$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d923b5f1-5eeb-3469-b0f9-c48f33e2b93b.roa File: d923b5f1-5eeb-3469-b0f9-c48f33e2b93b.roa (raw, json) Hash identifier: dQEfgKfASlrrg2sqcJQZM25en+dk1O9VLTznDFoFWek= Subject key identifier: 95:58:42:93:15:0B:45:C1:F1:A9:EA:CE:FA:91:73:57:9B:0A:F2:45 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D1707F15A8BC8462BB73EB580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d923b5f1-5eeb-3469-b0f9-c48f33e2b93b.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 30036 IP address blocks: 173.28.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:f1:5a:8b:c8:46:2b:b7:3e:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=e19f1fbb-0fb5-4a9c-850d-420f2245f5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ee:fc:f4:cf:62:66:4b:04:85:fb:fa:63:b3: 3b:13:82:02:d0:7b:42:48:d1:21:83:bf:aa:90:33: 55:ba:c9:63:df:45:82:a8:1f:c5:8e:c6:41:8f:f9: 5e:a9:93:13:a7:c7:f2:86:68:0a:70:b7:f1:28:43: e4:a4:54:88:c3:87:c7:6d:82:8e:21:1f:0b:df:49: ca:3a:5f:f9:d0:0b:87:26:0c:ed:81:a0:fb:77:6e: 7a:3d:7a:88:a0:c6:61:e3:62:a6:7a:26:3b:0a:4e: ea:14:97:e9:1a:f3:1a:3f:51:6d:f3:61:57:0a:da: 60:f4:e9:c1:e4:85:f1:00:ef:60:55:56:7b:e4:e1: e1:c7:8f:69:9c:1a:1c:49:0b:31:13:83:93:88:4f: 8c:31:7d:7e:e2:9f:ee:bb:2f:c2:ee:41:e7:36:27: 6e:e3:c1:b1:ba:57:70:44:40:84:19:55:1a:6e:1d: 27:a4:20:f2:39:a1:64:b8:fb:54:0f:e7:3d:45:a8: 7a:98:ac:b1:18:65:cf:27:77:c4:8a:79:fb:ac:ec: e3:45:ae:10:81:30:87:f8:9d:0d:c3:3c:d0:2a:4b: 97:19:5e:86:3d:e2:f5:9c:ca:c0:cc:55:4f:2c:35: c3:12:17:2d:29:1e:68:90:6d:c7:e8:0f:4b:46:95: c3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:58:42:93:15:0B:45:C1:F1:A9:EA:CE:FA:91:73:57:9B:0A:F2:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d923b5f1-5eeb-3469-b0f9-c48f33e2b93b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e5:a9:f0:67:fa:c2:e6:9c:d7:49:b2:1c:67:97:53:26:ed: 76:a0:8c:99:0d:6c:b0:cc:7b:a4:86:89:79:50:cd:ed:a8:0f: b3:03:b8:43:7b:a5:8a:39:b6:96:a1:86:a6:33:a8:2c:2d:92: 06:a8:09:7c:8f:e8:ae:c1:14:57:ce:a9:43:ae:fd:80:a5:6c: e3:36:89:4b:2c:79:41:52:0c:36:cc:5a:bb:42:22:3c:10:e5: a1:70:c8:ea:c5:4c:82:06:61:36:75:8b:b1:6d:c2:64:b7:3b: 7e:f4:19:a9:bc:4f:fb:bc:ef:1c:34:06:dd:49:76:c4:ab:6a: 92:62:2f:e5:98:4c:0b:56:f4:7b:41:69:e4:41:65:ae:9c:af: e8:f3:ac:36:37:ad:c7:62:ff:24:44:83:65:a7:32:43:22:88: 56:16:e4:33:b2:ac:b6:30:70:e7:c3:07:93:be:7f:9a:da:35: 01:c2:04:67:80:bd:5c:83:50:eb:ee:82:12:08:94:03:3e:25: 41:85:03:ee:2c:66:13:bf:fc:7e:93:4b:43:87:23:17:36:30: 0f:f2:b9:1e:10:36:87:e3:3b:9b:ed:af:bc:4c:14:7c:ac:df: 55:e7:91:c8:8f:c1:77:6a:45:a1:37:a8:c6:eb:51:7b:7a:44: 09:a7:45:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB/Fai8hGK7c+tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk ZTE5ZjFmYmItMGZiNS00YTljLTg1MGQtNDIwZjIyNDVmNWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO789M9iZksEhfv6Y7M7E4IC0HtCSNEhg7+q kDNVuslj30WCqB/FjsZBj/leqZMTp8fyhmgKcLfxKEPkpFSIw4fHbYKOIR8L30nK Ol/50AuHJgztgaD7d256PXqIoMZh42KmeiY7Ck7qFJfpGvMaP1Ft82FXCtpg9OnB 5IXxAO9gVVZ75OHhx49pnBocSQsxE4OTiE+MMX1+4p/uuy/C7kHnNidu48Gxuldw RECEGVUabh0npCDyOaFkuPtUD+c9Rah6mKyxGGXPJ3fEinn7rOzjRa4QgTCH+J0N wzzQKkuXGV6GPeL1nMrAzFVPLDXDEhctKR5okG3H6A9LRpXDIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVYQpMVC0XB8anqzvqRc1ebCvJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDkyM2I1ZjEtNWVlYi0z NDY5LWIwZjktYzQ4ZjMzZTJiOTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADblqfBn+sLmnNdJshxnl1Mm7XagjJkNbLDMe6SGiXlQze2oD7MDuEN7 pYo5tpahhqYzqCwtkgaoCXyP6K7BFFfOqUOu/YClbOM2iUsseUFSDDbMWrtCIjwQ 5aFwyOrFTIIGYTZ1i7FtwmS3O370Gam8T/u87xw0Bt1JdsSrapJiL+WYTAtW9HtB aeRBZa6cr+jzrDY3rcdi/yREg2WnMkMiiFYW5DOyrLYwcOfDB5O+f5raNQHCBGeA vVyDUOvughIIlAM+JUGFA+4sZhO//H6TS0OHIxc2MA/yuR4QNofjO5vtr7xMFHys 31XnkciPwXdqRaE3qMbrUXt6RAmnRb8= -----END CERTIFICATE-----Generated at Thu Mar 12 03:46:07 2026 by rpki-client