$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa File: 989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa (raw, json) Hash identifier: +jRy+D+umAA3ih7R+USIu4QtAryLnju6819AR4VRtFU= Subject key identifier: F9:62:EB:38:71:DE:1F:0A:94:2E:9D:46:35:5C:8C:0D:3C:3D:89:86 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A0A7DB89D308060AC98C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.23.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:0a:7d:b8:9d:30:80:60:ac:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=e67ba990-8ff5-4ce8-8208-384529385062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:af:de:b7:42:af:33:4a:e0:df:58:d7:15:19: 0d:9a:7d:04:10:87:e1:ae:67:f5:5d:d8:c1:f6:9e: 8f:5d:16:73:40:f3:9b:30:76:82:3f:ad:90:b3:53: c8:9e:c7:4d:ab:2e:7e:63:36:12:b4:23:d6:b3:fc: 31:4f:21:36:ec:32:68:47:ca:89:9e:23:de:c6:58: 4b:cf:a4:5f:97:b8:2b:8f:84:5a:d4:a9:5b:e5:f6: 2b:af:9e:33:03:1f:85:b0:f3:6a:9e:45:fd:2e:b9: 8c:5d:cd:66:b1:cd:fe:f9:69:78:12:3a:78:a9:29: 13:07:ea:92:e6:4d:8e:6f:32:f8:d7:91:c8:71:27: 26:cc:74:da:1c:79:65:09:3c:19:11:1b:fd:25:20: 60:09:32:31:de:ff:af:ef:38:8f:b4:21:53:83:f6: 55:70:88:64:23:28:37:15:4d:a0:d2:bc:69:6a:42: 7b:5f:5e:9c:d5:58:e4:fa:ab:79:7f:2a:ce:d1:f8: 24:97:0e:e3:19:cb:ff:74:15:d8:ea:0a:25:b1:90: 44:4c:bd:37:87:3a:1f:f4:6b:3b:38:70:07:92:8d: 19:6d:0f:77:29:99:79:82:9a:d8:db:ff:da:21:a4: 76:c9:a6:84:89:c8:e0:a6:f3:26:81:9e:1c:cd:52: 55:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:62:EB:38:71:DE:1F:0A:94:2E:9D:46:35:5C:8C:0D:3C:3D:89:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/989f7fc1-1eb5-3d2f-91bf-a6e5657ca174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e9:19:5b:35:2b:3a:aa:4f:a8:7e:41:eb:8d:2e:73:d2:82: 59:e1:9f:22:31:92:72:b5:32:c5:82:64:2a:ec:fe:a1:24:79: cb:6a:b6:1e:4d:2e:60:68:99:83:5c:b3:77:c7:e7:b5:62:61: 48:7e:68:dc:40:1d:1a:85:63:03:fb:5e:f8:6b:48:1b:26:1a: bd:08:5a:f6:ee:93:a0:51:17:78:ee:f3:3e:26:b3:3a:a3:79: 96:df:dd:ed:e4:ce:64:64:76:0a:f5:0a:1b:d5:8d:f9:3b:8c: 57:e8:5c:15:71:55:7b:e1:33:f5:6a:2e:37:d6:9e:df:42:8d: 14:9e:5b:ac:c3:77:0b:dd:67:76:f9:43:96:d1:9e:86:12:77: 99:19:1a:6d:0b:1a:ff:24:bb:5a:aa:83:ed:67:1a:6f:29:c7: 31:0f:06:db:86:34:72:14:a3:f8:ba:a6:7f:65:d8:6e:9d:f9: f9:08:33:39:fd:a3:db:c9:f8:23:fe:0a:d5:0a:64:ba:51:6b: 4c:d8:fa:91:12:93:d8:f2:ae:70:30:0a:ac:b7:9d:8f:10:ef: 40:11:a5:79:56:f7:2f:c0:2d:d7:d4:3b:db:6f:37:5b:d6:a7: 49:2d:b4:4b:a6:6f:d2:73:fb:d8:74:11:de:77:bf:9b:38:26: e7:a1:c9:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegp9uJ0wgGCsmMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZTY3YmE5OTAtOGZmNS00Y2U4LTgyMDgtMzg0NTI5Mzg1MDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK/et0KvM0rg31jXFRkNmn0EEIfhrmf1XdjB 9p6PXRZzQPObMHaCP62Qs1PInsdNqy5+YzYStCPWs/wxTyE27DJoR8qJniPexlhL z6Rfl7grj4Ra1Klb5fYrr54zAx+FsPNqnkX9LrmMXc1msc3++Wl4Ejp4qSkTB+qS 5k2ObzL415HIcScmzHTaHHllCTwZERv9JSBgCTIx3v+v7ziPtCFTg/ZVcIhkIyg3 FU2g0rxpakJ7X16c1Vjk+qt5fyrO0fgklw7jGcv/dBXY6golsZBETL03hzof9Gs7 OHAHko0ZbQ93KZl5gprY2//aIaR2yaaEicjgpvMmgZ4czVJVJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPli6zhx3h8KlC6dRjVcjA08PYmGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTg5ZjdmYzEtMWViNS0z ZDJmLTkxYmYtYTZlNTY1N2NhMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHpGVs1KzqqT6h+QeuNLnPSglnhnyIxknK1MsWCZCrs/qEkectqth5N LmBomYNcs3fH57ViYUh+aNxAHRqFYwP7XvhrSBsmGr0IWvbuk6BRF3ju8z4mszqj eZbf3e3kzmRkdgr1ChvVjfk7jFfoXBVxVXvhM/VqLjfWnt9CjRSeW6zDdwvdZ3b5 Q5bRnoYSd5kZGm0LGv8ku1qqg+1nGm8pxzEPBtuGNHIUo/i6pn9l2G6d+fkIMzn9 o9vJ+CP+CtUKZLpRa0zY+pESk9jyrnAwCqy3nY8Q70ARpXlW9y/ALdfUO9tvN1vW p0kttEumb9Jz+9h0Ed53v5s4JuehyaA= -----END CERTIFICATE-----Generated at Thu Mar 12 06:40:35 2026 by rpki-client