$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bef6690b-afb0-3fee-af74-eb26790247da.roa File: bef6690b-afb0-3fee-af74-eb26790247da.roa (raw, json) Hash identifier: QSJK6LotFwDh7ZH7CuFZAtj5IX7ObmPv5RPFook1PRI= Subject key identifier: 6B:00:E9:4F:E9:39:D9:21:E6:E2:1D:FE:4E:60:0C:10:83:DF:9A:11 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E1164B700638A16C9ABF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bef6690b-afb0-3fee-af74-eb26790247da.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.23.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:16:4b:70:06:38:a1:6c:9a:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4e30e361-8eed-4c9c-9a57-ca8c508bcce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f9:5f:36:b2:77:dc:df:45:06:31:04:eb:68: bd:d5:56:95:c1:02:ea:ee:95:8d:78:51:ba:08:ec: d4:30:73:00:2b:fa:af:28:1c:f6:ac:bb:0f:cc:eb: 7a:79:b3:94:79:50:3d:5f:6f:a0:48:e2:7f:02:93: 3c:4b:4e:a5:65:b6:c6:37:c6:08:c6:af:f7:2e:51: 85:64:1e:a3:64:75:15:ba:f7:4a:57:93:10:a5:7b: c8:09:e5:a9:b7:76:4c:d1:c7:10:a6:3f:f2:b5:64: 56:44:9e:4b:3a:2b:90:d8:91:e5:a5:ab:94:74:8f: f7:ac:4c:cc:86:b1:60:ca:94:14:63:be:8f:8b:b6: bb:b0:20:a8:5b:c5:2a:e7:e1:45:14:00:ad:8e:61: 86:b0:7e:91:d1:ec:56:ca:e2:cd:1f:81:30:6b:e6: 7b:08:79:3e:46:a1:8f:bc:fa:36:03:43:35:3d:23: db:29:23:81:ac:e3:86:db:22:73:19:cb:ed:a8:93: 46:86:76:c0:f5:4b:fd:b2:02:82:bc:b9:ef:09:8d: b7:e8:db:cc:87:3f:e5:f3:a9:d4:96:84:f9:c3:69: ea:40:a6:15:54:b7:8b:f0:59:5a:4d:ee:2b:1a:12: 5e:60:52:7b:71:75:ed:67:85:50:cf:e4:d2:1c:9a: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:00:E9:4F:E9:39:D9:21:E6:E2:1D:FE:4E:60:0C:10:83:DF:9A:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bef6690b-afb0-3fee-af74-eb26790247da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:28:4c:16:f2:b8:ce:12:07:c6:d9:44:09:b1:cd:90:7f:41: af:37:63:de:92:7e:a2:bb:d8:4e:62:4d:48:cc:7d:db:2a:76: 8d:2b:62:bc:90:1d:50:6a:4a:1f:26:5c:cc:ec:c3:23:c6:aa: ae:5a:ae:63:8f:29:49:c0:59:f9:cc:3a:cf:ec:f2:16:39:de: 49:95:ae:a4:30:a8:d6:2a:59:0d:12:e9:00:92:56:f7:43:58: 38:ec:ca:2b:67:b7:c3:c8:79:f4:1e:1c:f6:0a:91:34:46:87: c3:56:53:57:dd:63:43:af:52:69:24:df:1c:0c:e7:11:9a:de: 17:7c:5f:38:12:31:44:76:42:a4:95:97:8a:43:3f:b8:f2:0b: 0d:ec:7f:50:d3:a4:10:7d:fc:46:14:3a:d1:7e:a0:07:ed:27: f2:92:b8:46:d1:b1:3a:8a:13:9b:33:28:63:c8:bb:1e:35:d8: ad:92:41:91:36:54:50:52:31:41:cb:df:14:25:5c:fc:1e:08: 1a:b9:67:2e:6c:cb:9d:d8:92:5e:8c:2c:04:58:2e:c5:36:e3: 46:07:f5:59:8d:cd:19:f0:39:5f:03:b1:d3:79:77:5a:0b:11: be:d5:fc:03:e5:02:51:ac:24:27:96:98:9d:56:df:fd:82:01: bc:2a:d2:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RZLcAY4oWyavwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGUzMGUzNjEtOGVlZC00YzljLTlhNTctY2E4YzUwOGJjY2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/lfNrJ33N9FBjEE62i91VaVwQLq7pWNeFG6 COzUMHMAK/qvKBz2rLsPzOt6ebOUeVA9X2+gSOJ/ApM8S06lZbbGN8YIxq/3LlGF ZB6jZHUVuvdKV5MQpXvICeWpt3ZM0ccQpj/ytWRWRJ5LOiuQ2JHlpauUdI/3rEzM hrFgypQUY76Pi7a7sCCoW8Uq5+FFFACtjmGGsH6R0exWyuLNH4Ewa+Z7CHk+RqGP vPo2A0M1PSPbKSOBrOOG2yJzGcvtqJNGhnbA9Uv9sgKCvLnvCY236NvMhz/l86nU loT5w2nqQKYVVLeL8FlaTe4rGhJeYFJ7cXXtZ4VQz+TSHJqd+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsA6U/pOdkh5uId/k5gDBCD35oRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmVmNjY5MGItYWZiMC0z ZmVlLWFmNzQtZWIyNjc5MDI0N2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYoTBbyuM4SB8bZRAmxzZB/Qa83Y96SfqK72E5iTUjMfdsqdo0rYryQ HVBqSh8mXMzswyPGqq5armOPKUnAWfnMOs/s8hY53kmVrqQwqNYqWQ0S6QCSVvdD WDjsyitnt8PIefQeHPYKkTRGh8NWU1fdY0OvUmkk3xwM5xGa3hd8XzgSMUR2QqSV l4pDP7jyCw3sf1DTpBB9/EYUOtF+oAftJ/KSuEbRsTqKE5szKGPIux412K2SQZE2 VFBSMUHL3xQlXPweCBq5Zy5sy53Ykl6MLARYLsU240YH9VmNzRnwOV8DsdN5d1oL Eb7V/APlAlGsJCeWmJ1W3/2CAbwq0h0= -----END CERTIFICATE-----Generated at Thu Mar 26 07:43:01 2026 by rpki-client