$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a63c59ce-5a49-3f3e-8855-0d302277390e.roa File: a63c59ce-5a49-3f3e-8855-0d302277390e.roa (raw, json) Hash identifier: sAEs2s2Zr6yUBN9tsL58dpHHkqbE6Wk3to9qK+FeIyU= Subject key identifier: 6F:2B:5D:78:06:6C:9B:A0:85:BB:A5:79:59:C7:47:3E:D0:91:75:1D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A2C3FE21CC3F251004590 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a63c59ce-5a49-3f3e-8855-0d302277390e.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.24.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2c:3f:e2:1c:c3:f2:51:00:45:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=0419798e-1c0d-4e9b-a917-1170c139742a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:29:ae:16:a9:82:ed:b8:79:49:45:70:7f:94: 75:ef:c0:21:e1:8f:7e:64:22:ca:ff:00:58:08:e5: 72:b9:60:b4:f1:31:9c:9c:c8:8c:b3:4b:64:53:dd: 88:d1:fa:74:aa:a1:29:59:db:16:8b:65:ee:6d:c8: 6c:5f:24:51:d9:ec:88:bd:bb:79:08:3c:c3:fa:41: 0f:c0:d5:bb:de:9a:4e:99:23:4a:a0:23:76:35:99: 39:c4:3c:3b:20:ee:c8:26:a9:b9:7a:d7:d5:8f:77: 26:f8:ac:ff:3b:9e:ba:89:39:36:df:25:9a:10:8c: a9:67:13:ed:73:48:61:91:fd:28:5c:46:2b:ab:9a: eb:16:be:5b:46:34:41:b2:7b:40:33:13:8a:06:2c: 3f:cd:12:7d:37:31:cf:4f:56:05:ca:85:24:9b:89: 8c:61:ce:9c:2a:fd:74:a7:89:18:37:c1:ca:a9:5f: a1:06:e7:47:f4:f6:c1:6c:6f:eb:f4:85:79:e8:15: 63:41:46:8f:93:6a:c8:e6:c5:d2:c9:c0:6b:34:97: e8:22:c6:3d:64:87:4a:52:af:f0:d7:dc:fd:86:67: 48:c0:d1:7e:01:aa:f1:1f:0b:65:4d:3a:4d:4c:87: 8a:4e:f0:b6:de:37:ac:17:3d:dc:5e:5a:31:2d:b6: 46:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2B:5D:78:06:6C:9B:A0:85:BB:A5:79:59:C7:47:3E:D0:91:75:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a63c59ce-5a49-3f3e-8855-0d302277390e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:5d:2f:5f:a8:7d:0f:6f:97:10:7f:d6:7f:90:81:9d:1e:ea: 1c:30:49:2c:1f:f9:47:c7:03:17:76:45:50:08:85:3c:a2:00: d5:ea:4c:60:7c:7f:30:60:4a:a1:3d:07:08:09:67:22:16:67: 24:00:cf:0e:ff:ee:69:af:3c:6b:81:cc:4e:70:fd:4b:49:30: ce:97:6c:45:2e:50:d4:17:c4:7f:90:6e:17:b4:c1:41:10:cd: 4d:8e:8f:3f:d2:6d:87:46:1f:1b:84:60:05:e3:ca:8b:58:dd: 1e:32:d4:4f:5a:68:7b:9e:96:3b:77:8d:50:f0:a1:17:b0:0f: 49:73:83:a6:3b:35:e1:f8:46:fa:09:c5:6c:d1:08:3e:33:5d: f8:87:99:54:7a:dd:c4:2a:66:23:65:97:a7:1c:aa:4c:83:7f: a2:4d:09:64:9d:04:52:68:5f:2c:e3:52:2a:a9:6f:65:6f:af: e4:89:17:43:ed:3a:0a:a5:38:8e:d2:f1:5e:68:4f:5d:a2:9d: ac:7f:e8:e2:b8:8d:5c:23:e9:d6:ac:39:9e:ba:10:9c:bf:37: 34:1d:12:41:c7:c4:d3:cb:d3:8e:e5:05:92:2e:4d:5a:4d:00: 5a:32:7a:9b:9a:05:1d:31:b1:85:7d:55:3f:37:d5:46:50:f9: a3:0d:57:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiw/4hzD8lEARZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MDQxOTc5OGUtMWMwZC00ZTliLWE5MTctMTE3MGMxMzk3NDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCmuFqmC7bh5SUVwf5R178Ah4Y9+ZCLK/wBY COVyuWC08TGcnMiMs0tkU92I0fp0qqEpWdsWi2XubchsXyRR2eyIvbt5CDzD+kEP wNW73ppOmSNKoCN2NZk5xDw7IO7IJqm5etfVj3cm+Kz/O566iTk23yWaEIypZxPt c0hhkf0oXEYrq5rrFr5bRjRBsntAMxOKBiw/zRJ9NzHPT1YFyoUkm4mMYc6cKv10 p4kYN8HKqV+hBudH9PbBbG/r9IV56BVjQUaPk2rI5sXSycBrNJfoIsY9ZIdKUq/w 19z9hmdIwNF+AarxHwtlTTpNTIeKTvC23jesFz3cXloxLbZGaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8rXXgGbJughbuleVnHRz7QkXUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTYzYzU5Y2UtNWE0OS0z ZjNlLTg4NTUtMGQzMDIyNzczOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRihMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1dL1+ofQ9vlxB/1n+QgZ0e6hwwSSwf+UfHAxd2RVAIhTyiANXqTGB8 fzBgSqE9BwgJZyIWZyQAzw7/7mmvPGuBzE5w/UtJMM6XbEUuUNQXxH+Qbhe0wUEQ zU2Ojz/SbYdGHxuEYAXjyotY3R4y1E9aaHueljt3jVDwoRewD0lzg6Y7NeH4RvoJ xWzRCD4zXfiHmVR63cQqZiNll6ccqkyDf6JNCWSdBFJoXyzjUiqpb2Vvr+SJF0Pt OgqlOI7S8V5oT12inax/6OK4jVwj6dasOZ66EJy/NzQdEkHHxNPL047lBZIuTVpN AFoyepuaBR0xsYV9VT831UZQ+aMNV20= -----END CERTIFICATE-----Generated at Thu Mar 12 05:04:56 2026 by rpki-client