$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/21fbf4b3-2966-30a2-9753-7a06fb1fcac7.roa File: 21fbf4b3-2966-30a2-9753-7a06fb1fcac7.roa (raw, json) Hash identifier: be3s8N2wJ9luR6qh0B7+2YHkGzJcSmp4auIr/SqRjK8= Subject key identifier: 22:38:B6:2C:3A:E3:63:47:66:39:59:B9:01:81:DE:02:CB:DF:5F:05 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584D45D22A18452A6EEA986BB680 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/21fbf4b3-2966-30a2-9753-7a06fb1fcac7.roa Signing time: Tue 24 Mar 2026 08:15:48 +0000 ROA not before: Tue 24 Mar 2026 08:15:48 +0000 ROA not after: Mon 22 Jun 2026 08:15:48 +0000 asID: 17497 IP address blocks: 173.232.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:45:d2:2a:18:45:2a:6e:ea:98:6b:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Mar 24 08:15:48 2026 GMT Not After : Jun 22 08:15:48 2026 GMT Subject: CN=7e81d0d3-fef0-420f-85aa-c9f9b8522ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:09:d1:90:0d:9d:a5:64:92:e2:6d:55:87: 18:6a:e1:96:ef:af:5a:16:44:85:0a:88:2f:36:a1: 3f:8c:37:02:21:f1:91:f9:c5:53:fe:9d:4e:a3:f7: 03:0e:00:4a:91:e8:06:05:1c:9e:81:0d:0b:76:33: cf:e8:88:fe:c1:2d:e6:81:8a:ac:8a:f8:da:b0:20: 46:6a:f4:88:93:12:0c:ef:bc:8b:3a:24:88:df:30: fd:75:3c:ed:b1:1f:bc:d8:c2:b0:b2:9b:d0:f5:00: f5:e2:f7:72:e4:94:4c:d3:51:bd:b8:f3:9d:09:6e: d7:e5:66:ed:2d:87:2a:5e:5b:16:27:88:0c:b0:bf: 33:c6:5f:b8:64:4b:e9:7d:ad:f0:1b:c9:c1:53:6d: 2a:e1:26:79:5f:6c:0f:40:34:ec:15:39:0b:2f:0f: 8b:bb:be:de:32:ed:aa:2e:40:64:75:db:d1:30:c7: ad:fc:87:8e:89:d6:23:5a:f7:52:4d:33:f0:f5:3c: 17:95:bb:d2:d5:8b:7b:a3:7a:33:d4:d6:a7:23:d7: e4:23:0a:55:ee:d0:1f:b4:7b:1d:32:10:ee:f2:5d: e9:80:a3:9c:97:a7:8e:8c:62:60:09:f1:54:7a:03: d4:a4:ee:e5:7f:1a:d2:18:15:cf:1e:1a:b1:79:1c: 4c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:38:B6:2C:3A:E3:63:47:66:39:59:B9:01:81:DE:02:CB:DF:5F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/21fbf4b3-2966-30a2-9753-7a06fb1fcac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:97:55:48:17:ab:4f:6e:75:20:3a:ef:c8:e3:0c:c9:8b:6f: 68:5a:39:a5:fd:4e:22:d0:42:b8:ab:a2:22:02:ff:64:08:58: 93:9a:dd:d5:12:bb:94:94:02:93:4c:b4:c3:ed:bc:e4:e4:fd: fd:64:2c:ed:7d:cb:f1:1c:a2:1c:7c:ff:b6:2a:b9:3a:f4:f2: 6f:55:9b:98:3d:5b:8a:bc:cf:5f:96:72:63:ad:16:b8:5c:58: 8c:17:4c:97:6e:3e:2f:03:a7:39:67:1c:ce:82:e0:a0:28:bf: 58:2e:fe:21:84:ef:51:9c:52:4a:b8:8e:64:0c:a3:5e:62:75: e6:0e:5d:a0:fe:97:4c:85:94:fb:a7:e4:3f:1e:c1:92:1a:d6: 94:a1:15:e7:6b:62:c8:8d:e6:16:a0:7a:40:56:19:22:35:a3: 64:ab:00:9b:58:67:ad:35:6b:04:37:af:a5:90:73:7c:15:af: 90:9f:89:dd:30:71:6f:8a:5f:26:e9:d1:5b:7f:b2:5c:f5:c6: 17:0a:5d:b1:dd:15:00:8c:87:0d:44:6c:2d:5f:0f:ec:33:68: 8c:54:cf:f3:9b:46:68:20:a8:3c:fd:09:17:ac:09:27:06:08: fa:94:d0:ba:41:b1:51:4b:07:e1:8d:92:d0:bf:a9:a5:9c:4b: 90:bc:b6:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1F0ioYRSpu6phrtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDMyNDA4MTU0OFoXDTI2MDYyMjA4MTU0OFowLzEtMCsGA1UEAxMk N2U4MWQwZDMtZmVmMC00MjBmLTg1YWEtYzlmOWI4NTIyYWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKgJ0ZANnaVkkuJtVYcYauGW769aFkSFCogv NqE/jDcCIfGR+cVT/p1Oo/cDDgBKkegGBRyegQ0LdjPP6Ij+wS3mgYqsivjasCBG avSIkxIM77yLOiSI3zD9dTztsR+82MKwspvQ9QD14vdy5JRM01G9uPOdCW7X5Wbt LYcqXlsWJ4gMsL8zxl+4ZEvpfa3wG8nBU20q4SZ5X2wPQDTsFTkLLw+Lu77eMu2q LkBkddvRMMet/IeOidYjWvdSTTPw9TwXlbvS1Yt7o3oz1NanI9fkIwpV7tAftHsd MhDu8l3pgKOcl6eOjGJgCfFUegPUpO7lfxrSGBXPHhqxeRxM3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCI4tiw642NHZjlZuQGB3gLL318FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMjFmYmY0YjMtMjk2Ni0z MGEyLTk3NTMtN2EwNmZiMWZjYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArejJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGXVUgXq09udSA678jjDMmLb2haOaX9TiLQQriroiIC/2QIWJOa3dUS u5SUApNMtMPtvOTk/f1kLO19y/Ecohx8/7YquTr08m9Vm5g9W4q8z1+WcmOtFrhc WIwXTJduPi8DpzlnHM6C4KAov1gu/iGE71GcUkq4jmQMo15ideYOXaD+l0yFlPun 5D8ewZIa1pShFedrYsiN5hagekBWGSI1o2SrAJtYZ601awQ3r6WQc3wVr5Cfid0w cW+KXybp0Vt/slz1xhcKXbHdFQCMhw1EbC1fD+wzaIxUz/ObRmggqDz9CResCScG CPqU0LpBsVFLB+GNktC/qaWcS5C8tgM= -----END CERTIFICATE-----Generated at Thu Mar 26 06:24:47 2026 by rpki-client