$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/234624dd-0492-368b-81a2-5919e24d2165.roa File: 234624dd-0492-368b-81a2-5919e24d2165.roa (raw, json) Hash identifier: 0a7l+ElB/9Ai5r8iciojFlwkVuhyp5gvqEtu9hisLYY= Subject key identifier: 05:DB:B6:35:85:B6:B5:30:DF:E4:5A:D6:21:C9:BC:1A:C3:68:DD:47 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DF7A5CEB6DEFBF95ABE1DCE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/234624dd-0492-368b-81a2-5919e24d2165.roa Signing time: Wed 27 May 2026 01:00:14 +0000 ROA not before: Wed 27 May 2026 01:00:14 +0000 ROA not after: Tue 25 Aug 2026 01:00:14 +0000 asID: 30036 IP address blocks: 173.25.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f7:a5:ce:b6:de:fb:f9:5a:be:1d:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 27 01:00:14 2026 GMT Not After : Aug 25 01:00:14 2026 GMT Subject: CN=ea84f089-4ef4-4eba-805b-66526eaef69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:53:19:5f:6b:82:09:2c:15:6f:f5:b2:66:94: 71:ad:67:9d:5c:9f:00:63:b6:88:ec:be:5f:45:da: 4f:c5:ea:ee:2c:c7:99:77:c0:f5:71:65:74:26:2b: 1e:39:4d:ea:77:0f:c9:7d:24:0c:0f:1b:df:ba:d4: 40:ab:12:a6:c5:27:e3:1f:2b:2c:cf:63:67:09:13: fb:af:54:d5:3d:11:6b:ed:02:dc:70:8a:bb:ab:07: 6d:7b:70:e0:77:0a:b5:b6:6f:24:a8:c5:10:f0:94: b5:06:5c:be:26:fe:f0:0a:69:08:0b:ac:05:e0:f6: 1a:dd:22:cc:4e:81:8e:6e:be:79:a5:b0:8a:aa:93: 2a:23:b6:40:97:1e:63:88:18:08:3c:e7:13:9f:f1: 5c:f1:98:f2:ba:a2:31:7e:fd:bc:10:f3:0c:21:52: eb:6c:fe:3b:39:22:3f:10:a1:53:7f:81:06:0b:2f: 83:cc:05:03:e0:c3:0b:38:52:8f:d8:cc:fd:43:8c: d4:9a:ce:6c:7f:b1:48:d6:c1:fc:b5:dc:f9:17:38: fd:a3:ca:08:66:88:47:74:9e:1b:2a:53:20:f7:77: d4:f2:67:c1:de:d6:09:f4:71:18:7e:c3:02:68:7e: 98:91:bb:f4:74:50:76:eb:b7:47:5a:c9:2e:3d:3e: b5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DB:B6:35:85:B6:B5:30:DF:E4:5A:D6:21:C9:BC:1A:C3:68:DD:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/234624dd-0492-368b-81a2-5919e24d2165.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.25.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:94:07:8d:d6:82:ad:78:17:8e:f4:24:0e:06:2c:f0:51:6b: c5:13:38:25:68:e3:aa:52:48:36:7a:57:5a:28:3f:22:b4:9e: d3:19:50:ae:4e:91:20:cd:c1:b5:aa:34:1d:d2:27:68:62:34: 13:b6:17:5d:63:88:e4:2d:47:93:64:af:8b:77:14:27:23:a0: 24:16:fe:77:99:cd:f9:66:70:86:f6:bb:7e:2e:8d:9c:ec:02: f5:44:ee:05:d4:45:8a:1e:a5:9e:dd:3e:da:e5:3d:e7:fa:6e: 33:3b:6e:fd:27:af:4b:f3:98:44:c9:d4:26:ac:82:71:01:d3: 59:04:cb:65:4d:ea:bd:88:5c:e1:71:0e:50:a5:8f:93:79:70: 24:e2:6b:65:44:4e:e5:cd:a4:7f:3b:62:7b:f9:df:19:88:4d: 3b:ed:e2:9c:93:38:11:40:c4:79:e6:e0:ed:01:15:32:60:99: fb:7d:90:23:5e:ca:fc:1d:09:69:49:10:88:19:1a:e2:76:a7: 32:50:0a:b8:c5:ba:02:25:e6:1b:f9:ab:95:39:53:53:ab:3f: 82:91:32:1b:52:a5:67:6c:72:c1:91:84:82:4d:c1:75:1b:50: ad:d3:ee:9d:3f:70:c0:ab:31:7e:05:e6:e3:0b:e0:c3:ed:d4: aa:bb:12:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE33pc623vv5Wr4dzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyNzAxMDAxNFoXDTI2MDgyNTAxMDAxNFowLzEtMCsGA1UEAxMk ZWE4NGYwODktNGVmNC00ZWJhLTgwNWItNjY1MjZlYWVmNjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlMZX2uCCSwVb/WyZpRxrWedXJ8AY7aI7L5f RdpPxeruLMeZd8D1cWV0JiseOU3qdw/JfSQMDxvfutRAqxKmxSfjHyssz2NnCRP7 r1TVPRFr7QLccIq7qwdte3Dgdwq1tm8kqMUQ8JS1Bly+Jv7wCmkIC6wF4PYa3SLM ToGObr55pbCKqpMqI7ZAlx5jiBgIPOcTn/Fc8ZjyuqIxfv28EPMMIVLrbP47OSI/ EKFTf4EGCy+DzAUD4MMLOFKP2Mz9Q4zUms5sf7FI1sH8tdz5Fzj9o8oIZohHdJ4b KlMg93fU8mfB3tYJ9HEYfsMCaH6Ykbv0dFB267dHWskuPT61dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXbtjWFtrUw3+Ra1iHJvBrDaN1HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjM0NjI0ZGQtMDQ5Mi0z NjhiLTgxYTItNTkxOWUyNGQyMTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeUB43Wgq14F470JA4GLPBRa8UTOCVo46pSSDZ6V1ooPyK0ntMZUK5O kSDNwbWqNB3SJ2hiNBO2F11jiOQtR5Nkr4t3FCcjoCQW/neZzflmcIb2u34ujZzs AvVE7gXURYoepZ7dPtrlPef6bjM7bv0nr0vzmETJ1CasgnEB01kEy2VN6r2IXOFx DlClj5N5cCTia2VETuXNpH87Ynv53xmITTvt4pyTOBFAxHnm4O0BFTJgmft9kCNe yvwdCWlJEIgZGuJ2pzJQCrjFugIl5hv5q5U5U1OrP4KRMhtSpWdscsGRhIJNwXUb UK3T7p0/cMCrMX4F5uML4MPt1Kq7Ets= -----END CERTIFICATE-----Generated at Sat Jun 13 23:06:46 2026 by rpki-client