$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa File: aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa (raw, json) Hash identifier: OjVoMuGYggtkclENgF8QdklyfX8x4gATJiZ5H13bXHQ= Subject key identifier: BB:1A:7C:AA:10:B9:96:62:E5:EF:A3:3E:ED:90:C0:79:8C:96:35:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A03DBE0CED56FE811AD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.23.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:03:db:e0:ce:d5:6f:e8:11:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=df79e045-14da-4230-ba2e-f4d8f21e0cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:82:c2:e1:d3:fb:df:c1:b2:2d:64:0c:c8:d7: 39:39:06:3a:74:88:5b:3c:0f:d2:2a:cd:86:7f:7c: c6:06:20:f6:e5:59:48:fb:36:14:0c:29:ca:5a:eb: 9d:a5:ac:cd:18:a5:37:32:1e:f1:34:f7:04:93:bb: 04:bb:01:04:07:73:85:8c:0a:64:d8:4f:6c:ec:be: 51:3a:07:e7:ee:72:48:0e:11:4e:8e:44:09:92:f1: 7d:7b:3a:6a:d5:d8:5c:e8:5e:a6:20:42:e3:57:d0: 48:9a:ae:16:0f:20:9f:67:a2:25:cf:c5:6c:60:86: e2:61:2e:d7:04:e5:07:38:05:fc:66:7c:3e:5f:58: 6b:ca:44:d3:25:9a:be:11:92:6e:b0:03:cf:67:8b: d6:a4:fa:a3:0c:2a:63:fe:68:b4:0a:3f:98:34:73: 1d:60:32:3a:24:75:b4:a5:80:01:6a:6e:e1:93:52: d2:36:3d:b7:61:49:2e:4e:6d:a8:99:01:eb:10:fe: e2:f3:db:20:d6:34:1e:b3:af:ae:bf:d5:b2:5d:b1: 3c:db:c2:81:9e:74:30:cf:68:89:7c:a3:ba:9b:01: 25:b4:2f:99:39:8e:b7:37:7c:02:b8:2e:d4:b0:ef: 32:2b:b9:c6:d3:18:cf:66:75:09:d5:9e:23:d3:2e: fb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1A:7C:AA:10:B9:96:62:E5:EF:A3:3E:ED:90:C0:79:8C:96:35:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa59d9d2-cd85-35fa-a45b-7e2a1d8ba324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:bf:c7:23:99:c5:e7:84:fc:66:a8:66:86:72:30:17:92:5f: 58:45:7b:02:ed:8e:ab:b7:86:ab:0b:d9:6f:4e:2c:08:9e:d5: df:92:11:5a:1d:f1:71:12:d7:06:7d:89:9c:5e:e5:1c:fc:7b: 44:16:c3:fc:22:12:3c:c3:7c:24:bc:e3:4f:e9:24:bb:83:64: 34:d9:fc:f6:d2:30:00:98:32:62:c3:00:3c:ac:bd:77:46:ab: cc:4c:9f:f1:2b:7a:75:07:5e:4d:9c:a8:79:10:3f:33:eb:d6: fe:ac:ee:92:ab:d6:86:80:d3:1a:ee:f3:79:3f:e5:52:3c:80: b7:e3:95:0f:fe:41:a3:aa:18:cf:cd:d2:95:82:7b:78:77:6a: b0:0a:b0:ad:f5:8f:09:ef:27:16:83:04:4d:93:e0:52:1f:da: 4e:dd:a0:7d:46:2d:16:e2:59:a2:63:0c:87:85:b0:74:e9:88: 1b:c3:38:13:fb:33:db:5b:12:44:af:9c:6f:a1:f8:50:ed:33: 64:31:48:36:b9:6c:06:c8:5e:26:0d:68:8a:64:08:77:a1:6f: 87:b9:8b:d2:b5:51:ad:ad:01:69:37:d7:5a:04:29:3a:b0:c0: 03:85:0b:77:75:4a:ad:e0:c2:dc:3f:8c:ba:83:59:63:76:4a: 20:59:54:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegPb4M7Vb+gRrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZGY3OWUwNDUtMTRkYS00MjMwLWJhMmUtZjRkOGYyMWUwY2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4LC4dP738GyLWQMyNc5OQY6dIhbPA/SKs2G f3zGBiD25VlI+zYUDCnKWuudpazNGKU3Mh7xNPcEk7sEuwEEB3OFjApk2E9s7L5R Ogfn7nJIDhFOjkQJkvF9ezpq1dhc6F6mIELjV9BImq4WDyCfZ6Ilz8VsYIbiYS7X BOUHOAX8Znw+X1hrykTTJZq+EZJusAPPZ4vWpPqjDCpj/mi0Cj+YNHMdYDI6JHW0 pYABam7hk1LSNj23YUkuTm2omQHrEP7i89sg1jQes6+uv9WyXbE828KBnnQwz2iJ fKO6mwEltC+ZOY63N3wCuC7UsO8yK7nG0xjPZnUJ1Z4j0y77hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsafKoQuZZi5e+jPu2QwHmMljWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWE1OWQ5ZDItY2Q4NS0z NWZhLWE0NWItN2UyYTFkOGJhMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRePMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEq/xyOZxeeE/GaoZoZyMBeSX1hFewLtjqu3hqsL2W9OLAie1d+SEVod 8XES1wZ9iZxe5Rz8e0QWw/wiEjzDfCS840/pJLuDZDTZ/PbSMACYMmLDADysvXdG q8xMn/ErenUHXk2cqHkQPzPr1v6s7pKr1oaA0xru83k/5VI8gLfjlQ/+QaOqGM/N 0pWCe3h3arAKsK31jwnvJxaDBE2T4FIf2k7doH1GLRbiWaJjDIeFsHTpiBvDOBP7 M9tbEkSvnG+h+FDtM2QxSDa5bAbIXiYNaIpkCHehb4e5i9K1Ua2tAWk311oEKTqw wAOFC3d1Sq3gwtw/jLqDWWN2SiBZVHg= -----END CERTIFICATE-----Generated at Thu Mar 12 05:07:36 2026 by rpki-client