$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0c7ee94-49ff-330d-9a7a-17b313c10913.roa File: d0c7ee94-49ff-330d-9a7a-17b313c10913.roa (raw, json) Hash identifier: qUI0a+noGjP9n4/RKmA4A010cw6OzFAMJ3zG2AVSkHg= Subject key identifier: EC:B3:BD:04:D4:22:73:81:8D:32:C9:99:C2:C8:3D:60:A6:39:73:AC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF92104037136B4D225840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0c7ee94-49ff-330d-9a7a-17b313c10913.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.22.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:92:10:40:37:13:6b:4d:22:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=a5da564f-88c3-4b9e-963c-828a850b5095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:73:a3:82:2e:bb:c6:c9:ea:b0:98:99:e6:d6: cb:bb:c8:fc:9e:51:9d:0a:99:c8:18:63:23:e6:d7: 88:ec:31:36:b2:7e:0a:98:ae:11:5d:91:1a:c2:77: 5c:41:91:f7:d5:f2:d9:cd:7a:91:53:27:93:6f:5c: a4:4d:e2:4e:34:ac:0a:9b:a2:22:6a:c1:39:0b:e9: b9:0d:d1:5b:6a:4a:62:2d:90:c9:64:1e:db:1a:01: db:6f:41:36:be:ed:80:3c:ef:99:36:82:46:d0:c7: 1d:d3:aa:65:0d:f1:a3:7d:47:f4:4e:97:69:31:d9: 4e:b7:dd:f6:53:b1:6d:1e:25:48:60:78:1e:1b:91: 32:15:87:36:42:ce:db:d1:9e:34:96:a0:fd:64:d0: 1d:ed:1a:6e:ae:a0:66:a8:9c:7d:76:ad:d0:e0:85: d8:e8:99:fa:c8:89:22:d3:a0:a2:f6:dc:87:9c:6d: b4:16:6d:4e:fd:4e:ea:55:a2:f8:49:c1:ef:ae:78: f9:35:1b:1e:c3:d0:8c:eb:46:d6:2e:b1:c9:ad:5b: b5:ff:6f:e0:5d:df:3f:ab:4d:85:31:b1:fa:bd:fe: 3a:a2:1e:85:fc:9d:e6:0c:78:8e:7d:24:17:90:f4: df:de:0e:66:1a:d2:da:44:07:e9:ca:84:4d:db:e1: 55:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B3:BD:04:D4:22:73:81:8D:32:C9:99:C2:C8:3D:60:A6:39:73:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0c7ee94-49ff-330d-9a7a-17b313c10913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:27:82:8b:24:2d:d3:54:a3:e0:0b:e6:d3:fe:ea:a6:3a:8d: 3e:17:1f:c3:c3:af:e6:9d:4c:f5:f4:6f:95:41:1b:5c:bc:7b: a7:df:02:ac:f1:28:81:cf:1e:38:f0:25:5c:4d:08:a8:87:6a: c3:65:4b:1d:cb:f8:31:8d:52:40:99:76:4f:31:bf:17:bc:92: 08:7f:3f:9f:e7:f3:7e:f9:1a:2a:c2:17:30:31:52:03:57:2b: 95:ef:6b:c6:bb:82:ee:43:0c:98:cc:c2:d8:4b:68:b2:06:0d: eb:4d:c9:b6:d4:db:74:b7:30:10:80:93:62:32:b9:4c:5d:02: 08:29:f6:4d:02:2c:58:80:d3:2e:27:25:07:ef:15:62:c5:e5: c6:17:33:83:1c:a5:a1:d1:83:c5:db:db:6e:2d:8f:71:fd:6a: db:4e:0a:fa:28:11:04:85:c9:53:ca:1f:ac:99:88:f0:d5:37: b6:6c:48:84:61:a1:7f:d3:8d:d6:db:51:bc:ed:0e:61:8c:ff: 94:42:91:b0:a1:e6:d6:e0:d3:5c:3b:85:16:4f:09:48:7c:e8: 3b:eb:63:86:3c:fd:bd:d4:b1:4f:50:a8:32:39:4a:31:d0:77: ca:61:75:25:1b:9b:12:7d:ba:89:3b:8a:36:5d:2f:84:b2:5d: 6c:f2:cf:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35IQQDcTa00iWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YTVkYTU2NGYtODhjMy00YjllLTk2M2MtODI4YTg1MGI1MDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHOjgi67xsnqsJiZ5tbLu8j8nlGdCpnIGGMj 5teI7DE2sn4KmK4RXZEawndcQZH31fLZzXqRUyeTb1ykTeJONKwKm6IiasE5C+m5 DdFbakpiLZDJZB7bGgHbb0E2vu2APO+ZNoJG0Mcd06plDfGjfUf0TpdpMdlOt932 U7FtHiVIYHgeG5EyFYc2Qs7b0Z40lqD9ZNAd7RpurqBmqJx9dq3Q4IXY6Jn6yIki 06Ci9tyHnG20Fm1O/U7qVaL4ScHvrnj5NRsew9CM60bWLrHJrVu1/2/gXd8/q02F MbH6vf46oh6F/J3mDHiOfSQXkPTf3g5mGtLaRAfpyoRN2+FVrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyzvQTUInOBjTLJmcLIPWCmOXOsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBjN2VlOTQtNDlmZi0z MzBkLTlhN2EtMTdiMzEzYzEwOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYngoskLdNUo+AL5tP+6qY6jT4XH8PDr+adTPX0b5VBG1y8e6ffAqzx KIHPHjjwJVxNCKiHasNlSx3L+DGNUkCZdk8xvxe8kgh/P5/n8375GirCFzAxUgNX K5Xva8a7gu5DDJjMwthLaLIGDetNybbU23S3MBCAk2IyuUxdAggp9k0CLFiA0y4n JQfvFWLF5cYXM4McpaHRg8Xb224tj3H9attOCvooEQSFyVPKH6yZiPDVN7ZsSIRh oX/TjdbbUbztDmGM/5RCkbCh5tbg01w7hRZPCUh86DvrY4Y8/b3UsU9QqDI5SjHQ d8phdSUbmxJ9uok7ijZdL4SyXWzyzz8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:05:45 2026 by rpki-client