$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8b71705-3c5f-32db-9cbc-77633933110e.roa File: d8b71705-3c5f-32db-9cbc-77633933110e.roa (raw, json) Hash identifier: koToEcnsXn5ceRMP65HH5/8lPwogPVs9RzqNUiWbUYU= Subject key identifier: 1E:A0:AB:4D:D4:E2:71:70:11:1C:AA:60:57:BC:EF:0E:6B:FF:4B:2E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D1B19F33308315AEA0899EC00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8b71705-3c5f-32db-9cbc-77633933110e.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.25.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:f3:33:08:31:5a:ea:08:99:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=d38306df-256a-4da5-b63d-ae39de612454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:65:57:08:88:c3:10:b7:de:f5:75:c5:8b:c7: 67:d6:1b:99:74:85:e8:f9:2a:51:9b:98:76:cb:7d: b2:78:7f:a4:b3:5f:f8:85:4a:e4:49:db:ba:09:c7: 3b:2b:55:59:1d:67:05:f7:bd:de:f3:7e:b3:f6:d7: e2:f8:57:b4:90:f1:13:33:91:6b:97:b4:71:8c:76: e6:7b:71:3a:98:54:76:88:7f:b3:47:91:ae:61:92: 30:d9:5a:d6:af:4c:d0:c0:51:7b:40:b6:97:d5:ff: bf:95:4c:36:5c:d4:79:cc:35:9a:78:1d:48:fd:96: 15:a1:e6:7e:1b:0c:47:b4:d9:03:63:3d:9b:19:1d: 52:98:d8:19:73:bd:db:c3:6b:f2:4c:a4:e4:3d:cd: 52:55:79:0b:07:54:06:a2:06:f2:c8:93:ea:20:1d: 9a:e1:82:d1:c7:09:92:ea:7d:76:87:48:ae:c7:de: d2:46:38:92:e2:88:da:d6:02:1a:d4:3f:ba:1d:70: 00:60:67:d1:20:cc:ee:b3:01:fd:73:89:41:f5:67: c9:60:90:09:ac:68:83:c4:d0:0b:ab:dd:d0:ab:e7: 9b:13:3c:36:af:ef:7c:ad:fc:1d:78:6a:7d:4b:20: 51:ce:6c:e9:44:75:b2:69:4d:6e:9b:87:c5:9b:1e: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A0:AB:4D:D4:E2:71:70:11:1C:AA:60:57:BC:EF:0E:6B:FF:4B:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8b71705-3c5f-32db-9cbc-77633933110e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:2e:b0:e7:b5:9e:51:95:7c:72:d0:29:9e:1d:32:88:af:de: ed:05:c5:85:ac:cc:4b:f8:74:d6:6f:70:5b:9e:6b:cd:79:23: d9:a8:aa:2b:74:68:7f:a2:00:67:fe:f2:08:fc:37:25:a0:f7: f3:26:35:18:1d:c2:3c:c6:fb:5f:10:20:6a:0d:27:f2:de:64: 5a:94:14:ea:09:2d:e3:e0:a3:b4:51:1e:be:62:02:30:51:7f: 30:cf:8f:30:b3:6f:f1:ce:f5:93:6d:a0:49:38:f9:d3:fb:f9: d3:fb:b8:0f:e2:96:74:b7:a4:74:d9:fe:be:15:c3:f2:87:da: c3:cf:8c:67:53:69:71:64:1a:fd:d6:e8:1e:dc:54:e2:46:6c: 88:19:41:bb:3d:b6:85:67:21:04:5e:47:50:54:2c:b0:be:aa: 3e:d5:51:2b:be:c8:62:8c:b5:cc:79:39:6d:0a:8e:c4:33:cd: 14:8d:38:7c:6b:bc:9d:22:28:41:b1:20:1e:3d:dd:48:21:d9: 76:38:30:c3:5e:50:92:fc:d8:65:19:d8:62:22:d3:e7:f6:ee: 02:ca:1b:a8:db:a0:2a:ff:0a:5a:2d:c4:26:82:b2:1e:03:e6: e4:23:f8:cb:21:a7:22:ba:2e:36:fb:0c:67:b6:c0:75:d3:14: eb:4a:28:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGfMzCDFa6giZ7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZDM4MzA2ZGYtMjU2YS00ZGE1LWI2M2QtYWUzOWRlNjEyNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2VXCIjDELfe9XXFi8dn1huZdIXo+SpRm5h2 y32yeH+ks1/4hUrkSdu6Ccc7K1VZHWcF973e836z9tfi+Fe0kPETM5Frl7RxjHbm e3E6mFR2iH+zR5GuYZIw2VrWr0zQwFF7QLaX1f+/lUw2XNR5zDWaeB1I/ZYVoeZ+ GwxHtNkDYz2bGR1SmNgZc73bw2vyTKTkPc1SVXkLB1QGogbyyJPqIB2a4YLRxwmS 6n12h0iux97SRjiS4oja1gIa1D+6HXAAYGfRIMzuswH9c4lB9WfJYJAJrGiDxNAL q93Qq+ebEzw2r+98rfwdeGp9SyBRzmzpRHWyaU1um4fFmx7HrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6gq03U4nFwERyqYFe87w5r/0suMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDhiNzE3MDUtM2M1Zi0z MmRiLTljYmMtNzc2MzM5MzMxMTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRkhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIusOe1nlGVfHLQKZ4dMoiv3u0FxYWszEv4dNZvcFuea815I9moqit0 aH+iAGf+8gj8NyWg9/MmNRgdwjzG+18QIGoNJ/LeZFqUFOoJLePgo7RRHr5iAjBR fzDPjzCzb/HO9ZNtoEk4+dP7+dP7uA/ilnS3pHTZ/r4Vw/KH2sPPjGdTaXFkGv3W 6B7cVOJGbIgZQbs9toVnIQReR1BULLC+qj7VUSu+yGKMtcx5OW0KjsQzzRSNOHxr vJ0iKEGxIB493Ugh2XY4MMNeUJL82GUZ2GIi0+f27gLKG6jboCr/ClotxCaCsh4D 5uQj+MshpyK6Ljb7DGe2wHXTFOtKKBQ= -----END CERTIFICATE-----Generated at Thu Mar 12 03:44:07 2026 by rpki-client