$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5ebaff6-81a6-3171-b7f6-0dcbbfc8e96e.roa File: d5ebaff6-81a6-3171-b7f6-0dcbbfc8e96e.roa (raw, json) Hash identifier: kTyiEGj1A0ADfCpnpJ5/HIKqfZKMBNy2fPCzw9vYtl4= Subject key identifier: F1:75:18:20:EF:7D:EA:CB:6A:4B:18:85:EF:F2:F5:99:A2:39:FE:9C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E12A5F9FD6AC8E4C3B89C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5ebaff6-81a6-3171-b7f6-0dcbbfc8e96e.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.24.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2a:5f:9f:d6:ac:8e:4c:3b:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4ad91557-585c-4513-8f87-d47e318d7920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:90:ee:1f:c9:d7:73:4e:14:75:98:73:a7: 9f:5f:14:58:b0:b7:23:49:f9:fb:00:0b:e5:fa:d0: 64:4c:a4:41:ee:4a:21:e4:6b:ae:e9:0e:5c:fd:06: 80:77:11:f1:03:bf:a6:45:31:f4:f4:0f:61:32:fb: b6:9e:53:37:06:3e:05:57:69:f9:cb:9e:3c:5a:9b: 6e:00:cf:65:ec:a7:ac:0f:6f:e0:2b:9a:05:89:f2: ff:ad:70:fd:8f:06:16:e5:fc:3d:40:e0:62:67:92: de:00:ad:55:82:67:4a:1c:e4:30:e3:3d:75:ba:b5: 12:d7:94:a6:0e:4d:c7:a5:f2:7b:05:5d:a2:1e:d1: 5c:ec:fd:0b:72:0c:a3:df:8e:8c:65:16:32:3b:bb: 30:55:dc:4d:44:d1:5a:a5:91:0d:db:14:23:4a:69: 71:09:e5:c8:fc:49:27:ca:de:a9:ea:e8:ba:36:b3: 78:e3:33:80:c7:70:bf:fd:09:cf:7e:8d:1a:a1:ec: d6:b0:1c:ae:56:36:03:b1:af:75:12:6c:9e:96:6b: 03:ce:7d:c6:ea:94:b4:71:33:66:ac:cb:8d:00:5d: 57:45:63:d8:21:b6:28:30:de:77:ef:ca:aa:9c:9d: b7:f1:10:67:9a:ef:9b:0b:82:e2:ec:b5:54:9f:ff: 4d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:75:18:20:EF:7D:EA:CB:6A:4B:18:85:EF:F2:F5:99:A2:39:FE:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5ebaff6-81a6-3171-b7f6-0dcbbfc8e96e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:15:46:f4:5f:e0:bb:b8:b0:45:6f:0d:f2:5f:a7:be:73:8b: 84:f2:38:21:2b:41:b6:08:fb:ac:2e:f6:6c:47:7e:a8:e4:dd: 61:c0:48:47:87:48:de:5d:4f:e7:a5:7d:9b:a2:20:08:36:3f: e9:e5:38:97:79:a3:ac:3c:a2:77:a1:f8:27:db:de:56:fa:d5: 0c:15:c0:3f:d9:30:dc:28:07:49:78:8b:8f:62:9e:7f:dc:cb: df:fa:1b:2b:d2:d8:98:db:ba:3e:38:d2:93:73:d4:f3:eb:27: fd:ac:a4:5e:46:2b:67:b9:4e:90:4c:7d:cb:e6:5d:39:be:14: ce:17:08:e9:d9:1b:dd:f9:ff:23:31:b7:25:67:cb:77:bb:21: 1b:2c:07:a5:6d:02:60:dd:8d:44:38:50:7d:46:7e:d3:9d:0e: fd:ef:4e:00:53:86:af:a1:93:e7:54:e8:bb:a1:37:c8:53:48: 2d:1d:27:2c:d3:0a:f9:8b:e9:66:5e:2b:64:34:1d:fa:00:e8: b0:77:10:5b:6d:2f:4b:b5:3f:67:db:17:3b:1a:bd:54:de:3b: b6:d2:58:d4:ce:c5:f8:d2:cf:1e:0e:70:2d:4b:c2:3e:6c:02: 83:43:0b:a7:06:4c:06:63:8b:5c:de:e8:0f:83:d1:d7:11:91: 58:25:cf:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Spfn9asjkw7icAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGFkOTE1NTctNTg1Yy00NTEzLThmODctZDQ3ZTMxOGQ3OTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYGQ7h/J13NOFHWYc6efXxRYsLcjSfn7AAvl +tBkTKRB7koh5Guu6Q5c/QaAdxHxA7+mRTH09A9hMvu2nlM3Bj4FV2n5y548Wptu AM9l7KesD2/gK5oFifL/rXD9jwYW5fw9QOBiZ5LeAK1VgmdKHOQw4z11urUS15Sm Dk3HpfJ7BV2iHtFc7P0Lcgyj346MZRYyO7swVdxNRNFapZEN2xQjSmlxCeXI/Ekn yt6p6ui6NrN44zOAx3C//QnPfo0aoezWsByuVjYDsa91EmyelmsDzn3G6pS0cTNm rMuNAF1XRWPYIbYoMN5378qqnJ238RBnmu+bC4Li7LVUn/9NcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPF1GCDvferLaksYhe/y9ZmiOf6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDVlYmFmZjYtODFhNi0z MTcxLWI3ZjYtMGRjYmJmYzhlOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRiPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgVRvRf4Lu4sEVvDfJfp75zi4TyOCErQbYI+6wu9mxHfqjk3WHASEeH SN5dT+elfZuiIAg2P+nlOJd5o6w8oneh+Cfb3lb61QwVwD/ZMNwoB0l4i49inn/c y9/6GyvS2Jjbuj440pNz1PPrJ/2spF5GK2e5TpBMfcvmXTm+FM4XCOnZG935/yMx tyVny3e7IRssB6VtAmDdjUQ4UH1GftOdDv3vTgBThq+hk+dU6LuhN8hTSC0dJyzT CvmL6WZeK2Q0HfoA6LB3EFttL0u1P2fbFzsavVTeO7bSWNTOxfjSzx4OcC1Lwj5s AoNDC6cGTAZji1ze6A+D0dcRkVglzxU= -----END CERTIFICATE-----Generated at Thu Mar 26 07:21:48 2026 by rpki-client