$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fecf9c7-4c49-3088-907d-e369a82028d1.roa File: 1fecf9c7-4c49-3088-907d-e369a82028d1.roa (raw, json) Hash identifier: MRa5oCF8JT5WHoC8H2MnlCxBQ4AtBmxDcxju+SLebkY= Subject key identifier: 98:A1:5A:D9:2E:DB:D8:78:DA:7C:6D:1B:CC:CF:3D:40:C9:24:AB:F0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A1BA544B23BC0B7D06D18 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fecf9c7-4c49-3088-907d-e369a82028d1.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.25.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1b:a5:44:b2:3b:c0:b7:d0:6d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=8ca0d636-4895-4086-a58e-00e2da5897c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b8:31:67:10:ef:b7:95:73:63:f0:3e:e6:95: 8c:65:27:41:77:7b:d8:f4:05:b9:28:4c:4e:19:fc: 0c:77:e7:01:49:68:1a:ee:dc:1e:21:ac:02:cf:60: d1:19:a3:2f:d2:7b:89:b3:73:a9:f1:92:65:24:e7: f2:98:79:81:be:e2:6d:a9:a3:97:7d:84:d0:57:a7: 90:ec:78:09:cf:b4:72:d6:f4:78:77:10:df:b0:d1: 95:f8:2a:77:f4:15:d1:78:11:1a:09:40:cc:f5:47: f1:fe:9a:09:24:5e:9c:3c:7a:14:c1:13:23:e2:c7: 8c:84:e0:89:1e:fe:87:b6:c2:39:b2:71:16:31:99: 6c:aa:db:63:ed:cc:56:84:e9:65:f0:12:b4:23:0a: d2:20:03:a3:40:d6:46:a1:71:e9:aa:22:fb:ff:85: 34:44:d0:36:df:a6:35:96:7d:c9:b8:22:f1:17:65: 89:67:77:d9:17:b5:dd:f2:c3:18:7d:1b:85:ac:36: 34:b7:05:d5:42:bd:d9:40:93:99:f6:79:99:ec:82: 0d:e7:f3:26:7c:aa:b9:3b:3f:b3:df:d6:3f:80:33: c1:33:3b:d5:29:08:09:72:bb:cf:4d:38:66:83:af: 82:52:85:c0:37:53:77:52:88:f9:d8:67:a1:27:97: 87:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A1:5A:D9:2E:DB:D8:78:DA:7C:6D:1B:CC:CF:3D:40:C9:24:AB:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1fecf9c7-4c49-3088-907d-e369a82028d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:45:13:25:95:89:85:ca:16:43:d8:d9:d0:7d:97:e8:36:eb: 87:8b:02:2d:a7:08:0a:68:2b:21:a1:20:e9:35:07:47:b1:d9: c5:0d:ef:7b:37:fe:5e:8b:d1:b2:74:cc:8c:d8:e9:5c:14:90: 14:e0:ab:08:6c:ee:1a:53:b8:07:a3:93:1c:15:b9:84:d6:70: 2f:2e:41:e8:8e:7c:0a:8a:94:3c:60:35:a3:ce:1a:6f:99:86: 60:07:a2:ce:04:17:cd:f3:78:63:f5:17:19:3a:88:29:51:c3: ad:0c:51:9f:7f:2a:e0:eb:af:89:5e:c4:15:94:3e:58:dc:54: 44:b2:09:8c:78:9f:f4:c8:f9:34:f8:75:bf:61:e3:1e:c7:5a: 0d:94:07:58:5c:21:82:d3:27:c3:7b:51:91:73:f7:d6:fb:aa: 30:19:66:9c:2f:61:ba:24:ed:c6:91:d1:49:c8:7d:0c:3e:69: fb:82:1f:99:09:20:c4:75:a1:3c:01:b1:ad:93:0e:4d:1f:44: f9:14:c1:ce:d2:44:3c:53:6c:f5:d1:37:0b:9e:c5:54:cf:9f: 37:3c:48:7a:9d:89:0f:f5:a6:02:bd:b7:7e:7b:34:b1:79:99: 12:f8:1d:f9:a0:74:4d:d9:ad:be:dc:cc:0e:d7:33:fa:a6:f7: 06:fb:0f:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jehulRLI7wLfQbRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OGNhMGQ2MzYtNDg5NS00MDg2LWE1OGUtMDBlMmRhNTg5N2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorgxZxDvt5VzY/A+5pWMZSdBd3vY9AW5KExO GfwMd+cBSWga7tweIawCz2DRGaMv0nuJs3Op8ZJlJOfymHmBvuJtqaOXfYTQV6eQ 7HgJz7Ry1vR4dxDfsNGV+Cp39BXReBEaCUDM9Ufx/poJJF6cPHoUwRMj4seMhOCJ Hv6HtsI5snEWMZlsqttj7cxWhOll8BK0IwrSIAOjQNZGoXHpqiL7/4U0RNA236Y1 ln3JuCLxF2WJZ3fZF7Xd8sMYfRuFrDY0twXVQr3ZQJOZ9nmZ7IIN5/MmfKq5Oz+z 39Y/gDPBMzvVKQgJcrvPTThmg6+CUoXAN1N3Uoj52GehJ5eH/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJihWtku29h42nxtG8zPPUDJJKvwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWZlY2Y5YzctNGM0OS0z MDg4LTkwN2QtZTM2OWE4MjAyOGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRlvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtFEyWViYXKFkPY2dB9l+g264eLAi2nCApoKyGhIOk1B0ex2cUN73s3 /l6L0bJ0zIzY6VwUkBTgqwhs7hpTuAejkxwVuYTWcC8uQeiOfAqKlDxgNaPOGm+Z hmAHos4EF83zeGP1Fxk6iClRw60MUZ9/KuDrr4lexBWUPljcVESyCYx4n/TI+TT4 db9h4x7HWg2UB1hcIYLTJ8N7UZFz99b7qjAZZpwvYbok7caR0UnIfQw+afuCH5kJ IMR1oTwBsa2TDk0fRPkUwc7SRDxTbPXRNwuexVTPnzc8SHqdiQ/1pgK9t357NLF5 mRL4HfmgdE3Zrb7czA7XM/qm9wb7D2g= -----END CERTIFICATE-----Generated at Thu Mar 12 03:46:05 2026 by rpki-client