$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8bb6ca64-8c52-3c3c-a32f-410b8357653a.roa File: 8bb6ca64-8c52-3c3c-a32f-410b8357653a.roa (raw, json) Hash identifier: YMwjlyp9U1HMS2Kb8sk0777pGzpbr6lh+17CA3E9JxI= Subject key identifier: 48:C6:3F:78:BF:58:8C:80:6A:97:57:A1:CE:E0:F8:4E:74:50:4D:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A4FCD37983D582CE49C38 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8bb6ca64-8c52-3c3c-a32f-410b8357653a.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.25.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:4f:cd:37:98:3d:58:2c:e4:9c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=990a794a-a6a1-414a-b63f-ac4fe1d0c854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:df:da:4a:d8:c8:23:4e:a5:10:4d:54:b5:e3: e8:39:7c:c4:da:88:de:05:51:a9:0c:12:76:88:0c: cc:61:2a:dc:80:54:f7:a6:20:88:10:3b:bf:2e:b7: de:b9:e5:c9:4c:25:4d:19:13:0c:67:44:fc:ca:57: 13:e5:6a:13:70:d0:12:4a:12:4e:4e:0e:a8:33:be: a6:83:41:87:e8:0d:ba:c3:84:18:b0:13:da:94:eb: 08:9a:93:11:3a:bf:ef:45:95:4e:81:c0:a4:48:9a: 3d:95:42:8d:79:f2:38:3a:90:93:85:2d:9d:0b:33: b2:92:fa:6e:b6:2d:ba:6d:f9:b2:6c:86:ab:4d:d8: 12:b8:ad:c4:f6:cb:9d:31:6d:32:2e:61:dc:4c:5a: e5:98:96:e8:b7:9c:b3:5b:34:b2:44:1d:6c:cf:a1: df:54:aa:eb:d0:42:fd:d5:78:34:23:c8:68:c0:8d: c3:07:94:3f:4d:8d:72:71:53:66:c3:6c:e1:6f:1c: 2e:aa:7c:69:43:29:2f:5d:9a:b0:98:3d:ec:04:c0: f4:89:f1:f6:3a:9e:1b:50:bf:24:a6:cd:73:fd:4c: 9b:8d:db:c8:61:20:e4:5a:22:62:44:29:50:24:b1: be:e9:59:38:2f:ce:d3:bf:82:e2:a0:0d:62:48:eb: b7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C6:3F:78:BF:58:8C:80:6A:97:57:A1:CE:E0:F8:4E:74:50:4D:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8bb6ca64-8c52-3c3c-a32f-410b8357653a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e5:4e:f0:ba:64:24:e4:5c:ab:dd:73:e7:1e:6b:ae:38:6f: 8e:d0:eb:8a:9b:29:64:fb:fc:4f:68:75:6e:bc:6d:d6:26:d2: c1:8f:4e:f7:46:12:a4:91:bc:01:1b:36:50:b6:ca:dd:af:11: ac:44:dd:5c:36:e4:26:53:66:81:5b:40:74:44:0d:7a:7c:e8: 7d:24:0a:62:88:83:88:b4:32:ef:3b:00:86:62:21:fe:59:b9: e8:0e:b0:d4:36:78:da:89:74:db:37:9b:03:ec:b4:51:d8:e2: 86:80:3f:33:0c:31:09:97:48:db:51:3f:d5:8d:64:6b:76:88: ab:d2:e3:6b:cc:dc:ea:5d:a6:0a:f6:f4:36:1f:66:ae:56:2e: c6:1a:f5:bf:b4:8c:13:ab:39:05:77:d9:3e:98:82:a6:62:b5: 8c:b0:ce:87:58:5a:36:8d:d2:ba:ab:e2:a6:a6:89:c6:ca:4c: 78:65:8d:4f:d1:e9:5a:71:4d:b9:4b:ca:9c:bb:3a:09:a3:1f: e8:f8:5e:b7:7f:84:b1:c4:2f:c2:72:46:19:f7:15:98:d9:59: 8f:b6:35:5d:c9:bd:1f:8c:78:10:ff:64:ea:31:14:3e:e2:3d: 12:23:41:fd:70:ee:21:27:6f:1f:f5:de:a4:c4:b3:16:ac:50: 66:83:de:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jek/NN5g9WCzknDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OTkwYTc5NGEtYTZhMS00MTRhLWI2M2YtYWM0ZmUxZDBjODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt/aStjII06lEE1UtePoOXzE2ojeBVGpDBJ2 iAzMYSrcgFT3piCIEDu/LrfeueXJTCVNGRMMZ0T8ylcT5WoTcNASShJOTg6oM76m g0GH6A26w4QYsBPalOsImpMROr/vRZVOgcCkSJo9lUKNefI4OpCThS2dCzOykvpu ti26bfmybIarTdgSuK3E9sudMW0yLmHcTFrlmJbot5yzWzSyRB1sz6HfVKrr0EL9 1Xg0I8howI3DB5Q/TY1ycVNmw2zhbxwuqnxpQykvXZqwmD3sBMD0ifH2Op4bUL8k ps1z/UybjdvIYSDkWiJiRClQJLG+6Vk4L87Tv4LioA1iSOu3GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjGP3i/WIyAapdXoc7g+E50UE1yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGJiNmNhNjQtOGM1Mi0z YzNjLWEzMmYtNDEwYjgzNTc2NTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRmDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEflTvC6ZCTkXKvdc+cea644b47Q64qbKWT7/E9odW68bdYm0sGPTvdG EqSRvAEbNlC2yt2vEaxE3Vw25CZTZoFbQHREDXp86H0kCmKIg4i0Mu87AIZiIf5Z uegOsNQ2eNqJdNs3mwPstFHY4oaAPzMMMQmXSNtRP9WNZGt2iKvS42vM3Opdpgr2 9DYfZq5WLsYa9b+0jBOrOQV32T6YgqZitYywzodYWjaN0rqr4qamicbKTHhljU/R 6VpxTblLypy7OgmjH+j4Xrd/hLHEL8JyRhn3FZjZWY+2NV3JvR+MeBD/ZOoxFD7i PRIjQf1w7iEnbx/13qTEsxasUGaD3qc= -----END CERTIFICATE-----Generated at Thu Mar 12 03:43:15 2026 by rpki-client