$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/edcdc6c5-9ac8-32b4-8a1a-0f1c8c6d5e9b.roa File: edcdc6c5-9ac8-32b4-8a1a-0f1c8c6d5e9b.roa (raw, json) Hash identifier: 7HmNMDUcVSKrdoKonDdkJzNmmMgwIQ3+MEcCgk1SFqQ= Subject key identifier: 5A:31:8B:3E:E3:5F:A7:82:EA:F1:75:27:B3:2C:F0:22:0B:66:66:83 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF9DA35BBBC06AE4202E08 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/edcdc6c5-9ac8-32b4-8a1a-0f1c8c6d5e9b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.23.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:9d:a3:5b:bb:c0:6a:e4:20:2e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4af206c8-8366-48e6-81c0-fcda31ba7331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a6:28:a9:ac:19:89:8e:d0:f2:53:f5:a3:55: 1e:40:23:6b:e7:ec:11:fe:7c:31:12:1f:46:c0:6d: 34:af:23:12:e5:ee:03:da:65:3d:e0:79:6b:80:18: 9e:1c:7e:62:f6:fc:c6:45:16:57:8b:40:f8:27:c3: 1f:53:11:1c:4c:88:52:b1:8d:8a:be:fc:ab:7b:4a: 92:94:46:d1:b9:4f:c9:89:cd:32:5c:55:35:8e:cd: c9:b3:b4:d5:6c:d2:3e:82:31:0d:e2:17:e1:54:cc: b8:48:85:97:7a:3e:b4:c0:57:d0:4e:e7:9d:80:26: 4c:9c:e4:b0:38:7f:26:58:b0:92:e3:29:5a:fd:58: d0:0d:e9:1a:56:e1:be:ee:7b:3a:81:8e:77:5d:e2: 15:df:ce:96:02:a5:bf:c3:f8:45:f1:36:c0:97:06: c6:16:ee:e6:3d:2e:10:ef:ce:be:54:d5:fb:89:b1: b6:e5:53:c1:05:bf:17:fb:49:e2:2f:45:cd:f3:fc: 52:a4:c5:a2:47:d2:9e:3e:41:0c:9a:96:e6:4f:22: 9a:58:13:25:52:37:9f:70:d2:25:97:02:06:ac:50: 91:d0:62:00:23:80:b8:3b:22:e0:f2:a6:61:1a:7f: 3b:c1:cf:37:15:2f:64:4b:43:51:2a:9d:0d:5e:5d: 74:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:31:8B:3E:E3:5F:A7:82:EA:F1:75:27:B3:2C:F0:22:0B:66:66:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/edcdc6c5-9ac8-32b4-8a1a-0f1c8c6d5e9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b4:1e:5e:34:1f:ad:8c:9a:42:a3:de:18:08:ac:33:55:98: ab:f7:2a:3c:4a:40:43:cd:77:d6:6c:15:f5:0d:d1:18:92:71: e2:77:fe:06:87:c3:8e:73:3b:58:ea:a1:74:a1:4f:5e:c8:79: 20:41:0f:dd:83:b4:bf:b7:2f:53:42:4e:4a:75:3d:52:0e:75: 61:a3:bc:0b:0f:42:1e:96:a9:61:92:0d:a8:3f:25:57:f0:08: cf:fe:52:b2:27:b0:a0:67:de:db:95:93:f2:21:7f:84:73:aa: 95:79:ba:52:a6:9d:b5:e9:9e:21:e0:f0:3e:05:59:cb:f0:2b: 79:62:d3:22:bd:eb:4a:be:66:d2:5e:c3:c5:26:7b:3e:75:b4: 0f:50:49:e4:86:a9:7f:d8:c8:f0:5b:a0:78:5d:85:cd:dc:fa: d8:18:8c:14:4b:4d:a2:2e:e0:f0:e2:60:5e:5f:19:75:4f:97: 23:c1:35:4a:b0:24:e5:44:2f:6b:fa:b6:b0:25:30:a6:c3:8c: dd:cb:6c:b0:59:1d:4c:df:52:e2:a3:38:b2:db:58:2e:38:e4: ad:1d:c8:23:b0:7f:d1:3d:31:4f:45:d4:0a:bd:43:db:63:4f: 79:9e:65:46:6a:55:ab:97:3f:05:b5:a8:93:97:64:05:78:e9: 87:3a:b6:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k352jW7vAauQgLggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGFmMjA2YzgtODM2Ni00OGU2LTgxYzAtZmNkYTMxYmE3MzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6YoqawZiY7Q8lP1o1UeQCNr5+wR/nwxEh9G wG00ryMS5e4D2mU94HlrgBieHH5i9vzGRRZXi0D4J8MfUxEcTIhSsY2Kvvyre0qS lEbRuU/Jic0yXFU1js3Js7TVbNI+gjEN4hfhVMy4SIWXej60wFfQTuedgCZMnOSw OH8mWLCS4yla/VjQDekaVuG+7ns6gY53XeIV386WAqW/w/hF8TbAlwbGFu7mPS4Q 786+VNX7ibG25VPBBb8X+0niL0XN8/xSpMWiR9KePkEMmpbmTyKaWBMlUjefcNIl lwIGrFCR0GIAI4C4OyLg8qZhGn87wc83FS9kS0NRKp0NXl10iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoxiz7jX6eC6vF1J7Ms8CILZmaDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWRjZGM2YzUtOWFjOC0z MmI0LThhMWEtMGYxYzhjNmQ1ZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES0Hl40H62MmkKj3hgIrDNVmKv3KjxKQEPNd9ZsFfUN0RiSceJ3/gaH w45zO1jqoXShT17IeSBBD92DtL+3L1NCTkp1PVIOdWGjvAsPQh6WqWGSDag/JVfw CM/+UrInsKBn3tuVk/Ihf4RzqpV5ulKmnbXpniHg8D4FWcvwK3li0yK960q+ZtJe w8Umez51tA9QSeSGqX/YyPBboHhdhc3c+tgYjBRLTaIu4PDiYF5fGXVPlyPBNUqw JOVEL2v6trAlMKbDjN3LbLBZHUzfUuKjOLLbWC445K0dyCOwf9E9MU9F1Aq9Q9tj T3meZUZqVauXPwW1qJOXZAV46Yc6tjg= -----END CERTIFICATE-----Generated at Thu Mar 26 19:39:52 2026 by rpki-client