$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a225a24e-a3c2-3e99-b9d9-9013830f3396.roa File: a225a24e-a3c2-3e99-b9d9-9013830f3396.roa (raw, json) Hash identifier: Uy3zqMgTa0xYGvei8UJ7he32EuHJJvoq5a3uTIUePQw= Subject key identifier: 22:08:4A:EF:3C:58:21:36:35:39:45:82:D5:48:E4:40:9F:D0:16:85 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059C68689352C306DBBF3EC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a225a24e-a3c2-3e99-b9d9-9013830f3396.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.23.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:68:68:93:52:c3:06:db:bf:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=df6a7838-0916-4669-9987-fc8c6fff5ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bd:7b:9a:86:66:5f:7a:71:61:cc:a6:fc:94: 8c:72:72:31:b5:99:38:af:dc:da:e3:1b:c2:43:59: 25:e1:7f:46:fb:d5:76:6f:a4:79:8f:16:08:0c:57: 2b:99:2f:22:ce:52:37:11:cc:b8:54:99:d2:4b:61: 45:9f:87:02:e6:4a:de:86:7b:2a:33:e1:1c:45:36: b5:44:0e:03:64:36:ae:19:e1:0b:f4:0d:71:2a:03: 4d:df:d2:e5:a1:d4:80:94:ae:f9:52:07:ba:20:35: ef:91:80:7c:25:68:35:8d:fe:69:c6:f1:95:21:2d: 8d:06:7b:d6:8b:22:01:c4:18:21:4d:ad:f8:ef:93: f3:95:4e:8c:12:3f:1c:18:dd:ad:e3:b0:45:6a:04: 84:ca:b0:e5:26:92:f9:1e:6e:2f:7b:36:f4:ff:90: 73:87:6b:c2:ab:a8:46:a8:51:70:eb:80:d4:0f:37: b4:16:80:dd:ed:ff:9f:06:d7:4c:86:b6:ad:ef:fe: 49:22:51:ab:3f:dd:a7:8e:e4:a4:75:30:5f:47:5a: a7:00:7c:e7:39:ed:6e:d6:8c:68:12:8c:6f:2a:ac: 57:03:1f:4b:b1:9b:9f:b5:19:bf:c2:d3:a8:24:da: ad:b4:11:2e:0b:5e:14:46:95:c0:c6:58:95:f2:04: 07:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:08:4A:EF:3C:58:21:36:35:39:45:82:D5:48:E4:40:9F:D0:16:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a225a24e-a3c2-3e99-b9d9-9013830f3396.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:62:14:9f:9f:7e:3e:2c:46:85:ee:16:cf:c4:f8:da:a9:23: af:7c:91:e4:0c:2d:93:84:4d:e6:6f:43:6f:c2:33:62:0e:2f: 21:96:8c:11:3d:3d:b5:8a:0e:db:63:87:3a:5f:58:ad:60:c3: 20:92:e8:0a:7f:e8:64:30:72:40:4b:04:38:6e:3e:07:0d:eb: 75:bd:00:1b:06:07:cc:e1:3a:7b:cb:54:b5:44:cd:95:8e:fa: da:b7:83:b3:b8:8b:f6:7a:b1:fa:88:83:e5:12:2d:fb:f0:df: 63:dd:58:99:7a:57:e0:75:0f:cc:95:44:04:19:6b:ca:96:2d: 17:51:ee:9d:7a:bb:74:2c:29:57:6f:bc:84:52:74:dd:99:0c: 02:62:2b:7b:fe:e8:bb:8b:26:b4:fb:47:69:59:9c:72:97:24: 86:27:e3:a7:a7:f2:62:4d:76:05:15:9a:e2:0e:91:ba:6e:4c: 88:30:bc:31:50:e1:f9:a8:86:8a:1a:20:ec:67:9c:6c:79:f8: 28:d2:86:95:95:48:77:fe:be:7b:63:1f:04:ed:ea:ef:e1:4e: 4e:57:03:02:c1:02:44:60:bb:9b:33:11:90:c8:3c:3c:2e:f7: 5d:5d:f0:27:cc:51:70:3a:74:59:11:45:47:05:dd:65:cd:ca: f9:7b:e4:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnGhok1LDBtu/PsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZGY2YTc4MzgtMDkxNi00NjY5LTk5ODctZmM4YzZmZmY1ZWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb17moZmX3pxYcym/JSMcnIxtZk4r9za4xvC Q1kl4X9G+9V2b6R5jxYIDFcrmS8izlI3Ecy4VJnSS2FFn4cC5krehnsqM+EcRTa1 RA4DZDauGeEL9A1xKgNN39LlodSAlK75Uge6IDXvkYB8JWg1jf5pxvGVIS2NBnvW iyIBxBghTa3475PzlU6MEj8cGN2t47BFagSEyrDlJpL5Hm4vezb0/5Bzh2vCq6hG qFFw64DUDze0FoDd7f+fBtdMhrat7/5JIlGrP92njuSkdTBfR1qnAHznOe1u1oxo EoxvKqxXAx9LsZuftRm/wtOoJNqttBEuC14URpXAxliV8gQHrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIISu88WCE2NTlFgtVI5ECf0BaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIyNWEyNGUtYTNjMi0z ZTk5LWI5ZDktOTAxMzgzMGYzMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5iFJ+ffj4sRoXuFs/E+NqpI698keQMLZOETeZvQ2/CM2IOLyGWjBE9 PbWKDttjhzpfWK1gwyCS6Ap/6GQwckBLBDhuPgcN63W9ABsGB8zhOnvLVLVEzZWO +tq3g7O4i/Z6sfqIg+USLfvw32PdWJl6V+B1D8yVRAQZa8qWLRdR7p16u3QsKVdv vIRSdN2ZDAJiK3v+6LuLJrT7R2lZnHKXJIYn46en8mJNdgUVmuIOkbpuTIgwvDFQ 4fmohooaIOxnnGx5+CjShpWVSHf+vntjHwTt6u/hTk5XAwLBAkRgu5szEZDIPDwu 911d8CfMUXA6dFkRRUcF3WXNyvl75M0= -----END CERTIFICATE-----Generated at Sat Jun 13 20:02:45 2026 by rpki-client