$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec408205-9cae-3c7c-ae2d-7a60989957bd.roa File: ec408205-9cae-3c7c-ae2d-7a60989957bd.roa (raw, json) Hash identifier: hB4HjaUc6aXLoNjDaGRBX2hLeY/uacfZaIh2kEGOPtk= Subject key identifier: B2:B7:E2:A8:35:8A:66:69:A4:E8:DE:07:E8:A5:88:26:6C:FF:47:03 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D4957051D6237285280810E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec408205-9cae-3c7c-ae2d-7a60989957bd.roa Signing time: Wed 25 Mar 2026 14:30:55 +0000 ROA not before: Wed 25 Mar 2026 14:30:55 +0000 ROA not after: Tue 23 Jun 2026 14:30:55 +0000 asID: 19905 IP address blocks: 173.23.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:57:05:1d:62:37:28:52:80:81:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 25 14:30:55 2026 GMT Not After : Jun 23 14:30:55 2026 GMT Subject: CN=bcc63c75-44a9-4fa1-93fa-d3c2b5039a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:66:ec:95:2b:ac:89:0c:55:ab:d4:6d:e8:ae: da:b0:7e:3c:07:0f:77:be:5c:3f:7e:16:86:fa:3e: 2f:83:69:0c:a1:05:74:c4:e7:92:0b:ea:37:36:81: 19:87:4c:9d:4c:52:a9:67:bc:97:25:3f:f7:fd:94: 34:38:7f:9f:e5:cb:58:ae:79:44:28:30:21:8e:32: 2f:2c:c2:1b:43:17:da:88:2e:5d:b4:c1:d2:f7:07: 63:79:ab:cd:e4:60:41:7e:88:2f:43:cf:0b:49:ba: 47:17:d4:a7:69:0d:83:5b:cb:ca:50:fc:98:51:bb: d6:b2:64:a5:e5:e7:a8:65:b0:3f:aa:fb:0a:4d:24: 14:9a:6d:77:87:be:34:d2:24:7c:f2:d2:31:01:b2: 32:d2:a3:65:69:cf:64:bf:9d:b2:fd:03:37:bc:3b: e2:37:f4:67:65:ea:b2:38:82:bd:41:54:0d:54:51: db:24:44:8d:c7:11:87:8f:5e:6b:92:d8:9e:6d:90: 0b:b1:91:c3:31:39:b1:12:57:ac:d2:bc:53:04:d7: f7:9a:a8:d8:b7:89:8a:7d:3d:de:7f:08:6d:51:f9: 12:02:99:db:ec:ae:ff:50:07:e0:43:8c:86:11:4d: 77:66:cd:33:51:59:53:5c:c6:34:fd:6d:bc:a0:2f: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B7:E2:A8:35:8A:66:69:A4:E8:DE:07:E8:A5:88:26:6C:FF:47:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec408205-9cae-3c7c-ae2d-7a60989957bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:56:c3:cd:04:e3:16:b4:bf:94:c1:ca:c7:ba:ae:56:01:f2: 76:9c:73:e7:ef:ef:b6:94:85:f5:ce:55:a5:51:63:de:8b:51: b0:52:02:c8:94:45:41:aa:e8:30:d9:db:52:fb:bd:80:17:28: 69:31:1f:05:45:01:eb:00:34:dc:63:b7:aa:9e:e8:23:35:54: 05:c8:73:f4:dd:d8:91:90:10:05:53:9a:50:f1:25:1d:fe:d1: 1b:c0:80:7f:62:06:82:f6:39:07:01:de:10:24:a1:16:1c:a4: 90:43:d8:d3:07:19:2c:9c:e2:75:f7:8c:9c:19:50:7f:35:dd: 4d:22:dc:95:dc:59:b5:94:a3:55:69:66:ff:d8:33:cf:a3:b3: 4d:e3:08:23:bd:51:cc:6c:14:60:da:ff:10:83:03:0f:71:7c: 8d:19:c2:68:94:5a:74:b8:0f:cd:63:9a:af:16:cf:6d:46:9a: 03:cd:9e:19:3b:d8:1c:b2:b8:9d:f5:c1:23:24:e2:a0:64:e0: 96:a8:42:16:7f:98:ad:b1:b6:fb:16:e9:7b:b1:e8:8e:cd:a3: db:d8:5f:4b:f8:9d:60:ef:09:e9:95:22:31:ae:b0:b2:48:0f: f9:fb:65:82:b0:95:d8:00:74:e7:b5:39:35:4c:fa:6a:40:88: 34:c4:0b:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JVwUdYjcoUoCBDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyNTE0MzA1NVoXDTI2MDYyMzE0MzA1NVowLzEtMCsGA1UEAxMk YmNjNjNjNzUtNDRhOS00ZmExLTkzZmEtZDNjMmI1MDM5YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGbslSusiQxVq9Rt6K7asH48Bw93vlw/fhaG +j4vg2kMoQV0xOeSC+o3NoEZh0ydTFKpZ7yXJT/3/ZQ0OH+f5ctYrnlEKDAhjjIv LMIbQxfaiC5dtMHS9wdjeavN5GBBfogvQ88LSbpHF9SnaQ2DW8vKUPyYUbvWsmSl 5eeoZbA/qvsKTSQUmm13h7400iR88tIxAbIy0qNlac9kv52y/QM3vDviN/RnZeqy OIK9QVQNVFHbJESNxxGHj15rktiebZALsZHDMTmxEles0rxTBNf3mqjYt4mKfT3e fwhtUfkSApnb7K7/UAfgQ4yGEU13Zs0zUVlTXMY0/W28oC9fEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLK34qg1imZppOjeB+iliCZs/0cDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWM0MDgyMDUtOWNhZS0z YzdjLWFlMmQtN2E2MDk4OTk1N2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANWw80E4xa0v5TByse6rlYB8nacc+fv77aUhfXOVaVRY96LUbBSAsiU RUGq6DDZ21L7vYAXKGkxHwVFAesANNxjt6qe6CM1VAXIc/Td2JGQEAVTmlDxJR3+ 0RvAgH9iBoL2OQcB3hAkoRYcpJBD2NMHGSyc4nX3jJwZUH813U0i3JXcWbWUo1Vp Zv/YM8+js03jCCO9UcxsFGDa/xCDAw9xfI0ZwmiUWnS4D81jmq8Wz21GmgPNnhk7 2ByyuJ31wSMk4qBk4JaoQhZ/mK2xtvsW6Xux6I7No9vYX0v4nWDvCemVIjGusLJI D/n7ZYKwldgAdOe1OTVM+mpAiDTEC2M= -----END CERTIFICATE-----Generated at Thu Mar 26 07:12:17 2026 by rpki-client