$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f7a4915b-bfbf-35d2-a696-68cb3dfee01f.roa File: f7a4915b-bfbf-35d2-a696-68cb3dfee01f.roa (raw, json) Hash identifier: a8aR5pKXUxqKwAhWHz7BYVtgN5mV6gZGx/fCTd7c4Z4= Subject key identifier: 00:93:F5:E2:58:8C:B6:59:AB:D9:92:88:0A:5E:CE:71:EF:99:D1:B3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E120384986D3C8560A6880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f7a4915b-bfbf-35d2-a696-68cb3dfee01f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.23.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:20:38:49:86:d3:c8:56:0a:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=dd333a03-994e-4477-95f5-ef04a16e6289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:8f:2a:82:a6:87:91:0e:a7:46:d8:8e:0f: b5:c1:d5:c1:cf:ee:6b:e7:98:20:8b:10:97:4e:6b: a6:61:1b:b4:57:c0:73:b9:25:0e:78:a4:9b:92:21: f6:b1:38:2a:6b:1c:16:84:48:50:1b:92:3f:dc:ba: 25:14:52:2e:14:63:b5:c0:e6:da:a8:e6:0d:59:50: 02:ed:ab:04:fe:18:72:eb:ea:20:2c:bc:38:d7:ac: df:b7:14:85:45:44:38:6b:13:10:81:79:e2:8d:53: 0e:6f:11:af:b9:98:43:c2:27:04:7a:41:84:7b:83: ad:0c:83:c2:0d:96:21:61:78:90:1d:6f:1d:f2:dc: 25:68:7b:73:cf:2b:65:e2:82:08:84:d7:14:94:ea: 55:aa:d8:b6:1d:6c:45:4b:a0:92:5a:a2:9e:a3:8f: 9c:c0:8c:90:e1:65:e4:85:1b:b1:e9:ec:75:65:56: 23:04:c7:40:d0:3c:71:1f:4c:bb:46:54:f6:af:07: d6:d6:f6:d6:26:1c:d5:90:a5:99:db:86:88:27:28: 45:8b:4d:26:ad:c1:67:8d:a9:e1:85:11:99:40:20: 50:74:0b:26:ab:30:3a:06:6f:10:34:24:c3:5f:ee: d4:4c:27:60:5a:1d:b4:78:bc:a6:e3:83:12:0e:b9: 0f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:93:F5:E2:58:8C:B6:59:AB:D9:92:88:0A:5E:CE:71:EF:99:D1:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f7a4915b-bfbf-35d2-a696-68cb3dfee01f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:26:f1:7b:d1:d7:11:1b:d2:ea:dc:98:9a:3a:b1:b7:c5:5f: ce:a3:3f:39:f5:6e:70:79:ab:47:ef:83:c9:f5:5b:69:74:53: 6c:be:18:4c:9f:d6:1a:c4:84:f9:c0:68:25:9c:d4:5f:ff:b7: c8:2a:6c:dc:14:f2:a9:be:87:6d:7c:89:ca:3b:cd:0c:22:9a: 18:ae:29:fb:e5:e5:9e:35:0c:93:54:a8:79:38:22:51:d2:06: 49:d3:6c:08:a4:5b:da:3c:0b:2f:64:46:c3:26:27:c1:c8:50: 03:db:0e:b1:29:dd:66:18:22:6e:71:56:20:f3:8f:60:be:24: 62:54:9c:8d:52:20:9f:19:53:e4:55:dc:aa:03:73:a5:31:93: a2:92:5d:1d:ba:a7:14:5a:57:93:4a:68:4a:44:76:c7:a8:4b: 69:4c:12:05:2d:9b:23:42:b4:56:f6:a0:09:8a:7e:6a:1d:b6: ff:f6:25:71:f4:92:11:8e:bd:6b:93:55:4b:33:83:e4:c5:b7: 39:94:1a:6c:08:89:91:05:7c:d9:2c:78:b4:58:08:6a:c5:7b: b5:ec:58:b9:1b:7b:aa:fd:fd:3d:66:06:c0:36:1b:d3:2e:bc: 43:c5:10:de:88:3b:f3:77:da:5d:2f:bb:98:82:9e:85:7c:dc: 54:8a:76:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4SA4SYbTyFYKaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGQzMzNhMDMtOTk0ZS00NDc3LTk1ZjUtZWYwNGExNmU2Mjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1aPKoKmh5EOp0bYjg+1wdXBz+5r55ggixCX TmumYRu0V8BzuSUOeKSbkiH2sTgqaxwWhEhQG5I/3LolFFIuFGO1wObaqOYNWVAC 7asE/hhy6+ogLLw416zftxSFRUQ4axMQgXnijVMObxGvuZhDwicEekGEe4OtDIPC DZYhYXiQHW8d8twlaHtzzytl4oIIhNcUlOpVqti2HWxFS6CSWqKeo4+cwIyQ4WXk hRux6ex1ZVYjBMdA0DxxH0y7RlT2rwfW1vbWJhzVkKWZ24aIJyhFi00mrcFnjanh hRGZQCBQdAsmqzA6Bm8QNCTDX+7UTCdgWh20eLym44MSDrkPNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACT9eJYjLZZq9mSiApeznHvmdGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjdhNDkxNWItYmZiZi0z NWQyLWE2OTYtNjhjYjNkZmVlMDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRfDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQm8XvR1xEb0urcmJo6sbfFX86jPzn1bnB5q0fvg8n1W2l0U2y+GEyf 1hrEhPnAaCWc1F//t8gqbNwU8qm+h218ico7zQwimhiuKfvl5Z41DJNUqHk4IlHS BknTbAikW9o8Cy9kRsMmJ8HIUAPbDrEp3WYYIm5xViDzj2C+JGJUnI1SIJ8ZU+RV 3KoDc6Uxk6KSXR26pxRaV5NKaEpEdseoS2lMEgUtmyNCtFb2oAmKfmodtv/2JXH0 khGOvWuTVUszg+TFtzmUGmwIiZEFfNkseLRYCGrFe7XsWLkbe6r9/T1mBsA2G9Mu vEPFEN6IO/N32l0vu5iCnoV83FSKdoQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:02:52 2026 by rpki-client