$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09ba53b7-c262-3402-a2da-c0b0f77d1906.roa File: 09ba53b7-c262-3402-a2da-c0b0f77d1906.roa (raw, json) Hash identifier: 5H61bjhQpP42vGwduyg/1Lx/PR4dELOz/Mhs6JdcmOg= Subject key identifier: 78:A4:BA:4E:56:FC:B9:DD:BB:FA:F9:EF:D3:AB:2C:51:6D:C6:A0:5D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A40B74A76737F4441DDA8 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09ba53b7-c262-3402-a2da-c0b0f77d1906.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.23.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:40:b7:4a:76:73:7f:44:41:dd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=01776d06-a0f1-4988-b2e5-053f747798bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:54:02:3a:3b:fc:08:03:a3:6c:b4:d7:ea:25: e5:47:77:e6:0a:09:94:de:70:40:be:76:87:78:45: ed:91:95:7c:04:15:18:df:cf:94:89:b6:2d:35:ce: 8b:8a:3e:e3:55:33:30:ea:28:d7:d4:57:ba:79:f6: eb:1c:5f:43:2e:11:d0:48:69:f6:6a:01:9f:cb:01: b1:9f:22:ab:18:18:87:07:74:1c:a1:cb:7d:08:0a: ed:2f:39:b6:e3:12:b6:8f:29:05:24:bf:c4:ba:84: b8:b4:32:57:e5:c8:b0:fe:80:b6:78:cf:4d:63:ed: f7:6d:8b:d5:a9:c3:6c:20:5a:6e:ad:e5:74:3d:75: 46:cf:b7:ad:fb:16:fc:f4:94:db:49:62:f5:bf:82: 4f:5a:bd:cd:7b:db:58:61:d7:70:a0:a2:d2:d5:45: 1a:8d:4c:72:ce:4b:ae:7d:ba:d0:ad:93:3b:77:dd: d8:b8:8d:ff:36:c2:81:cc:f1:8b:68:3c:03:4b:25: a8:45:c9:6f:33:83:ac:41:62:0e:96:2c:61:ff:dd: c2:f1:37:fd:48:a5:07:b1:f1:1d:d7:41:d1:15:53: 85:f4:0f:72:bd:84:9b:a6:a6:25:a1:25:e8:48:94: b8:8b:12:8b:5a:e1:8b:6b:bd:8e:5e:56:bb:ff:ef: b6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A4:BA:4E:56:FC:B9:DD:BB:FA:F9:EF:D3:AB:2C:51:6D:C6:A0:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09ba53b7-c262-3402-a2da-c0b0f77d1906.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f6:be:16:59:38:c8:01:64:1f:ce:ab:02:ee:88:dc:2f:a3: a4:56:45:7b:6a:21:c4:0c:c2:68:3a:69:3d:cd:b1:9e:1e:0c: 3d:ee:13:65:2e:28:2c:93:01:9f:4e:c8:0c:e6:37:8d:98:e2: 72:02:dc:96:c5:a0:7f:b7:17:4e:fa:08:20:b4:5d:c4:a7:1f: b5:56:24:8c:31:9c:e0:79:26:5f:33:d3:a7:db:a0:09:e0:f3: 03:8b:f0:b0:57:e4:4e:38:c5:68:62:e5:1a:ed:fb:3f:9b:22: 5b:49:1f:b9:52:99:10:20:f4:e6:b1:69:6f:a2:ce:c4:28:2b: 5d:11:63:65:12:f1:c7:e8:60:e3:4b:37:12:b7:f8:8d:19:77: 5f:3f:b9:9e:fe:8a:7d:18:37:11:ac:10:9e:94:72:69:76:5e: 6e:d0:8a:b0:54:41:0b:39:6f:ea:5e:72:b5:07:ad:70:36:cd: a1:66:9b:3b:c6:e3:ac:ce:c6:28:82:64:a2:ac:e5:29:27:da: 83:47:7d:5c:63:7c:78:f8:ec:14:c2:bf:77:b2:fd:c3:71:32: 9a:18:04:53:d5:2f:f1:52:09:1a:18:1f:b5:2d:cd:c4:66:ee: 05:ad:2c:26:b9:71:19:d8:96:dd:41:24:aa:db:d4:3f:03:d7: ab:6f:55:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekC3SnZzf0RB3agwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MDE3NzZkMDYtYTBmMS00OTg4LWIyZTUtMDUzZjc0Nzc5OGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFQCOjv8CAOjbLTX6iXlR3fmCgmU3nBAvnaH eEXtkZV8BBUY38+UibYtNc6Lij7jVTMw6ijX1Fe6efbrHF9DLhHQSGn2agGfywGx nyKrGBiHB3Qcoct9CArtLzm24xK2jykFJL/EuoS4tDJX5ciw/oC2eM9NY+33bYvV qcNsIFpureV0PXVGz7et+xb89JTbSWL1v4JPWr3Ne9tYYddwoKLS1UUajUxyzkuu fbrQrZM7d93YuI3/NsKBzPGLaDwDSyWoRclvM4OsQWIOlixh/93C8Tf9SKUHsfEd 10HRFVOF9A9yvYSbpqYloSXoSJS4ixKLWuGLa72OXla7/++2JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHikuk5W/Lndu/r579OrLFFtxqBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDliYTUzYjctYzI2Mi0z NDAyLWEyZGEtYzBiMGY3N2QxOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRd4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD2vhZZOMgBZB/OqwLuiNwvo6RWRXtqIcQMwmg6aT3NsZ4eDD3uE2Uu KCyTAZ9OyAzmN42Y4nIC3JbFoH+3F076CCC0XcSnH7VWJIwxnOB5Jl8z06fboAng 8wOL8LBX5E44xWhi5Rrt+z+bIltJH7lSmRAg9OaxaW+izsQoK10RY2US8cfoYONL NxK3+I0Zd18/uZ7+in0YNxGsEJ6Ucml2Xm7QirBUQQs5b+pecrUHrXA2zaFmmzvG 46zOxiiCZKKs5Skn2oNHfVxjfHj47BTCv3ey/cNxMpoYBFPVL/FSCRoYH7UtzcRm 7gWtLCa5cRnYlt1BJKrb1D8D16tvVWQ= -----END CERTIFICATE-----Generated at Thu Mar 12 03:46:43 2026 by rpki-client