$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8524b35a-cc37-3774-9594-6c8bd6c6643d.roa File: 8524b35a-cc37-3774-9594-6c8bd6c6643d.roa (raw, json) Hash identifier: xKnMl4yw8GqzhyZ2iJlGVi7+qSgXqGFbKo2iQYrfSOY= Subject key identifier: 24:81:F3:DB:4B:90:F9:E7:85:DF:EF:92:A8:4E:A0:35:5F:3B:5C:6E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CE57D9DC57613C7D3B0805DA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8524b35a-cc37-3774-9594-6c8bd6c6643d.roa Signing time: Tue 17 Feb 2026 20:07:51 +0000 ROA not before: Tue 17 Feb 2026 20:07:51 +0000 ROA not after: Mon 18 May 2026 19:07:51 +0000 asID: 19905 IP address blocks: 173.20.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e5:7d:9d:c5:76:13:c7:d3:b0:80:5d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 17 20:07:51 2026 GMT Not After : May 18 19:07:51 2026 GMT Subject: CN=0ee24028-7a03-4dbc-bc70-017159ce20ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:2e:de:f0:1f:13:58:a3:30:d1:0e:b7:33: a1:f1:49:0f:12:b8:c3:ef:8d:ef:87:c8:c6:f1:78: 6d:e8:28:2f:58:bb:81:f3:aa:e5:08:6e:b4:c6:3b: 96:be:68:17:da:72:3d:9c:20:b4:b1:da:ec:57:67: fc:d2:30:77:65:e6:1b:b4:46:78:85:01:dd:e8:3f: 83:a7:6a:83:29:47:74:02:45:fc:99:13:54:94:1e: 01:58:4d:7b:09:39:6a:ce:c4:7a:9d:9d:dd:fd:a6: b8:87:2d:b9:e0:9a:63:24:79:12:1e:59:3c:c1:9e: 0c:af:51:fb:54:ec:57:ef:3b:1e:d4:da:0f:cf:b4: 45:04:57:76:37:c8:c9:54:cd:73:77:39:c1:93:e2: db:ed:d7:c4:41:11:7b:1f:52:f6:48:01:85:79:7a: d6:da:01:47:8c:76:f7:b7:80:4d:99:12:1f:31:f5: b3:5f:93:76:72:48:07:12:5f:b4:8a:da:7c:0a:06: 64:39:59:98:de:e5:e1:22:4f:5a:ac:6d:32:ce:d2: 55:40:c5:28:e1:34:b4:18:e4:48:3f:e5:14:76:f4: a5:00:c8:c5:1d:e3:1e:3b:ca:4a:63:a2:7f:a8:b0: 82:a7:c6:fd:9e:58:62:ad:20:c4:54:e4:98:59:e6: 74:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:81:F3:DB:4B:90:F9:E7:85:DF:EF:92:A8:4E:A0:35:5F:3B:5C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8524b35a-cc37-3774-9594-6c8bd6c6643d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:32:28:20:6a:41:34:c1:3e:19:a4:5f:c2:6e:cd:79:ea:5d: 99:ed:ee:c1:36:20:bd:e8:58:5f:5a:39:49:e7:c0:f8:58:34: 62:ee:1a:50:14:af:1a:77:e2:c0:d0:4b:6f:ee:ec:54:98:c5: ec:80:77:85:84:34:b1:40:52:90:05:52:bd:7b:8e:1c:4c:da: c7:5d:2c:50:fb:36:f7:5d:a7:6f:24:38:cf:69:b0:3b:3d:f3: 0a:4d:12:03:d8:eb:5d:8d:cd:b9:91:39:7c:0e:cc:56:fe:fb: 75:5b:c5:bc:db:29:4c:e1:1e:e2:81:ad:8e:b5:9e:78:ca:bd: 59:92:d2:29:4e:6e:38:04:64:e5:24:e9:87:d9:af:83:fd:45: 76:ac:8a:8f:e6:3d:22:10:31:38:a5:40:5e:c1:24:bd:d8:16: 68:6c:a2:ad:e2:fd:71:fa:b8:be:5b:89:58:0c:1c:43:c9:ab: b0:59:5b:69:39:13:50:55:71:a2:05:9a:dd:3f:e2:04:7e:b7: 56:ce:14:c4:c2:0d:71:d1:8d:d8:fa:d5:8c:ce:49:c1:17:86: ee:8f:14:53:c5:d6:46:57:fd:e1:b9:8f:93:14:f5:af:fc:40: e7:f4:b8:6d:f5:89:66:d0:44:c4:20:09:10:4d:74:6e:39:eb: b5:7a:65:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzlfZ3FdhPH07CAXaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIxNzIwMDc1MVoXDTI2MDUxODE5MDc1MVowLzEtMCsGA1UEAxMk MGVlMjQwMjgtN2EwMy00ZGJjLWJjNzAtMDE3MTU5Y2UyMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumgu3vAfE1ijMNEOtzOh8UkPErjD743vh8jG 8Xht6CgvWLuB86rlCG60xjuWvmgX2nI9nCC0sdrsV2f80jB3ZeYbtEZ4hQHd6D+D p2qDKUd0AkX8mRNUlB4BWE17CTlqzsR6nZ3d/aa4hy254JpjJHkSHlk8wZ4Mr1H7 VOxX7zse1NoPz7RFBFd2N8jJVM1zdznBk+Lb7dfEQRF7H1L2SAGFeXrW2gFHjHb3 t4BNmRIfMfWzX5N2ckgHEl+0itp8CgZkOVmY3uXhIk9arG0yztJVQMUo4TS0GORI P+UUdvSlAMjFHeMeO8pKY6J/qLCCp8b9nlhirSDEVOSYWeZ06QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSB89tLkPnnhd/vkqhOoDVfO1xuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODUyNGIzNWEtY2MzNy0z Nzc0LTk1OTQtNmM4YmQ2YzY2NDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRRWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEyKCBqQTTBPhmkX8JuzXnqXZnt7sE2IL3oWF9aOUnnwPhYNGLuGlAU rxp34sDQS2/u7FSYxeyAd4WENLFAUpAFUr17jhxM2sddLFD7Nvddp28kOM9psDs9 8wpNEgPY612NzbmROXwOzFb++3VbxbzbKUzhHuKBrY61nnjKvVmS0ilObjgEZOUk 6YfZr4P9RXasio/mPSIQMTilQF7BJL3YFmhsoq3i/XH6uL5biVgMHEPJq7BZW2k5 E1BVcaIFmt0/4gR+t1bOFMTCDXHRjdj61YzOScEXhu6PFFPF1kZX/eG5j5MU9a/8 QOf0uG31iWbQRMQgCRBNdG4567V6ZdU= -----END CERTIFICATE-----Generated at Mon Mar 2 00:59:22 2026 by rpki-client