$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa File: 0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa (raw, json) Hash identifier: cXhzwgzHzQiFX28GSWc5y5Y6lt6i2xwUdk4MqHk5HSI= Subject key identifier: F6:BB:67:B8:35:EF:FF:A2:CE:21:57:7F:3A:25:AC:F1:02:AE:CA:D7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D9E500FFBB9C75D5DE85F90D0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 19905 IP address blocks: 173.23.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:0f:fb:b9:c7:5d:5d:e8:5f:90:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=68ab33f1-11e2-44ab-83ea-4a398aacd6e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b7:e7:16:d7:ec:e8:54:8b:86:b2:a4:63:35: 92:ae:d7:1d:1f:55:17:03:31:34:8b:f4:d0:75:91: 80:35:7e:35:d1:39:a4:96:87:b1:fd:58:fa:45:fd: da:b9:f7:6e:da:eb:78:02:31:24:d6:13:6f:99:c3: 33:7b:b6:04:62:21:44:d3:54:12:ba:32:23:9f:8e: b8:73:42:37:a2:28:35:92:77:6c:7b:12:20:50:1e: ca:ca:84:07:84:1b:e0:8f:78:97:57:45:13:20:2b: 3d:50:c0:7a:6a:9e:36:62:40:a8:83:2f:16:e3:23: ed:5e:4c:1f:0e:d8:85:f7:77:12:a8:09:3c:05:72: 39:06:4d:2e:01:b7:ab:74:85:96:78:40:fe:f3:5c: 9f:7c:ec:74:1a:d3:60:09:02:ed:28:32:11:e9:d9: de:ae:3c:09:94:a0:05:c9:08:af:80:dd:3e:f8:24: 83:d4:da:05:b5:4b:c9:9d:99:3a:54:68:c7:48:69: b3:f0:ed:a8:4d:af:6c:a5:cf:60:99:99:5b:57:f2: b0:50:3c:25:6b:dc:29:65:04:92:9b:90:ec:0d:dc: 21:a0:de:36:74:cb:27:37:86:a6:62:f8:6f:7c:7c: 25:c7:fd:7d:e5:4c:12:72:1a:74:2d:47:2a:03:d3: 30:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BB:67:B8:35:EF:FF:A2:CE:21:57:7F:3A:25:AC:F1:02:AE:CA:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:78:87:91:05:f8:04:74:b5:31:61:a1:2c:ce:4d:ed:b6:f6: eb:1a:2b:c7:ec:56:f6:7c:8e:c2:cd:67:60:68:57:ee:33:84: 5f:46:99:ec:0e:66:ac:20:27:57:f7:86:b5:5e:d9:f4:c0:3b: 1f:e1:dc:5e:20:9b:45:56:78:a7:f3:5a:2d:54:d4:32:7d:53: 60:b4:7f:3d:c8:81:04:2c:9e:2f:41:07:c3:b3:3c:08:3f:5c: f2:d6:44:76:1e:2f:80:c7:3b:b1:7e:d8:1a:dc:87:8e:dd:c8: dc:ba:0f:84:e0:6b:cf:dc:b0:76:04:74:85:8e:91:b4:21:b1: 0e:dd:b7:4d:2d:40:df:c3:52:fc:a5:c2:84:5e:86:e0:98:4e: dd:e8:21:dd:ab:37:04:f9:9f:db:c4:89:e2:e9:93:0f:61:40: 38:a8:0d:16:5d:84:4e:fd:0e:bd:88:ac:5d:33:55:07:3e:2d: 29:1d:a1:69:35:01:55:54:00:c4:63:a6:d0:e1:c7:d2:62:19: b5:c4:33:73:5f:3f:2e:a0:40:26:91:5e:d9:ce:bc:2f:01:2e: 74:e7:4b:8a:86:6b:ca:28:95:13:60:61:53:f8:d4:aa:48:70: d0:1d:48:d5:d6:85:82:cb:93:a8:79:74:e4:f7:27:b8:74:b2: bd:13:73:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUA/7ucddXehfkNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NjhhYjMzZjEtMTFlMi00NGFiLTgzZWEtNGEzOThhYWNkNmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrfnFtfs6FSLhrKkYzWSrtcdH1UXAzE0i/TQ dZGANX410Tmkloex/Vj6Rf3aufdu2ut4AjEk1hNvmcMze7YEYiFE01QSujIjn464 c0I3oig1kndsexIgUB7KyoQHhBvgj3iXV0UTICs9UMB6ap42YkCogy8W4yPtXkwf DtiF93cSqAk8BXI5Bk0uAberdIWWeED+81yffOx0GtNgCQLtKDIR6dnerjwJlKAF yQivgN0++CSD1NoFtUvJnZk6VGjHSGmz8O2oTa9spc9gmZlbV/KwUDwla9wpZQSS m5DsDdwhoN42dMsnN4amYvhvfHwlx/195UwSchp0LUcqA9MwYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa7Z7g17/+iziFXfzolrPECrsrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDg2MWI3YjgtNDdmMS0z ZmYyLWExNWQtZjU2NjkwNTJlNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrReoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB4h5EF+AR0tTFhoSzOTe229usaK8fsVvZ8jsLNZ2BoV+4zhF9GmewO ZqwgJ1f3hrVe2fTAOx/h3F4gm0VWeKfzWi1U1DJ9U2C0fz3IgQQsni9BB8OzPAg/ XPLWRHYeL4DHO7F+2Brch47dyNy6D4Tga8/csHYEdIWOkbQhsQ7dt00tQN/DUvyl woRehuCYTt3oId2rNwT5n9vEieLpkw9hQDioDRZdhE79Dr2IrF0zVQc+LSkdoWk1 AVVUAMRjptDhx9JiGbXEM3NfPy6gQCaRXtnOvC8BLnTnS4qGa8oolRNgYVP41KpI cNAdSNXWhYLLk6h5dOT3J7h0sr0Tc9I= -----END CERTIFICATE-----Generated at Fri May 8 20:29:35 2026 by rpki-client