$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5f2efc2-3715-3879-b13a-9c299db62e9a.roa File: d5f2efc2-3715-3879-b13a-9c299db62e9a.roa (raw, json) Hash identifier: QS6DTE+Sy6b7eLgnIb7if+bmCbozHIhr/qSDCURiw/0= Subject key identifier: 18:C7:89:F6:3E:44:B7:A7:CD:3D:9F:FE:11:01:7C:9B:14:9A:83:B0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A1E8349959D70ABE69D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5f2efc2-3715-3879-b13a-9c299db62e9a.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.22.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:1e:83:49:95:9d:70:ab:e6:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=5b939a50-166f-4bf2-aa6e-1db9acff7163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cb:e3:31:38:c1:39:02:e7:c4:d3:aa:3a:de: a3:a0:c4:75:c1:bc:dc:b0:c2:e2:15:1a:11:3a:65: 7a:2e:3e:05:c5:b0:61:09:30:ee:02:24:64:77:e2: 5e:ef:4a:f7:35:75:80:3b:cf:f8:e2:77:2e:7a:13: 19:51:6f:36:0b:a8:3e:5b:43:e8:11:c4:a2:77:75: 5a:92:93:c6:27:96:14:ce:b6:83:3c:e6:76:18:54: 62:c9:23:63:1f:df:77:5e:56:09:34:38:e3:6c:5a: 98:5f:7e:df:96:62:38:8a:34:7b:9a:8f:02:51:c0: 69:c2:ac:f8:27:1c:b3:76:cf:3a:cf:a4:f8:90:84: 37:7e:a6:e7:ee:69:e8:a2:81:64:1c:a5:b3:72:b8: 43:b6:bc:55:8d:67:7f:70:a9:98:19:cf:07:c6:91: eb:1e:99:89:1b:90:56:29:f5:6d:8e:52:e9:15:33: 6e:c5:79:60:37:ca:61:a3:ba:8e:16:9b:f7:c6:63: 17:a0:0c:11:38:f3:c4:10:48:33:eb:4b:4f:89:94: 27:9e:57:54:87:9c:00:65:a0:15:fb:1a:24:32:ed: 94:c5:e2:4d:25:22:4c:f9:28:8d:d4:f4:0a:2e:8b: 36:dc:62:27:1a:22:48:76:53:77:54:b1:9e:36:d1: 5e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C7:89:F6:3E:44:B7:A7:CD:3D:9F:FE:11:01:7C:9B:14:9A:83:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d5f2efc2-3715-3879-b13a-9c299db62e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c7:94:c1:e3:9d:75:93:45:86:b5:dd:4e:ac:0c:50:4e:2f: 03:e8:d7:5f:4b:8d:c8:72:30:e4:96:44:33:a0:2f:22:da:4d: 04:45:db:f0:23:ac:93:e3:6b:d1:d9:e2:ee:84:73:7c:76:e1: e3:07:c5:20:72:38:a8:79:7a:dc:17:7e:02:7c:a7:18:4e:3b: 26:b9:e0:0d:84:c8:3b:d2:cb:01:11:b4:2a:36:1d:32:f6:e6: d0:8b:5a:4a:c4:e1:8d:8e:92:48:b5:a5:f5:f1:d5:b7:37:1d: 33:b4:0e:9b:f8:2f:65:65:22:c9:ea:08:2a:6b:62:57:84:25: 0d:11:18:ae:dc:ca:8e:b3:81:fc:81:f1:a5:93:f2:66:53:af: de:99:53:f6:2d:fd:33:1d:96:8e:70:88:7c:66:0c:a0:12:34: dc:a6:d0:0b:ae:e0:27:ee:bd:05:7b:78:0b:fd:60:f9:11:40: 0d:0a:f3:ca:8e:5e:9e:20:aa:4a:75:ad:4b:3c:97:db:4f:1b: 68:d5:17:a8:ff:52:60:71:80:15:36:67:2d:69:41:41:c6:32: db:47:b4:11:65:22:29:70:9f:87:fc:f8:7b:f3:57:80:e2:57: fe:ac:b0:75:38:1d:7c:19:36:52:f0:02:4c:5b:b6:c0:cc:a0: c2:30:e6:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeh6DSZWdcKvmnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NWI5MzlhNTAtMTY2Zi00YmYyLWFhNmUtMWRiOWFjZmY3MTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8vjMTjBOQLnxNOqOt6joMR1wbzcsMLiFRoR OmV6Lj4FxbBhCTDuAiRkd+Je70r3NXWAO8/44ncuehMZUW82C6g+W0PoEcSid3Va kpPGJ5YUzraDPOZ2GFRiySNjH993XlYJNDjjbFqYX37flmI4ijR7mo8CUcBpwqz4 Jxyzds86z6T4kIQ3fqbn7mnoooFkHKWzcrhDtrxVjWd/cKmYGc8HxpHrHpmJG5BW KfVtjlLpFTNuxXlgN8pho7qOFpv3xmMXoAwROPPEEEgz60tPiZQnnldUh5wAZaAV +xokMu2UxeJNJSJM+SiN1PQKLos23GInGiJIdlN3VLGeNtFeXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjHifY+RLenzT2f/hEBfJsUmoOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDVmMmVmYzItMzcxNS0z ODc5LWIxM2EtOWMyOTlkYjYyZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRapMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHHlMHjnXWTRYa13U6sDFBOLwPo119LjchyMOSWRDOgLyLaTQRF2/Aj rJPja9HZ4u6Ec3x24eMHxSByOKh5etwXfgJ8pxhOOya54A2EyDvSywERtCo2HTL2 5tCLWkrE4Y2Okki1pfXx1bc3HTO0Dpv4L2VlIsnqCCprYleEJQ0RGK7cyo6zgfyB 8aWT8mZTr96ZU/Yt/TMdlo5wiHxmDKASNNym0Auu4CfuvQV7eAv9YPkRQA0K88qO Xp4gqkp1rUs8l9tPG2jVF6j/UmBxgBU2Zy1pQUHGMttHtBFlIilwn4f8+HvzV4Di V/6ssHU4HXwZNlLwAkxbtsDMoMIw5jE= -----END CERTIFICATE-----Generated at Thu Mar 12 05:07:47 2026 by rpki-client