$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23957716-4faa-35cf-b99d-97d2f25c2a2e.roa File: 23957716-4faa-35cf-b99d-97d2f25c2a2e.roa (raw, json) Hash identifier: sk7FnCbYkwEl9t6micP7v0/il35zgS36Jct4gDdjYC8= Subject key identifier: 14:F0:2F:6B:31:59:90:EB:AE:B6:F6:B9:93:C4:E1:91:3A:46:FF:38 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059B2D1000FD7BDE042CE380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23957716-4faa-35cf-b99d-97d2f25c2a2e.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.29.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:2d:10:00:fd:7b:de:04:2c:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=8ab95324-52d0-49e0-aecf-7b0bc0d376c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d2:e3:cf:62:78:a3:7b:69:91:20:51:77:55: 63:0c:b7:fb:71:1a:bc:0c:82:ca:91:f3:cf:9f:3b: b8:ac:0e:a4:8b:7a:c6:5e:6a:24:e2:a7:00:60:a3: 15:be:b8:f2:78:7e:1b:bf:ac:55:e9:c8:e1:2f:cd: 96:16:c9:47:1b:f9:71:91:ca:10:6c:76:76:fe:9c: 50:51:95:3a:f6:17:a6:67:0f:57:6c:9a:5e:f5:26: b1:cc:bb:24:b4:fd:2b:75:f8:10:fb:71:e9:15:a9: 0a:ce:23:cb:62:c7:04:be:f9:d9:95:f9:18:cf:c4: 18:25:d8:cb:c2:f1:22:be:32:8e:32:93:ec:df:41: 75:23:e5:eb:e2:1b:57:be:53:80:9b:4c:10:4c:94: 45:9e:8e:03:96:7d:2f:8b:16:a3:51:fe:0e:aa:c6: 23:81:60:87:90:c5:39:43:44:40:fe:67:b8:82:f0: 3a:c3:64:a4:6b:8e:33:8f:bc:63:c9:84:be:e6:a7: ab:f1:da:5d:4b:02:4b:32:8b:f6:4b:5c:06:1b:d8: 99:b0:ef:e8:d1:a4:75:a0:f9:76:3d:f8:d5:ec:9d: 03:89:7d:9c:c2:c0:3a:4f:97:3d:e5:b4:18:1a:c4: 29:df:81:56:a4:1a:83:ff:4a:50:ff:ad:9f:ff:88: 06:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F0:2F:6B:31:59:90:EB:AE:B6:F6:B9:93:C4:E1:91:3A:46:FF:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23957716-4faa-35cf-b99d-97d2f25c2a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:7b:7f:9f:c8:c6:a7:29:78:d4:47:d2:91:9a:2c:cc:e6:d8: aa:24:b5:ec:b1:a6:72:23:36:3e:01:6a:af:52:13:61:0e:a3: 75:36:c5:6d:cc:ee:59:10:35:dd:a9:dd:fe:1a:fe:f2:51:91: 44:cd:e8:4d:a6:a5:67:47:08:58:79:1a:49:42:ce:9c:c1:24: 08:73:80:1a:9b:c1:27:ee:38:78:39:19:71:a3:7c:09:d5:61: 75:33:92:db:b1:7c:ee:81:3a:10:46:95:5c:88:98:7a:da:e0: 34:bd:8c:ed:91:6d:91:fc:55:2b:41:06:b4:38:fa:75:f1:b2: de:8c:bd:a5:01:d3:7c:c2:98:77:bf:64:55:8d:59:67:19:26: 1a:f5:50:72:24:85:28:f4:5d:65:d7:aa:86:71:8a:f2:2a:48: 13:96:32:83:43:ad:e4:95:b2:81:17:85:0a:c8:76:bc:fc:6b: 39:b4:10:28:91:6a:41:c9:12:e7:ab:22:f9:47:16:bf:63:93: 0c:6f:ce:90:77:10:5f:8d:2c:11:54:c2:7c:91:3f:c0:26:2b: b7:5d:d5:8f:9c:89:56:d2:cb:d9:01:75:54:84:cb:77:17:92: aa:95:1c:bf:c6:82:d9:6c:bc:b2:73:85:58:88:93:69:c9:5c: 23:7a:e7:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fmy0QAP173gQs44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk OGFiOTUzMjQtNTJkMC00OWUwLWFlY2YtN2IwYmMwZDM3NmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNLjz2J4o3tpkSBRd1VjDLf7cRq8DILKkfPP nzu4rA6ki3rGXmok4qcAYKMVvrjyeH4bv6xV6cjhL82WFslHG/lxkcoQbHZ2/pxQ UZU69hemZw9XbJpe9SaxzLsktP0rdfgQ+3HpFakKziPLYscEvvnZlfkYz8QYJdjL wvEivjKOMpPs30F1I+Xr4htXvlOAm0wQTJRFno4Dln0vixajUf4OqsYjgWCHkMU5 Q0RA/me4gvA6w2Ska44zj7xjyYS+5qer8dpdSwJLMov2S1wGG9iZsO/o0aR1oPl2 PfjV7J0DiX2cwsA6T5c95bQYGsQp34FWpBqD/0pQ/62f/4gGkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTwL2sxWZDrrrb2uZPE4ZE6Rv84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjM5NTc3MTYtNGZhYS0z NWNmLWI5OWQtOTdkMmYyNWMyYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF7f5/IxqcpeNRH0pGaLMzm2KokteyxpnIjNj4Baq9SE2EOo3U2xW3M 7lkQNd2p3f4a/vJRkUTN6E2mpWdHCFh5GklCzpzBJAhzgBqbwSfuOHg5GXGjfAnV YXUzktuxfO6BOhBGlVyImHra4DS9jO2RbZH8VStBBrQ4+nXxst6MvaUB03zCmHe/ ZFWNWWcZJhr1UHIkhSj0XWXXqoZxivIqSBOWMoNDreSVsoEXhQrIdrz8azm0ECiR akHJEuerIvlHFr9jkwxvzpB3EF+NLBFUwnyRP8AmK7dd1Y+ciVbSy9kBdVSEy3cX kqqVHL/GgtlsvLJzhViIk2nJXCN65w8= -----END CERTIFICATE-----Generated at Sat Jun 13 17:19:34 2026 by rpki-client