$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ded530dc-de02-316c-a3a3-70c7d346fe7f.roa File: ded530dc-de02-316c-a3a3-70c7d346fe7f.roa (raw, json) Hash identifier: kEGncRPfVwuRdm4vJOjPvoTPKkdSbd1rGzFLeO0rkcE= Subject key identifier: 4E:CC:44:51:90:67:72:34:39:70:61:8E:55:BE:57:57:63:21:17:50 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF6F6AF04E411ED24AA540 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ded530dc-de02-316c-a3a3-70c7d346fe7f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.19.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:6f:6a:f0:4e:41:1e:d2:4a:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=0316df68-25a0-4965-b860-dacd2463a030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:22:3e:90:8f:fa:a8:a8:e9:46:74:19:b2:fe: 88:f7:7b:11:46:a1:d0:1e:fc:c3:d7:9f:03:c7:98: a7:d2:26:d5:58:9d:d8:e7:79:95:59:bf:42:a5:17: 7b:1e:98:5f:ab:e6:d0:08:02:95:ae:3a:f5:68:0b: 10:83:86:9b:2a:d6:2a:d1:25:d1:21:a7:e5:e4:01: 1d:4e:9d:5e:75:e9:d7:7e:78:37:f8:d1:86:a2:a4: 86:c5:a8:af:19:1b:18:6d:a0:83:70:01:fb:41:44: b4:8b:9a:43:49:70:da:c0:8b:09:18:ad:df:15:d3: 33:f6:b2:fd:6e:1e:59:1b:83:09:7f:32:0c:4d:03: 95:8d:f9:82:3b:2b:a2:2c:79:53:8c:6b:41:39:3e: 0d:fb:c7:f4:46:8a:c0:41:bb:b1:4e:f4:be:8a:6e: d0:12:18:d1:18:d4:15:2c:3b:1d:32:a0:57:66:f6: cd:de:e4:40:80:0f:9c:cd:b3:89:0e:db:c9:01:2e: 94:4e:5b:c1:bf:6d:ae:8a:28:23:8a:07:1b:1d:e6: c7:64:f1:b7:65:5e:db:b9:f4:25:3b:c4:5c:3a:87: 7a:b6:a5:64:28:1f:b3:bd:c6:ac:dd:e7:e7:f7:4b: ed:eb:09:3b:9c:36:55:1a:da:7e:cd:61:67:5a:e2: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CC:44:51:90:67:72:34:39:70:61:8E:55:BE:57:57:63:21:17:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ded530dc-de02-316c-a3a3-70c7d346fe7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:95:80:a6:39:64:fc:fd:51:cb:1f:d5:1b:4d:f2:c1:d9:64: d8:9e:70:3c:17:14:f8:5c:84:bb:92:3e:d7:44:9c:de:a3:1b: b9:86:1b:78:7e:ca:68:ff:30:8f:5d:84:4b:3e:9e:e2:f1:24: 7a:99:55:ba:c6:a7:09:76:18:b3:70:5c:2a:c5:03:45:40:c4: 89:0a:b9:ae:ea:72:1a:1a:67:2d:d2:7d:cb:98:81:5e:73:4f: 77:c8:57:94:fe:15:83:b1:d7:57:80:72:1f:2d:82:2a:94:1e: 0d:a6:27:fe:ef:52:26:22:c7:ca:4a:cd:30:cd:02:c3:8a:f4: 87:64:ae:49:44:46:60:cd:5d:a6:62:1b:7d:4d:e9:bc:bd:69: 32:ab:c5:4b:d1:43:21:de:1d:70:96:26:5a:a6:6c:45:47:83: 48:8e:ce:a7:e7:32:19:79:1a:9e:d0:62:d4:f4:21:1a:65:83: c7:12:5b:4f:93:5b:8c:8d:19:5d:f6:8b:2c:00:66:12:df:ea: ab:63:d5:0c:c5:26:31:94:fc:34:dc:4f:b0:5d:0c:23:ff:b6: 8c:99:78:c5:bb:bf:27:1d:f6:de:f6:db:84:9f:a4:2a:a4:37: 88:53:a4:b6:fa:46:e0:10:99:ed:a5:4b:04:1e:c6:23:b7:11: 80:9e:1d:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k329q8E5BHtJKpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDMxNmRmNjgtMjVhMC00OTY1LWI4NjAtZGFjZDI0NjNhMDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCI+kI/6qKjpRnQZsv6I93sRRqHQHvzD158D x5in0ibVWJ3Y53mVWb9CpRd7Hphfq+bQCAKVrjr1aAsQg4abKtYq0SXRIafl5AEd Tp1edenXfng3+NGGoqSGxaivGRsYbaCDcAH7QUS0i5pDSXDawIsJGK3fFdMz9rL9 bh5ZG4MJfzIMTQOVjfmCOyuiLHlTjGtBOT4N+8f0RorAQbuxTvS+im7QEhjRGNQV LDsdMqBXZvbN3uRAgA+czbOJDtvJAS6UTlvBv22uiigjigcbHebHZPG3ZV7bufQl O8RcOod6tqVkKB+zvcas3efn90vt6wk7nDZVGtp+zWFnWuKwTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7MRFGQZ3I0OXBhjlW+V1djIRdQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGVkNTMwZGMtZGUwMi0z MTZjLWEzYTMtNzBjN2QzNDZmZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRPmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSVgKY5ZPz9Ucsf1RtN8sHZZNiecDwXFPhchLuSPtdEnN6jG7mGG3h+ ymj/MI9dhEs+nuLxJHqZVbrGpwl2GLNwXCrFA0VAxIkKua7qchoaZy3SfcuYgV5z T3fIV5T+FYOx11eAch8tgiqUHg2mJ/7vUiYix8pKzTDNAsOK9IdkrklERmDNXaZi G31N6by9aTKrxUvRQyHeHXCWJlqmbEVHg0iOzqfnMhl5Gp7QYtT0IRplg8cSW0+T W4yNGV32iywAZhLf6qtj1QzFJjGU/DTcT7BdDCP/toyZeMW7vycd9t7224SfpCqk N4hTpLb6RuAQme2lSwQexiO3EYCeHTc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:04:31 2026 by rpki-client