$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d74edce3-b124-3472-8aa4-7487a1587b1a.roa File: d74edce3-b124-3472-8aa4-7487a1587b1a.roa (raw, json) Hash identifier: NBudrBxqH7l7Cj70V+wklW7OTIdUszbZmimRIW5k1YE= Subject key identifier: A4:A1:DF:E4:5F:57:A1:76:24:E7:68:06:31:A8:F8:F8:08:4E:7C:AD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E118FBE3A983FAC64865D8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d74edce3-b124-3472-8aa4-7487a1587b1a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.18.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:18:fb:e3:a9:83:fa:c6:48:65:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4a1e8783-5fa4-408d-bd5f-4257b3c0d6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8f:a3:14:64:9c:70:7e:57:a4:32:e8:6c:1e: 43:4d:8c:7e:75:dc:e4:43:39:a3:c5:94:1b:3b:dd: ed:9f:ea:da:e2:1e:36:34:78:78:7d:ff:28:bb:26: a1:45:b9:68:c1:e8:1c:0f:3f:95:9d:e0:45:3e:ad: 2f:c6:96:89:31:b5:ac:3e:02:df:7b:57:14:37:76: b5:67:5d:88:77:30:8e:1d:61:1a:c4:5a:04:cb:b9: 0f:a0:40:08:94:3a:b2:a2:61:5f:72:d9:2e:6d:a8: f0:15:00:01:33:8c:60:8b:0c:41:d9:8b:23:01:c1: 21:0d:00:f5:87:1f:8c:0b:73:8b:7e:c3:91:bb:58: a0:75:86:66:1b:49:ac:8f:b0:4c:0e:97:6f:e2:34: c3:60:3f:32:30:ea:93:6f:2d:80:62:bc:5a:16:57: f0:58:b1:22:e7:e9:b3:2a:5a:83:99:ab:15:08:64: 31:94:11:a8:46:45:f5:ea:ba:5c:14:71:31:69:f8: 58:d4:f8:cc:5d:db:98:d7:1f:86:58:30:36:19:f0: 31:75:cf:b6:82:2c:a3:e4:6a:01:d1:4f:62:9b:e4: c1:0d:51:5a:a2:b5:59:71:35:96:48:84:09:85:80: cc:fb:31:1d:6f:6e:f8:0f:74:7a:ab:4c:7d:b6:2c: 5d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A1:DF:E4:5F:57:A1:76:24:E7:68:06:31:A8:F8:F8:08:4E:7C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d74edce3-b124-3472-8aa4-7487a1587b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d0:b9:b7:f2:c3:7f:19:25:24:c1:2c:1d:a9:71:30:80:eb: 6f:b5:fe:84:57:ea:aa:c5:7e:ac:9e:1e:1d:b6:8a:43:20:fe: b3:da:85:d6:6b:cc:68:fa:c5:4b:c1:7b:53:65:7e:02:fd:08: 21:40:7e:14:de:fb:52:23:65:16:2a:d8:ce:95:58:8d:53:cd: 4c:0a:44:13:72:79:a5:41:47:fc:4a:9e:b9:9c:9f:d8:2d:ce: 26:2c:a1:4d:dd:b9:07:67:14:4a:58:57:e9:6f:d6:f6:24:72: ed:6d:e0:59:62:d3:b2:42:b1:64:f8:43:08:23:71:9a:18:d3: 32:44:1c:04:95:9f:48:a0:07:3b:26:c4:05:30:4b:d6:7c:57: bb:bb:6a:f3:1e:b9:f1:fe:02:69:a7:0f:a4:73:9a:18:04:92: ed:d1:d0:04:d4:0c:25:fd:5b:95:0d:da:df:3b:d5:4f:10:ba: 7e:0b:13:e6:5b:9a:e4:e4:2f:c6:66:9f:4c:19:62:df:9c:0a: 95:51:e6:bd:c0:c0:33:89:55:6b:4d:1a:e1:fe:f2:7b:36:18: ff:d8:ea:2a:d1:28:a7:f0:68:d5:c3:2e:2c:0f:2e:b5:86:fb: bd:ad:cb:67:e9:88:8c:a0:03:b5:80:07:07:78:c2:73:7e:7a: 71:0a:34:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Rj746mD+sZIZdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGExZTg3ODMtNWZhNC00MDhkLWJkNWYtNDI1N2IzYzBkNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY+jFGSccH5XpDLobB5DTYx+ddzkQzmjxZQb O93tn+ra4h42NHh4ff8ouyahRblowegcDz+VneBFPq0vxpaJMbWsPgLfe1cUN3a1 Z12IdzCOHWEaxFoEy7kPoEAIlDqyomFfctkubajwFQABM4xgiwxB2YsjAcEhDQD1 hx+MC3OLfsORu1igdYZmG0msj7BMDpdv4jTDYD8yMOqTby2AYrxaFlfwWLEi5+mz KlqDmasVCGQxlBGoRkX16rpcFHExafhY1PjMXduY1x+GWDA2GfAxdc+2giyj5GoB 0U9im+TBDVFaorVZcTWWSIQJhYDM+zEdb274D3R6q0x9tixdUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSh3+RfV6F2JOdoBjGo+PgITnytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDc0ZWRjZTMtYjEyNC0z NDcyLThhYTQtNzQ4N2ExNTg3YjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRL4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7Qubfyw38ZJSTBLB2pcTCA62+1/oRX6qrFfqyeHh22ikMg/rPahdZr zGj6xUvBe1NlfgL9CCFAfhTe+1IjZRYq2M6VWI1TzUwKRBNyeaVBR/xKnrmcn9gt ziYsoU3duQdnFEpYV+lv1vYkcu1t4Fli07JCsWT4QwgjcZoY0zJEHASVn0igBzsm xAUwS9Z8V7u7avMeufH+AmmnD6RzmhgEku3R0ATUDCX9W5UN2t871U8Qun4LE+Zb muTkL8Zmn0wZYt+cCpVR5r3AwDOJVWtNGuH+8ns2GP/Y6irRKKfwaNXDLiwPLrWG +72ty2fpiIygA7WABwd4wnN+enEKNAg= -----END CERTIFICATE-----Generated at Thu Mar 26 16:57:02 2026 by rpki-client