$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf573940-4999-30dc-8a74-589e5c1d1f58.roa File: cf573940-4999-30dc-8a74-589e5c1d1f58.roa (raw, json) Hash identifier: ou/HFuYXg0dLpQbvKdmv2wy6IkKOnBUAa2FxZ/FZp0M= Subject key identifier: 37:EC:F7:44:E8:1B:6C:40:B3:41:CC:8B:AD:0F:97:E4:60:C5:8B:2E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF78DF68160A44C7401A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf573940-4999-30dc-8a74-589e5c1d1f58.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.23.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:78:df:68:16:0a:44:c7:40:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=db7efefa-823e-4321-95c7-926281d19b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:02:ab:df:76:b7:56:19:a2:55:0f:d0:bb:37: ff:02:37:b3:5f:87:70:a4:74:ff:c6:ba:f5:98:ef: 41:06:9f:cb:80:b9:2b:11:74:d9:10:0e:f5:e5:b8: 91:bb:2b:bd:55:20:d1:df:c1:c2:71:0a:e6:4d:44: 28:57:c1:eb:fe:c7:3f:f3:c9:e9:07:c6:6d:78:cd: 2a:cf:65:c5:9c:85:ba:c6:fc:2a:dd:10:9d:7c:da: 89:52:72:e4:60:ca:92:cb:d5:b6:04:60:cf:38:11: 5b:96:93:fc:48:c9:86:11:ad:f3:c3:ef:e6:e3:d2: b8:26:eb:c9:fe:da:50:e1:05:04:0b:4b:99:9d:04: c3:ae:9a:71:88:90:dd:f6:fd:b1:bb:da:35:95:41: 2e:31:7d:08:1d:8a:3b:cc:b9:73:e1:bd:8d:98:5b: 2d:94:1f:40:84:89:8f:9b:e1:15:6b:45:8f:b8:e4: a3:f0:a8:dc:b0:33:38:95:7a:84:3b:9e:34:82:79: de:f8:21:dd:2f:34:49:34:24:0f:e4:e5:af:4c:3a: aa:cf:a4:83:98:9e:1f:3e:96:5d:34:8e:6e:b7:96: 5b:61:26:4c:b1:eb:a3:41:9d:02:e1:0b:6a:63:04: be:dd:41:11:cd:a8:27:c2:2f:c1:c9:7e:22:36:71: 7d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EC:F7:44:E8:1B:6C:40:B3:41:CC:8B:AD:0F:97:E4:60:C5:8B:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf573940-4999-30dc-8a74-589e5c1d1f58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:fa:8a:5f:08:1c:a6:1f:a6:22:ab:71:03:d4:3f:e7:67:bc: e9:d7:85:c3:29:a8:dc:90:bc:0f:8c:24:dc:14:0c:3c:b1:fe: 4a:a3:20:83:68:fe:18:39:55:e6:3f:64:ef:b0:57:c9:d1:b8: d9:03:fe:89:e5:38:e1:d8:0d:29:69:4c:9f:bb:c6:4e:84:c9: 9b:a9:62:cf:26:3a:26:55:5a:16:0e:9f:39:90:05:58:ca:75: f5:cc:75:92:39:f5:61:f3:f8:cd:38:3b:06:de:4a:ce:e0:be: 88:38:21:a0:6f:6b:5a:aa:17:2b:60:20:3b:7a:e3:57:4f:95: 96:cc:72:41:4b:8e:be:7d:6a:51:e4:da:30:59:bc:2b:63:f3: b3:de:9c:5e:bf:e3:ab:69:0d:8b:6e:55:9f:d3:d3:a0:2b:0d: bd:38:9f:8a:13:d8:bd:f5:8b:33:be:cb:e8:fe:49:ad:0f:6a: ce:34:15:1e:cd:c1:34:e0:f9:bd:4a:3f:58:34:0c:f0:ed:b8: 23:78:f4:70:c3:4e:6d:a4:f7:a3:f9:2d:ac:8f:d3:51:af:b6: 14:36:96:bc:a9:2e:42:01:5e:a9:b4:46:4b:cb:53:11:a2:7f: 5f:15:d2:90:14:47:af:df:da:37:48:36:26:be:00:73:d1:20: 84:16:3b:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k33jfaBYKRMdAGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGI3ZWZlZmEtODIzZS00MzIxLTk1YzctOTI2MjgxZDE5Yjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAKr33a3VhmiVQ/Quzf/AjezX4dwpHT/xrr1 mO9BBp/LgLkrEXTZEA715biRuyu9VSDR38HCcQrmTUQoV8Hr/sc/88npB8ZteM0q z2XFnIW6xvwq3RCdfNqJUnLkYMqSy9W2BGDPOBFblpP8SMmGEa3zw+/m49K4JuvJ /tpQ4QUEC0uZnQTDrppxiJDd9v2xu9o1lUEuMX0IHYo7zLlz4b2NmFstlB9AhImP m+EVa0WPuOSj8KjcsDM4lXqEO540gnne+CHdLzRJNCQP5OWvTDqqz6SDmJ4fPpZd NI5ut5ZbYSZMseujQZ0C4QtqYwS+3UERzagnwi/ByX4iNnF9AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfs90ToG2xAs0HMi60Pl+RgxYsuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y1NzM5NDAtNDk5OS0z MGRjLThhNzQtNTg5ZTVjMWQxZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRcKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/6il8IHKYfpiKrcQPUP+dnvOnXhcMpqNyQvA+MJNwUDDyx/kqjIINo /hg5VeY/ZO+wV8nRuNkD/onlOOHYDSlpTJ+7xk6EyZupYs8mOiZVWhYOnzmQBVjK dfXMdZI59WHz+M04OwbeSs7gvog4IaBva1qqFytgIDt641dPlZbMckFLjr59alHk 2jBZvCtj87PenF6/46tpDYtuVZ/T06ArDb04n4oT2L31izO+y+j+Sa0Pas40FR7N wTTg+b1KP1g0DPDtuCN49HDDTm2k96P5LayP01GvthQ2lrypLkIBXqm0RkvLUxGi f18V0pAUR6/f2jdINia+AHPRIIQWO68= -----END CERTIFICATE-----Generated at Thu Mar 26 14:44:38 2026 by rpki-client