$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f8bd921-1438-3359-a561-4ea35af7895d.roa File: 0f8bd921-1438-3359-a561-4ea35af7895d.roa (raw, json) Hash identifier: +7NLTBQJk4bxhkpJUDnLvj+95MXAZ9x/iNqbaQJnPYA= Subject key identifier: 68:CB:94:EE:E6:99:DD:B2:D9:2C:78:CF:76:D4:62:D7:94:92:97:FD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D1B1A691AAB9F6E6D9887A480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f8bd921-1438-3359-a561-4ea35af7895d.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.23.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:69:1a:ab:9f:6e:6d:98:87:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=d31a96c6-5d6f-4409-9c32-a1fdd895752b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:e4:f0:4e:7b:09:e9:92:b5:8e:75:ec:e3: 93:bd:2a:5b:c1:d5:b2:0c:2b:78:b0:fb:e1:75:11: 61:45:0e:ac:36:20:f1:d2:4b:39:5e:22:94:c0:2e: 42:6b:e7:b8:71:48:0c:70:43:ff:d9:87:3c:7b:56: f4:37:bd:57:b5:ab:b9:11:f6:9a:0f:55:19:07:de: 37:d0:a8:67:48:e1:1e:e9:ec:cb:1d:84:b9:21:af: 0e:d0:d3:7c:3f:bd:16:6d:b3:03:2c:23:68:fa:b4: 9b:c2:e3:ef:f7:4a:e3:45:34:73:27:56:51:5e:35: 41:e4:9e:5a:89:a4:46:4f:66:1e:98:35:6a:17:6b: bb:98:41:52:fc:9a:a5:c3:2e:cc:e6:87:39:a2:30: af:5b:4b:90:0c:2c:b8:ec:40:1a:56:12:93:ea:5d: 83:3e:3f:be:ba:20:cc:ed:e0:fd:5d:d9:ef:6d:45: a0:11:4c:ef:e8:17:27:c1:17:0e:67:ee:ea:5a:5c: a3:71:a8:89:62:15:fa:b7:2a:5d:22:14:5a:4b:51: 90:be:bc:07:59:25:46:ff:64:31:51:af:4c:d2:ca: 54:0d:92:80:d3:c8:5c:ef:63:58:56:56:32:58:b4: 30:f1:b9:1b:96:52:61:c4:9a:e0:cf:02:b8:1b:88: 30:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CB:94:EE:E6:99:DD:B2:D9:2C:78:CF:76:D4:62:D7:94:92:97:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0f8bd921-1438-3359-a561-4ea35af7895d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a5:70:08:4a:ad:b7:ff:a6:ac:de:c3:e8:43:b0:03:bb:ae: f6:93:18:be:14:c7:68:2a:f8:1c:78:7e:19:52:99:de:58:7a: 29:e6:28:b5:5b:e8:2d:6c:48:44:68:35:07:55:4f:5e:25:70: a6:98:00:50:55:2e:73:c4:39:d8:94:6b:51:2d:46:79:10:77: f1:ad:5b:26:8d:a1:54:51:ac:63:0b:21:5f:44:7d:11:6e:5a: 97:e1:50:bf:53:4a:56:75:e6:81:69:88:c8:d5:2c:90:e9:af: da:3c:19:e9:17:14:e8:44:ca:8f:ce:e1:65:a4:42:ec:6a:dc: 75:1f:9b:bd:ef:3f:0c:1a:21:49:a2:0c:42:55:a6:dc:22:61: a4:a7:e8:1e:66:79:11:5c:f6:d9:64:6e:4c:b0:04:44:06:45: ad:9a:3e:8f:04:5e:fc:3f:0d:fa:a9:70:93:57:a1:eb:f6:2a: ae:7f:b5:99:e9:91:e5:19:d7:c6:d8:30:f8:2a:53:d2:43:29: 08:2c:38:3e:8e:2f:2c:68:f8:6a:a4:31:e7:49:29:99:2a:fd: 2c:04:4e:28:61:46:d6:2d:14:1f:ef:b6:44:6d:f7:18:99:f8: e9:2b:d0:10:62:34:76:3e:d9:03:05:a0:53:36:e5:72:3f:e4: b5:78:69:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGmkaq59ubZiHpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZDMxYTk2YzYtNWQ2Zi00NDA5LTljMzItYTFmZGQ4OTU3NTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSzk8E57CemStY517OOTvSpbwdWyDCt4sPvh dRFhRQ6sNiDx0ks5XiKUwC5Ca+e4cUgMcEP/2Yc8e1b0N71Xtau5EfaaD1UZB943 0KhnSOEe6ezLHYS5Ia8O0NN8P70WbbMDLCNo+rSbwuPv90rjRTRzJ1ZRXjVB5J5a iaRGT2YemDVqF2u7mEFS/Jqlwy7M5oc5ojCvW0uQDCy47EAaVhKT6l2DPj++uiDM 7eD9XdnvbUWgEUzv6BcnwRcOZ+7qWlyjcaiJYhX6typdIhRaS1GQvrwHWSVG/2Qx Ua9M0spUDZKA08hc72NYVlYyWLQw8bkbllJhxJrgzwK4G4gw2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjLlO7mmd2y2Sx4z3bUYteUkpf9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGY4YmQ5MjEtMTQzOC0z MzU5LWE1NjEtNGVhMzVhZjc4OTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWlcAhKrbf/pqzew+hDsAO7rvaTGL4Ux2gq+Bx4fhlSmd5YeinmKLVb 6C1sSERoNQdVT14lcKaYAFBVLnPEOdiUa1EtRnkQd/GtWyaNoVRRrGMLIV9EfRFu WpfhUL9TSlZ15oFpiMjVLJDpr9o8GekXFOhEyo/O4WWkQuxq3HUfm73vPwwaIUmi DEJVptwiYaSn6B5meRFc9tlkbkywBEQGRa2aPo8EXvw/DfqpcJNXoev2Kq5/tZnp keUZ18bYMPgqU9JDKQgsOD6OLyxo+GqkMedJKZkq/SwETihhRtYtFB/vtkRt9xiZ +Okr0BBiNHY+2QMFoFM25XI/5LV4aas= -----END CERTIFICATE-----Generated at Thu Mar 12 03:44:16 2026 by rpki-client