$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa File: 9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa (raw, json) Hash identifier: 4kJQeRovj1OC8dxxslATNRhP116WnqNYdo+U/2m66CI= Subject key identifier: 26:D2:6D:1E:C3:E6:76:C7:33:03:4F:A1:AB:9F:4A:1A:0F:73:7C:79 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2379FE9AF21F0D2A61319200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.23.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:fe:9a:f2:1f:0d:2a:61:31:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=8a28cdf6-6caf-4f44-aa80-f92061b077e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:84:96:5f:37:49:3f:17:00:00:0e:5f:06:b0: 08:ca:f7:a0:97:86:bc:92:d9:7a:34:09:6b:c2:76: de:9e:ec:21:bd:e9:3a:2e:72:40:15:ac:40:e8:b4: 86:de:68:af:c7:97:7c:89:40:05:79:14:9d:25:09: 7f:5b:d5:70:16:ce:a1:db:8a:2a:bc:c8:73:7e:ef: bb:a6:3c:be:27:b0:df:5b:04:91:6a:0b:50:d4:2c: 34:48:49:9c:4d:e5:b1:ce:65:30:21:df:7c:e1:97: 6d:41:97:f6:6d:94:42:e8:11:09:90:a2:1a:1a:36: e9:b3:ca:dd:fe:ee:4d:3a:46:13:38:96:1c:aa:c9: 27:c1:95:89:14:0c:d9:49:7a:7b:ff:9c:a6:9a:ea: 4d:8e:03:fa:cc:c2:3a:9f:b4:c6:8b:eb:3a:4a:27: ac:7b:ad:c5:bc:45:72:f4:69:67:55:ad:eb:a9:c7: 56:e2:a8:db:47:67:af:d2:a0:7a:48:77:ad:a3:48: 82:d1:3b:b6:0e:72:9c:a8:99:ed:27:34:59:c4:e2: 2b:2d:c1:36:ad:7a:45:54:49:73:8f:e6:34:31:06: ed:8c:51:d3:71:e8:d2:21:2c:84:42:f8:30:96:3d: 88:b3:5a:cc:4f:51:20:ed:95:98:5e:5c:5d:0c:86: 69:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D2:6D:1E:C3:E6:76:C7:33:03:4F:A1:AB:9F:4A:1A:0F:73:7C:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9db4b124-8e41-364a-b63d-9e20fb7b7d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9c:ad:e3:10:ce:e7:8b:4d:0b:f8:24:39:fc:5c:86:02:70: 1d:59:a0:e9:b5:08:5e:51:22:d5:50:e6:a7:3d:87:3b:9b:d8: 44:94:82:c4:c8:da:24:f4:b0:56:50:d3:9f:4b:33:cb:7f:43: 77:3b:31:00:03:f5:3d:6d:33:d2:82:ab:3b:74:08:1f:67:71: 7f:82:dc:4f:5a:79:5e:36:61:26:20:a3:6b:dc:af:81:8a:a3: b8:e3:b5:eb:4c:32:74:54:6b:7d:2f:c7:06:a3:f7:0b:fd:a5: 0a:ed:60:2c:8e:a5:06:99:ea:15:d6:e2:4b:d7:bc:c5:a4:4e: cd:81:47:72:05:d7:b4:67:87:c4:1b:b0:af:e9:4a:b7:f9:12: 22:0a:55:83:5c:69:5c:b4:8e:48:1f:7c:e6:9b:60:84:61:96: b0:cc:ca:64:34:9d:c6:ed:ae:82:6f:a7:1c:40:48:19:b1:0a: 22:6f:15:5e:ea:ee:41:bf:93:70:64:53:3a:c7:a5:cf:ca:75: 8f:93:93:0a:58:23:ba:53:1a:e1:85:d8:71:6b:97:62:34:90: 7b:f5:9c:1c:64:02:cf:c8:28:5d:8d:e7:d2:4d:b7:ea:9f:1b: 85:a1:e6:bc:51:38:cd:ad:58:58:e4:d5:f5:a1:c7:36:34:86: 62:97:90:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jef6a8h8NKmExkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OGEyOGNkZjYtNmNhZi00ZjQ0LWFhODAtZjkyMDYxYjA3N2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4SWXzdJPxcAAA5fBrAIyvegl4a8ktl6NAlr wnbenuwhvek6LnJAFaxA6LSG3mivx5d8iUAFeRSdJQl/W9VwFs6h24oqvMhzfu+7 pjy+J7DfWwSRagtQ1Cw0SEmcTeWxzmUwId984ZdtQZf2bZRC6BEJkKIaGjbps8rd /u5NOkYTOJYcqsknwZWJFAzZSXp7/5ymmupNjgP6zMI6n7TGi+s6Siese63FvEVy 9GlnVa3rqcdW4qjbR2ev0qB6SHeto0iC0Tu2DnKcqJntJzRZxOIrLcE2rXpFVElz j+Y0MQbtjFHTcejSISyEQvgwlj2Is1rMT1Eg7ZWYXlxdDIZpfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbSbR7D5nbHMwNPoaufShoPc3x5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWRiNGIxMjQtOGU0MS0z NjRhLWI2M2QtOWUyMGZiN2I3ZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRdjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmcreMQzueLTQv4JDn8XIYCcB1ZoOm1CF5RItVQ5qc9hzub2ESUgsTI 2iT0sFZQ059LM8t/Q3c7MQAD9T1tM9KCqzt0CB9ncX+C3E9aeV42YSYgo2vcr4GK o7jjtetMMnRUa30vxwaj9wv9pQrtYCyOpQaZ6hXW4kvXvMWkTs2BR3IF17Rnh8Qb sK/pSrf5EiIKVYNcaVy0jkgffOabYIRhlrDMymQ0ncbtroJvpxxASBmxCiJvFV7q 7kG/k3BkUzrHpc/KdY+TkwpYI7pTGuGF2HFrl2I0kHv1nBxkAs/IKF2N59JNt+qf G4Wh5rxROM2tWFjk1fWhxzY0hmKXkAs= -----END CERTIFICATE-----Generated at Thu Mar 12 05:03:29 2026 by rpki-client