$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa File: 0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa (raw, json) Hash identifier: aZFGyTKMTtJB3l18lduPZWHnOZYkvYN7NZ+oCsnsVYc= Subject key identifier: 59:13:B9:18:4C:A2:C4:B3:A0:03:50:8B:97:37:84:6F:48:91:1E:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CBDB1EE598077BD0C5E1B205C Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 19905 IP address blocks: 173.23.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:ee:59:80:77:bd:0c:5e:1b:20:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=4b4ddb33-3c02-4abe-aa26-4afcc20cc730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:56:eb:99:76:e2:17:38:4d:5d:fa:54:01:50: 16:e9:a3:93:ce:0e:0b:23:4b:87:ca:b1:09:df:f8: d8:ca:9c:82:43:20:4a:2b:78:80:55:a2:56:b7:5b: 9c:91:96:5f:b3:14:78:a3:48:07:a2:76:0d:c1:27: 4e:01:7d:3d:c7:c5:15:93:47:4b:50:d7:13:5d:5b: e8:f6:fd:97:f7:79:4b:f8:6c:a1:06:c3:24:a9:54: 4b:ff:72:4c:5d:ac:16:19:ba:8c:17:7c:ac:b7:89: 60:9a:34:eb:5f:28:11:08:77:7e:b0:32:07:30:76: cf:e3:7d:8a:cf:1f:15:cf:29:b1:69:71:08:6c:15: 42:41:6c:9a:7a:78:2f:f8:2b:05:8a:e8:fa:4b:98: af:f4:db:05:ee:df:14:59:ab:84:38:af:aa:de:ed: 6e:bb:c0:ba:b6:d0:56:b0:cf:1c:a8:d1:24:1b:83: 66:24:62:84:00:c5:c4:2e:b2:d8:31:56:eb:72:b0: 09:c2:32:53:c8:f4:8a:de:e7:1c:3b:75:4f:96:88: d6:ce:0c:3b:87:eb:d0:53:92:4f:0b:72:0c:12:19: a5:5c:07:5a:75:84:4a:67:b7:5f:23:4a:fc:20:7c: 57:c8:70:81:36:68:d2:1e:52:d8:d2:03:67:d0:21: a3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:13:B9:18:4C:A2:C4:B3:A0:03:50:8B:97:37:84:6F:48:91:1E:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0861b7b8-47f1-3ff2-a15d-f5669052e53d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:9f:49:d4:b8:45:42:77:c4:f2:51:e5:75:91:82:7f:8f:f0: b9:ea:30:92:be:6d:d2:75:16:2c:cc:5a:c9:f5:a9:0d:64:d0: b6:95:3d:36:9d:12:c1:49:18:fb:66:f6:ee:3a:9b:41:e5:20: 83:61:da:40:19:61:58:65:2f:ec:8b:4b:ad:a8:b4:b5:2d:b7: 29:2b:7f:f4:af:56:ab:95:d4:5a:e5:3f:3f:b1:3b:5d:fa:ed: 54:c1:11:cd:36:14:f2:72:0b:33:6a:ac:b1:e3:da:89:22:cf: 5f:ad:bb:17:b9:ee:05:ee:a5:b3:d0:bf:6b:4b:c2:b0:95:37: 02:50:d3:91:38:12:d4:4e:c5:af:60:76:f6:75:90:41:45:9a: b3:83:a5:b6:4f:a5:56:7a:e6:e3:e8:a1:52:62:18:6a:18:6c: 32:bb:39:2a:95:aa:1e:0e:ea:7b:fe:8c:ee:37:b2:d8:75:7a: 77:bb:f5:a8:85:0f:4f:1e:55:69:00:0d:26:eb:aa:64:6d:3e: 9c:5c:33:d2:b7:ad:bd:8f:0c:33:da:87:ef:ac:39:9a:c6:ac: 3a:23:07:dd:04:0a:ac:a3:40:49:d9:d9:86:9f:07:2b:5e:62: 5d:74:54:6d:de:be:b7:1a:c0:e8:a5:da:94:64:07:92:d3:5d: f0:7b:9a:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9se5ZgHe9DF4bIFwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk NGI0ZGRiMzMtM2MwMi00YWJlLWFhMjYtNGFmY2MyMGNjNzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVbrmXbiFzhNXfpUAVAW6aOTzg4LI0uHyrEJ 3/jYypyCQyBKK3iAVaJWt1uckZZfsxR4o0gHonYNwSdOAX09x8UVk0dLUNcTXVvo 9v2X93lL+GyhBsMkqVRL/3JMXawWGbqMF3yst4lgmjTrXygRCHd+sDIHMHbP432K zx8VzymxaXEIbBVCQWyaengv+CsFiuj6S5iv9NsF7t8UWauEOK+q3u1uu8C6ttBW sM8cqNEkG4NmJGKEAMXELrLYMVbrcrAJwjJTyPSK3uccO3VPlojWzgw7h+vQU5JP C3IMEhmlXAdadYRKZ7dfI0r8IHxXyHCBNmjSHlLY0gNn0CGjZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkTuRhMosSzoANQi5c3hG9IkR5yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDg2MWI3YjgtNDdmMS0z ZmYyLWExNWQtZjU2NjkwNTJlNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrReoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGfSdS4RUJ3xPJR5XWRgn+P8LnqMJK+bdJ1FizMWsn1qQ1k0LaVPTad EsFJGPtm9u46m0HlIINh2kAZYVhlL+yLS62otLUttykrf/SvVquV1FrlPz+xO136 7VTBEc02FPJyCzNqrLHj2okiz1+tuxe57gXupbPQv2tLwrCVNwJQ05E4EtROxa9g dvZ1kEFFmrODpbZPpVZ65uPooVJiGGoYbDK7OSqVqh4O6nv+jO43sth1ene79aiF D08eVWkADSbrqmRtPpxcM9K3rb2PDDPah++sOZrGrDojB90ECqyjQEnZ2YafByte Yl10VG3evrcawOil2pRkB5LTXfB7msU= -----END CERTIFICATE-----Generated at Mon Mar 2 09:47:38 2026 by rpki-client