$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa File: 9c3fab74-0b0d-31ce-9e60-48382ddab243.roa (raw, json) Hash identifier: w+W7Ue7jOdxzMgD9hS8EAitxSLFKKlDQzE6v3P+5zmw= Subject key identifier: A3:E0:C5:EF:75:98:75:04:78:9F:E4:E9:D8:D0:F3:F9:5E:1A:DD:B1 Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F4328584CFDE7AD1AB7B1D670663B5980 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 26918 IP address blocks: 204.77.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e7:ad:1a:b7:b1:d6:70:66:3b:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=2b20b3d1-fd84-4532-932e-777ad6573563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cf:62:15:24:79:6a:a7:e6:e0:f8:16:0c:41: f1:3f:3a:26:7c:c0:d3:5d:6b:4c:5d:a8:47:95:14: b2:0e:91:0d:8d:08:70:66:82:7c:1e:01:43:86:ef: e7:c8:1a:d0:f4:89:49:de:73:82:28:f2:0a:5e:3c: 04:48:8a:07:ab:ed:2a:8a:49:5c:65:44:e0:2d:c6: 7f:74:d5:91:a3:e7:ad:8a:f6:9c:3f:cc:6a:18:a7: b1:25:77:1b:fa:e3:68:29:04:80:8f:6a:be:65:2c: c3:3d:25:d1:0b:77:65:b0:9d:e0:c0:d8:d2:40:b4: 07:5f:6e:b5:cb:f1:25:83:9b:e0:2d:3b:ae:5e:11: 9b:12:dd:71:4d:4a:06:a6:73:8d:b9:6a:d7:c8:fd: 0e:81:22:55:1c:b9:df:6d:b7:47:bb:8f:3b:9c:9e: dc:f1:42:cb:e0:f9:61:78:37:6d:27:16:23:48:d7: 37:e2:9e:ae:3d:62:20:51:7f:d6:c4:60:a2:17:8c: b8:97:7b:ce:23:b6:55:33:dc:83:b6:af:6a:5a:c7: 5c:e1:8b:a6:c6:65:ea:ff:08:42:5b:30:a1:4d:3f: d7:1a:d3:cc:ff:62:58:10:4e:28:cf:ff:84:da:c6: f5:f1:ae:07:97:20:f9:db:df:e9:5f:6b:52:c9:33: c8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E0:C5:EF:75:98:75:04:78:9F:E4:E9:D8:D0:F3:F9:5E:1A:DD:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 204.77.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:a8:20:f3:8d:f5:3c:5c:70:df:17:f8:97:ac:57:e9:7d:a8: e5:fd:5f:60:31:a3:01:2f:27:d2:d3:a4:54:e7:84:5e:e4:97: 5d:e7:0e:96:fa:53:d3:ec:b5:76:ac:93:44:de:7d:a4:a5:7a: d6:e2:b6:ed:4d:bb:98:d5:f0:0a:c6:a0:e4:d3:34:00:4f:a4: 62:ca:a7:3f:56:00:1d:e8:61:cd:ba:cb:e1:1b:72:bf:ef:20: 15:31:3e:01:d2:ee:f2:bb:d0:09:80:d2:41:7c:95:eb:cf:df: e2:cb:06:1a:c8:1c:2d:f9:d0:d2:8e:58:98:e3:3a:64:e3:33: ea:34:3a:cf:4d:04:94:97:a7:85:5b:9e:86:46:8f:b3:cf:cd: 3f:20:b0:8d:a1:78:82:d5:08:e2:f0:1a:42:d3:69:e0:7b:8c: e1:75:1f:bc:46:50:a0:7c:5b:d7:74:c4:51:40:c3:6f:ed:b9: c1:a2:b3:97:77:80:f2:c2:e0:6c:02:c8:fc:2d:6a:81:9e:e9: 6b:00:08:54:03:f4:4a:a5:0a:86:8a:3e:9e:59:13:71:2e:80: f5:89:90:28:9b:a3:4a:fa:05:eb:4f:50:68:ce:aa:23:c1:cc: 28:cd:61:48:d8:20:91:6b:91:d4:23:f3:f8:fd:95:e9:b7:9f: ee:3c:bd:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz9560at7HWcGY7WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk MmIyMGIzZDEtZmQ4NC00NTMyLTkzMmUtNzc3YWQ2NTczNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl89iFSR5aqfm4PgWDEHxPzomfMDTXWtMXahH lRSyDpENjQhwZoJ8HgFDhu/nyBrQ9IlJ3nOCKPIKXjwESIoHq+0qiklcZUTgLcZ/ dNWRo+etivacP8xqGKexJXcb+uNoKQSAj2q+ZSzDPSXRC3dlsJ3gwNjSQLQHX261 y/Elg5vgLTuuXhGbEt1xTUoGpnONuWrXyP0OgSJVHLnfbbdHu487nJ7c8ULL4Plh eDdtJxYjSNc34p6uPWIgUX/WxGCiF4y4l3vOI7ZVM9yDtq9qWsdc4YumxmXq/whC WzChTT/XGtPM/2JYEE4oz/+E2sb18a4HlyD529/pX2tSyTPIVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPgxe91mHUEeJ/k6djQ8/leGt2xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvOWMzZmFiNzQtMGIwZC0z MWNlLTllNjAtNDgzODJkZGFiMjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmoIPON9TxccN8X+JesV+l9qOX9X2AxowEvJ9LTpFTnhF7kl13nDpb6 U9PstXask0TefaSletbitu1Nu5jV8ArGoOTTNABPpGLKpz9WAB3oYc26y+Ebcr/v IBUxPgHS7vK70AmA0kF8levP3+LLBhrIHC350NKOWJjjOmTjM+o0Os9NBJSXp4Vb noZGj7PPzT8gsI2heILVCOLwGkLTaeB7jOF1H7xGUKB8W9d0xFFAw2/tucGis5d3 gPLC4GwCyPwtaoGe6WsACFQD9EqlCoaKPp5ZE3EugPWJkCibo0r6BetPUGjOqiPB zCjNYUjYIJFrkdQj8/j9lem3n+48vXg= -----END CERTIFICATE-----Generated at Mon Mar 2 16:11:31 2026 by rpki-client