$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35525920-df2a-3b38-8b25-a1c34fec555b.roa File: 35525920-df2a-3b38-8b25-a1c34fec555b.roa (raw, json) Hash identifier: 11tNUNa/kJStY678THwAHZqjx2ay94VycEhwV5MNJKI= Subject key identifier: 2A:A4:39:4A:86:44:BA:AF:06:11:11:84:5A:1A:EF:B0:AC:7B:CD:AF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CA8C19A7A2C8219F192FF4600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35525920-df2a-3b38-8b25-a1c34fec555b.roa Signing time: Tue 27 Jan 2026 02:00:29 +0000 ROA not before: Tue 27 Jan 2026 02:00:29 +0000 ROA not after: Mon 27 Apr 2026 01:00:29 +0000 asID: 30036 IP address blocks: 173.23.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a8:c1:9a:7a:2c:82:19:f1:92:ff:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 27 02:00:29 2026 GMT Not After : Apr 27 01:00:29 2026 GMT Subject: CN=0dee09a4-dcaf-41f4-941c-56cab069da9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e9:63:11:6f:2d:fc:9e:5c:f2:79:e4:a7:da: 18:42:d9:73:87:47:d8:6a:cf:b8:04:8e:b8:d3:8a: 1a:8a:22:11:0c:bf:ae:c9:ce:ae:b0:77:4e:c0:2a: e6:c7:91:fe:87:c7:44:80:aa:84:6d:d9:41:3d:40: b4:dc:4e:8f:d2:67:72:8d:77:d9:51:b7:0f:b4:55: 20:b6:a2:52:61:66:0d:61:84:1a:c3:00:d7:3d:83: 02:77:9f:6e:89:80:b2:8f:8e:94:ff:6e:89:51:16: 6f:56:b0:fb:a7:5b:d1:f0:a7:a0:80:42:a1:ed:5e: 29:fe:63:1f:77:2d:cf:18:5b:f4:dd:ea:73:d6:03: 29:cf:4c:3a:db:63:07:71:a3:7e:9a:85:a8:f4:06: 75:9c:f0:e6:98:44:00:3c:e1:bd:25:2c:20:19:9d: 9b:36:86:8b:5a:ac:0e:82:5e:6c:fb:a8:f1:25:57: c9:52:b3:6a:e5:06:19:9d:22:41:25:be:79:3f:a0: 10:a1:39:94:71:45:6b:59:6f:0b:61:ca:2f:88:c1: 93:45:9c:5a:b8:93:16:25:3b:d5:63:a7:ad:85:ec: 06:ea:3d:8a:75:8b:52:75:c2:57:2e:ee:3d:e2:f6: c0:35:3c:0f:31:90:c2:35:b1:57:c8:9a:cc:74:1d: 1c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A4:39:4A:86:44:BA:AF:06:11:11:84:5A:1A:EF:B0:AC:7B:CD:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/35525920-df2a-3b38-8b25-a1c34fec555b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:64:83:8f:6f:d3:2a:8a:74:fd:a2:cb:3a:a1:67:d3:42:28: 93:07:52:33:86:f7:7c:8d:81:1a:3b:9e:e6:f1:ab:bc:f6:e6: 24:6a:30:11:7a:4b:88:b5:d2:2e:07:97:12:00:74:62:e4:8f: e1:b8:ae:6b:eb:57:24:0c:4a:49:48:c0:36:1e:49:dc:0b:92: b1:74:53:b4:3d:d1:92:d7:0e:b4:a4:62:ec:40:15:5c:ff:f3: f3:de:18:21:2d:9d:41:ce:87:68:a4:c3:a2:9b:71:19:72:23: c6:0c:05:ff:c7:c4:0d:9d:80:9e:71:1f:73:71:42:bc:b5:19: 36:8f:0f:55:fa:87:70:3c:12:ce:53:85:48:45:b0:4d:2a:93: db:5f:0d:15:72:78:93:e8:16:8e:22:89:22:05:9a:b4:34:44: c4:e6:39:a8:e9:d9:14:46:4d:ee:85:b8:5c:b2:f4:ba:5f:8d: e8:6c:77:52:30:4e:e7:5d:cf:0a:ce:21:7e:57:59:9e:1e:20: eb:fd:68:68:67:e2:5c:1f:49:65:8c:a0:de:bc:4b:dc:50:8c: 76:5d:26:66:4f:f7:80:22:e3:66:43:b0:55:88:e0:1e:aa:2a: 8e:c1:97:16:99:76:15:a2:54:5e:39:d5:db:e1:01:7e:5a:25: 59:29:fd:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyowZp6LIIZ8ZL/RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyNzAyMDAyOVoXDTI2MDQyNzAxMDAyOVowLzEtMCsGA1UEAxMk MGRlZTA5YTQtZGNhZi00MWY0LTk0MWMtNTZjYWIwNjlkYTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeljEW8t/J5c8nnkp9oYQtlzh0fYas+4BI64 04oaiiIRDL+uyc6usHdOwCrmx5H+h8dEgKqEbdlBPUC03E6P0mdyjXfZUbcPtFUg tqJSYWYNYYQawwDXPYMCd59uiYCyj46U/26JURZvVrD7p1vR8KeggEKh7V4p/mMf dy3PGFv03epz1gMpz0w622MHcaN+moWo9AZ1nPDmmEQAPOG9JSwgGZ2bNoaLWqwO gl5s+6jxJVfJUrNq5QYZnSJBJb55P6AQoTmUcUVrWW8LYcoviMGTRZxauJMWJTvV Y6ethewG6j2KdYtSdcJXLu494vbANTwPMZDCNbFXyJrMdB0clwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqkOUqGRLqvBhERhFoa77Cse82vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzU1MjU5MjAtZGYyYS0z YjM4LThiMjUtYTFjMzRmZWM1NTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdkg49v0yqKdP2iyzqhZ9NCKJMHUjOG93yNgRo7nubxq7z25iRqMBF6 S4i10i4HlxIAdGLkj+G4rmvrVyQMSklIwDYeSdwLkrF0U7Q90ZLXDrSkYuxAFVz/ 8/PeGCEtnUHOh2ikw6KbcRlyI8YMBf/HxA2dgJ5xH3NxQry1GTaPD1X6h3A8Es5T hUhFsE0qk9tfDRVyeJPoFo4iiSIFmrQ0RMTmOajp2RRGTe6FuFyy9Lpfjehsd1Iw TuddzwrOIX5XWZ4eIOv9aGhn4lwfSWWMoN68S9xQjHZdJmZP94Ai42ZDsFWI4B6q Ko7BlxaZdhWiVF451dvhAX5aJVkp/WU= -----END CERTIFICATE-----Generated at Sun Mar 1 23:15:57 2026 by rpki-client