInzdUZZbfyxyEFKAGbmnCKhMCXHcE9nKrfk= Subject key identifier: 66:32:B9:2D:30:A8:A3:67:61:83:A0:23:5E:12:AA:B3:9D:70:40:F1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D39CFA1C08266C30C9F17F500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.24.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:a1:c0:82:66:c3:0c:9f:17:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=3d232bef-ac1c-47e5-aeeb-6653570c38ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:e5:2e:7e:00:3f:4c:ab:69:5a:71:e7:29: b7:cf:1a:be:f5:28:11:a3:e5:9f:6e:3b:d4:5c:9e: e0:05:52:d6:69:5a:1c:7a:30:88:6c:54:18:eb:5d: c9:c8:0e:fe:ff:ec:90:f5:12:6c:db:82:c2:31:6f: 2d:15:90:e1:58:f5:0f:3a:6c:96:70:09:de:78:4a: 6b:30:3e:01:3b:ec:dd:02:67:e7:3e:e3:74:23:eb: 45:2b:25:e0:b6:b2:c9:83:25:1f:54:53:a4:f4:a6: 32:b2:80:c7:bd:40:86:26:00:fd:8f:1e:e7:8f:24: 01:1b:15:78:77:00:40:6e:6e:54:d5:5b:da:68:21: 44:7f:4a:62:f3:8b:62:fb:29:e8:01:96:70:fa:7a: 81:fb:4d:28:be:73:ab:07:e9:de:6a:e5:53:65:fc: fa:11:d8:df:6a:0c:aa:6e:0e:f8:97:66:9f:ee:80: 17:82:6f:ce:5e:c4:5f:b3:76:1d:84:49:0e:1b:e4: d2:aa:e1:45:cd:ee:c9:89:c7:30:5f:81:ae:60:74: 37:34:72:e9:7e:f8:63:eb:a3:06:03:c6:48:6c:4c: db:72:6f:10:33:25:77:a0:e5:1d:6e:75:eb:74:66: 3b:0e:8c:d8:2a:61:4c:03:2d:10:62:36:fe:f0:16: 13:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:32:B9:2D:30:A8:A3:67:61:83:A0:23:5E:12:AA:B3:9D:70:40:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bbf2bda1-6db3-34ae-97e0-4a9026945f20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:94:79:42:a1:68:d2:4d:98:a3:6e:fb:e7:a6:77:c9:45:b4: 6d:88:ca:b5:0f:ea:84:73:d1:da:c4:e4:31:73:11:73:1b:71: be:e3:3b:3f:90:e6:5c:a3:47:d1:b6:4e:ef:28:c3:70:99:78: 1a:4c:bd:5a:2b:cd:9e:6e:99:d6:27:22:11:98:25:16:64:a3: f5:35:73:1c:4c:f4:30:c6:27:4e:1a:70:1f:48:ca:31:52:c4: 77:7e:86:13:d7:0e:1f:ce:50:8c:87:10:f1:b0:de:4d:cd:03: cb:04:ba:12:69:ec:83:c8:55:01:98:52:80:35:82:5a:29:51: b1:77:a3:26:d1:4c:7a:3d:f5:db:df:b2:9e:89:03:8f:dd:76: 25:db:8c:18:70:ea:b6:ca:4e:02:70:83:a2:43:bd:87:18:cb: 33:07:c6:ec:9f:79:c6:8b:70:9a:cc:91:0e:80:f4:50:68:23: 32:dc:83:e2:b4:15:4d:1d:53:d3:3a:bf:40:74:e6:3b:dc:b0: 42:77:3b:24:1f:87:1a:54:da:5b:d8:c9:79:d7:d8:b5:01:05: af:1a:8d:73:30:d7:e5:f1:1d:99:f1:61:46:d9:16:df:5c:e0: 21:83:a6:bb:f3:f6:47:3c:93:ff:e9:3b:35:01:3c:c1:47:37: 87:7d:91:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z6HAgmbDDJ8X9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk M2QyMzJiZWYtYWMxYy00N2U1LWFlZWItNjY1MzU3MGMzOGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1blLn4AP0yraVpx5ym3zxq+9SgRo+WfbjvU XJ7gBVLWaVocejCIbFQY613JyA7+/+yQ9RJs24LCMW8tFZDhWPUPOmyWcAneeEpr MD4BO+zdAmfnPuN0I+tFKyXgtrLJgyUfVFOk9KYysoDHvUCGJgD9jx7njyQBGxV4 dwBAbm5U1VvaaCFEf0pi84ti+ynoAZZw+nqB+00ovnOrB+neauVTZfz6Edjfagyq bg74l2af7oAXgm/OXsRfs3YdhEkOG+TSquFFze7JiccwX4GuYHQ3NHLpfvhj66MG A8ZIbEzbcm8QMyV3oOUdbnXrdGY7DozYKmFMAy0QYjb+8BYTsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYyuS0wqKNnYYOgI14SqrOdcEDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmJmMmJkYTEtNmRiMy0z NGFlLTk3ZTAtNGE5MDI2OTQ1ZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeUeUKhaNJNmKNu++emd8lFtG2IyrUP6oRz0drE5DFzEXMbcb7jOz+Q 5lyjR9G2Tu8ow3CZeBpMvVorzZ5umdYnIhGYJRZko/U1cxxM9DDGJ04acB9IyjFS xHd+hhPXDh/OUIyHEPGw3k3NA8sEuhJp7IPIVQGYUoA1glopUbF3oybRTHo99dvf sp6JA4/ddiXbjBhw6rbKTgJwg6JDvYcYyzMHxuyfecaLcJrMkQ6A9FBoIzLcg+K0 FU0dU9M6v0B05jvcsEJ3OyQfhxpU2lvYyXnX2LUBBa8ajXMw1+XxHZnxYUbZFt9c 4CGDprvz9kc8k//pOzUBPMFHN4d9kdo= -----END CERTIFICATE-----Generated at Thu Mar 26 05:45:17 2026 by rpki-client