$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0da25129-ae0f-3010-a134-8576584b612a.roa File: 0da25129-ae0f-3010-a134-8576584b612a.roa (raw, json) Hash identifier: j8+bzEXyk5ABST7ZoIBPhFco3Vltu+kbkX29G78Uo1I= Subject key identifier: 30:36:25:25:67:40:6F:E1:55:1A:47:44:49:C3:5F:0B:2F:5B:A3:DF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CEFF22968034880B0BF43C380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0da25129-ae0f-3010-a134-8576584b612a.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 19905 IP address blocks: 173.20.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:29:68:03:48:80:b0:bf:43:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=ab4128d7-06db-40d9-ae95-45a87b92b474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cd:27:1a:bd:7b:b4:11:8f:e1:74:98:a8:cf: 32:a3:8d:36:81:1e:5e:a5:db:03:20:f1:b7:4f:72: ff:f2:0e:3a:b2:ac:1e:27:39:e4:a8:11:28:80:6c: 37:95:3f:b8:5b:20:51:01:ac:78:17:3b:d4:fa:07: b1:c5:24:3c:90:4f:f3:f8:ae:2a:7d:e0:1c:39:98: 68:1f:a2:fd:20:e8:57:16:db:1f:d1:77:07:64:94: a0:55:c9:06:82:c4:9b:df:15:f9:00:ed:f2:98:d6: ad:39:b5:51:ba:88:fc:62:36:0c:59:0e:62:81:d3: 4a:27:f3:a4:cd:42:6f:62:7a:a2:b5:9a:c5:a8:55: 37:ac:48:e7:44:a5:d3:01:4c:5c:e1:3e:9d:7b:a0: 1f:a0:bc:bd:67:47:da:eb:e6:31:4a:ed:89:4b:19: c7:0e:7e:0e:7a:c1:6f:a2:64:94:71:c8:ef:f9:d9: c8:18:b2:ba:db:b3:cd:dc:2e:cc:09:18:a1:66:39: 50:ec:a7:5d:cc:ce:01:90:5f:94:04:7f:49:60:d9: b6:e5:61:06:e5:fb:7b:6d:f3:93:04:5c:91:30:42: 7a:6a:31:78:b4:6c:52:11:69:46:23:c2:15:72:e8: ef:21:d6:0e:53:47:ec:df:1a:e0:16:0c:df:07:74: e5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:36:25:25:67:40:6F:E1:55:1A:47:44:49:C3:5F:0B:2F:5B:A3:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0da25129-ae0f-3010-a134-8576584b612a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:03:b6:a5:f3:e0:b5:3d:1e:4d:d1:bd:03:d5:70:a5:bd:10: 35:48:00:44:51:1c:cc:34:4f:1f:5e:d6:a6:b2:e3:52:6e:ca: 76:88:24:08:51:66:82:78:02:bf:5c:2b:ec:67:3e:c2:8f:73: 94:fb:cc:e8:6b:ae:2a:55:de:1b:73:60:3a:3e:90:12:6a:12: 58:35:ec:25:ab:ab:a1:87:db:f4:04:0d:9d:98:05:5d:54:29: 4a:9f:13:3a:de:c2:42:5b:80:60:78:0d:fc:cf:b9:60:37:c2: 34:bf:86:01:b2:5f:55:00:d7:71:7b:d2:3a:06:23:ff:b8:2b: 4a:e4:8c:25:53:ee:8f:fd:55:28:42:da:3c:71:fe:2c:c5:3a: a9:ce:cc:98:1c:3b:f0:a8:65:e5:8d:25:f0:a7:4f:ab:43:b0: c6:53:55:b2:f5:60:10:78:83:86:ef:bf:a5:57:e5:d3:d2:3a: 5a:5f:20:0d:0f:f7:99:63:ea:a1:66:50:a0:08:1b:97:fa:80: f5:e8:fe:f3:5e:3f:fe:22:7c:ea:d8:03:ed:8e:f6:eb:5e:bd: f8:17:a8:05:39:5f:53:c1:b8:bc:eb:a9:bc:d9:9e:75:95:22: 37:8a:a3:38:8a:52:89:42:5d:43:70:50:40:af:eb:8e:ca:e9: e7:b6:48:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8iloA0iAsL9Dw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk YWI0MTI4ZDctMDZkYi00MGQ5LWFlOTUtNDVhODdiOTJiNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus0nGr17tBGP4XSYqM8yo402gR5epdsDIPG3 T3L/8g46sqweJznkqBEogGw3lT+4WyBRAax4FzvU+gexxSQ8kE/z+K4qfeAcOZho H6L9IOhXFtsf0XcHZJSgVckGgsSb3xX5AO3ymNatObVRuoj8YjYMWQ5igdNKJ/Ok zUJvYnqitZrFqFU3rEjnRKXTAUxc4T6de6AfoLy9Z0fa6+YxSu2JSxnHDn4OesFv omSUccjv+dnIGLK627PN3C7MCRihZjlQ7KddzM4BkF+UBH9JYNm25WEG5ft7bfOT BFyRMEJ6ajF4tGxSEWlGI8IVcujvIdYOU0fs3xrgFgzfB3TlRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDA2JSVnQG/hVRpHREnDXwsvW6PfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGRhMjUxMjktYWUwZi0z MDEwLWExMzQtODU3NjU4NGI2MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcDtqXz4LU9Hk3RvQPVcKW9EDVIAERRHMw0Tx9e1qay41JuynaIJAhR ZoJ4Ar9cK+xnPsKPc5T7zOhrripV3htzYDo+kBJqElg17CWrq6GH2/QEDZ2YBV1U KUqfEzrewkJbgGB4DfzPuWA3wjS/hgGyX1UA13F70joGI/+4K0rkjCVT7o/9VShC 2jxx/izFOqnOzJgcO/CoZeWNJfCnT6tDsMZTVbL1YBB4g4bvv6VX5dPSOlpfIA0P 95lj6qFmUKAIG5f6gPXo/vNeP/4ifOrYA+2O9utevfgXqAU5X1PBuLzrqbzZnnWV IjeKoziKUolCXUNwUECv647K6ee2SOY= -----END CERTIFICATE-----Generated at Mon Mar 2 17:55:27 2026 by rpki-client