$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e21c34b0-a72b-3c22-a864-16887548d10e.roa File: e21c34b0-a72b-3c22-a864-16887548d10e.roa (raw, json) Hash identifier: bd4M2//jNdEpkBJaBWvkKGmnmfmpaBG9bDTzyQshkdE= Subject key identifier: C9:92:B5:6C:68:E6:64:F0:A0:EB:B1:95:DF:31:E6:30:59:09:14:37 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D43EE51DC2E0C72E5B4B83510 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e21c34b0-a72b-3c22-a864-16887548d10e.roa Signing time: Mon 23 Mar 2026 16:00:55 +0000 ROA not before: Mon 23 Mar 2026 16:00:55 +0000 ROA not after: Sun 21 Jun 2026 16:00:55 +0000 asID: 19905 IP address blocks: 173.23.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:43:ee:51:dc:2e:0c:72:e5:b4:b8:35:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 23 16:00:55 2026 GMT Not After : Jun 21 16:00:55 2026 GMT Subject: CN=fc1f12bd-1e24-4b49-98c0-202874161e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b1:98:ab:96:11:38:02:ba:af:fc:fc:09:79: 75:0b:01:21:0e:90:c9:b0:2f:5f:42:56:5c:94:52: 90:87:df:bf:a9:03:39:0c:4b:50:87:07:fc:55:6d: de:26:10:6a:3d:67:c8:23:fa:03:78:85:9a:2c:f0: 15:44:a0:e0:1f:65:96:03:4f:7f:a2:55:04:b1:5d: 6a:e6:0f:2a:24:49:ea:19:49:2c:b2:1b:53:50:74: b1:3e:8a:23:17:7c:74:b3:fc:76:3a:02:b8:2e:37: c1:82:80:fe:30:69:c6:ac:e1:43:cb:12:3d:4e:4d: f4:87:60:f8:e4:8b:da:f3:ad:40:b2:fd:96:d5:6c: ac:f3:36:d7:fb:e5:79:af:84:06:3d:c1:62:6a:7f: 64:37:79:20:38:a9:42:68:b8:76:e7:b0:39:47:b2: ac:1f:ab:cd:3f:fa:66:9d:fa:82:05:3d:99:7f:8e: 55:f9:13:6d:d0:c5:8a:0c:0e:10:c8:06:46:87:37: 3a:e6:84:41:6e:6b:57:ca:23:cc:a3:0d:78:2f:82: ca:86:3d:db:b3:c5:38:83:89:94:ef:5b:5b:0e:e7: 60:d6:e3:de:22:f2:13:dd:f7:6a:d0:97:f7:fc:5f: 3e:82:ed:21:57:6b:77:6d:15:d1:9e:4f:29:dc:62: 82:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:92:B5:6C:68:E6:64:F0:A0:EB:B1:95:DF:31:E6:30:59:09:14:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e21c34b0-a72b-3c22-a864-16887548d10e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7f:2f:b0:c7:52:9c:29:42:b4:1d:4a:94:ba:53:57:76:f7: a8:1d:bc:5e:bc:59:3c:07:a2:17:99:a9:df:a1:86:33:31:5a: ce:56:33:24:4a:d3:d9:e1:73:3b:74:92:57:8a:4c:ba:aa:a6: 9a:89:5a:c7:29:77:94:05:9d:52:0f:e9:fd:e9:4e:31:68:a4: a2:52:53:4a:43:3b:62:77:21:9c:6c:00:74:c3:57:cd:17:6f: f1:5d:da:03:eb:06:e0:05:13:b8:dc:31:66:60:1f:c3:ef:22: 43:38:c7:1a:9c:b2:25:00:67:ad:5d:9c:0a:b8:70:c6:7e:5c: 1b:28:62:d2:ce:e8:41:1c:59:4e:8c:74:a7:b6:48:49:2e:25: a9:f2:ed:f1:e0:de:28:fd:81:43:59:7d:df:66:0b:a6:2c:6f: 96:45:c2:af:a3:e0:f7:dd:af:51:71:ee:ea:8e:25:ca:b2:31: 7e:ba:8d:7a:e5:50:c5:c4:14:91:ba:57:fa:f7:fa:4e:bf:f5: a1:b8:b5:23:43:60:db:69:dc:03:76:01:0e:9f:f1:08:9d:b7: 05:b5:4e:e0:06:2e:6a:78:59:cb:65:66:c7:40:4b:57:69:f8: 15:ae:da:06:10:ef:cf:78:16:40:52:ea:2b:c1:75:ed:d0:56: aa:99:5c:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1D7lHcLgxy5bS4NRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyMzE2MDA1NVoXDTI2MDYyMTE2MDA1NVowLzEtMCsGA1UEAxMk ZmMxZjEyYmQtMWUyNC00YjQ5LTk4YzAtMjAyODc0MTYxZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrGYq5YROAK6r/z8CXl1CwEhDpDJsC9fQlZc lFKQh9+/qQM5DEtQhwf8VW3eJhBqPWfII/oDeIWaLPAVRKDgH2WWA09/olUEsV1q 5g8qJEnqGUksshtTUHSxPoojF3x0s/x2OgK4LjfBgoD+MGnGrOFDyxI9Tk30h2D4 5Iva861Asv2W1Wys8zbX++V5r4QGPcFian9kN3kgOKlCaLh257A5R7KsH6vNP/pm nfqCBT2Zf45V+RNt0MWKDA4QyAZGhzc65oRBbmtXyiPMow14L4LKhj3bs8U4g4mU 71tbDudg1uPeIvIT3fdq0Jf3/F8+gu0hV2t3bRXRnk8p3GKC0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmStWxo5mTwoOuxld8x5jBZCRQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTIxYzM0YjAtYTcyYi0z YzIyLWE4NjQtMTY4ODc1NDhkMTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx/L7DHUpwpQrQdSpS6U1d296gdvF68WTwHoheZqd+hhjMxWs5WMyRK 09nhczt0kleKTLqqppqJWscpd5QFnVIP6f3pTjFopKJSU0pDO2J3IZxsAHTDV80X b/Fd2gPrBuAFE7jcMWZgH8PvIkM4xxqcsiUAZ61dnAq4cMZ+XBsoYtLO6EEcWU6M dKe2SEkuJany7fHg3ij9gUNZfd9mC6Ysb5ZFwq+j4Pfdr1Fx7uqOJcqyMX66jXrl UMXEFJG6V/r3+k6/9aG4tSNDYNtp3AN2AQ6f8QidtwW1TuAGLmp4WctlZsdAS1dp +BWu2gYQ7894FkBS6ivBde3QVqqZXJw= -----END CERTIFICATE-----Generated at Thu Mar 26 06:01:56 2026 by rpki-client