$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa File: a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa (raw, json) Hash identifier: 7SUEczVJPgFAeJoJJqBPF1whPbhiC4qb6MlsnTV8Y+c= Subject key identifier: DE:FE:FE:66:B9:87:8A:C4:31:5E:D4:73:DB:56:DA:14:14:AF:93:26 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059B3ABF0B249283DB4E7880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.23.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:3a:bf:0b:24:92:83:db:4e:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=5b986edc-4530-4de3-a9cd-ebebcdf7b1db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d0:75:eb:22:e5:13:87:67:dd:1b:a0:a5:b4: bb:d5:cf:e8:0b:95:a0:fd:87:22:40:9c:45:85:20: ce:2c:d4:2f:2a:56:c6:44:91:b7:9b:20:22:14:94: e6:49:aa:c4:da:5b:5e:92:2f:db:59:e2:7a:49:e0: f0:24:21:82:7f:d7:dd:97:54:19:b7:c6:59:4d:31: a2:16:86:1b:4e:6e:4c:19:6c:97:d3:d8:65:43:82: ec:1b:63:d7:ff:d5:38:73:ba:cf:78:c0:f0:55:a9: 0c:63:18:dd:75:52:3d:65:77:c0:ba:c6:c4:67:0a: 31:5c:1c:52:40:4e:31:08:8a:41:74:d0:be:6e:47: b3:e1:25:dd:c0:9a:44:88:2e:99:71:92:dc:1a:ae: f1:ce:c5:07:43:80:14:63:a2:a2:ae:66:1b:62:66: db:ce:e1:9e:51:aa:e3:d4:10:30:93:c2:28:8a:22: 5c:4f:ba:f9:c9:fc:42:66:86:bc:15:b6:3a:11:65: af:00:03:42:d2:27:70:56:da:1a:3a:0f:be:ad:ed: e4:0f:63:7e:74:4a:af:eb:93:a6:a0:a3:c2:f9:be: 98:0c:ec:e3:20:6f:d9:35:9b:40:b3:15:c2:12:94: 19:89:fb:f7:bd:8f:48:e7:94:79:21:70:82:94:49: 5a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FE:FE:66:B9:87:8A:C4:31:5E:D4:73:DB:56:DA:14:14:AF:93:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a65898a6-1682-3d49-9ac1-8856bbbccf5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9a:fa:6e:02:ca:68:a3:0c:64:9b:00:7a:6b:3b:b7:d9:0b: 1a:f3:6e:79:cf:c2:f0:0a:dc:18:bb:d9:38:58:fc:bc:06:02: c6:67:05:28:63:0a:5e:e7:49:70:0f:99:2e:2d:99:75:a1:a3: 47:c2:8b:be:55:89:03:7e:3e:67:e4:5e:63:dc:04:8f:4a:f6: 46:9f:04:a9:86:4e:1b:46:86:3f:64:c0:81:64:c7:39:23:4a: cb:33:e5:9b:e6:08:d1:85:6a:d3:2a:88:17:0d:41:ae:92:8e: 89:9a:27:a9:bc:dd:f6:1a:70:ca:db:ed:d5:d3:8a:84:f0:59: 76:d3:7a:82:18:da:5e:c0:2e:d3:b6:2f:c8:30:9e:c1:16:b0: 9c:5e:8b:69:53:1b:6b:10:96:a6:1f:68:fe:2c:c7:31:72:11: 0f:16:54:c6:1e:72:44:c3:9a:eb:2a:71:54:d4:9e:4a:ee:65: 8c:b4:fc:96:9a:b1:e3:ef:c1:d4:a2:31:2b:cb:7c:ac:99:3b: b3:88:7a:f9:b2:c5:62:33:40:a9:4c:09:2c:ed:a4:45:c2:d3: ef:ff:2a:f1:d0:1d:7d:5f:ef:5a:a7:fd:85:fe:b4:d8:19:3f: 2e:04:d0:d1:66:bb:e7:a1:b1:99:52:d5:7b:c2:0d:e2:da:03: 95:73:59:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fmzq/CySSg9tOeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk NWI5ODZlZGMtNDUzMC00ZGUzLWE5Y2QtZWJlYmNkZjdiMWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNB16yLlE4dn3RugpbS71c/oC5Wg/YciQJxF hSDOLNQvKlbGRJG3myAiFJTmSarE2lteki/bWeJ6SeDwJCGCf9fdl1QZt8ZZTTGi FoYbTm5MGWyX09hlQ4LsG2PX/9U4c7rPeMDwVakMYxjddVI9ZXfAusbEZwoxXBxS QE4xCIpBdNC+bkez4SXdwJpEiC6ZcZLcGq7xzsUHQ4AUY6KirmYbYmbbzuGeUarj 1BAwk8IoiiJcT7r5yfxCZoa8FbY6EWWvAANC0idwVtoaOg++re3kD2N+dEqv65Om oKPC+b6YDOzjIG/ZNZtAsxXCEpQZifv3vY9I55R5IXCClElagQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7+/ma5h4rEMV7Uc9tW2hQUr5MmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTY1ODk4YTYtMTY4Mi0z ZDQ5LTlhYzEtODg1NmJiYmNjZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEma+m4CymijDGSbAHprO7fZCxrzbnnPwvAK3Bi72ThY/LwGAsZnBShj Cl7nSXAPmS4tmXWho0fCi75ViQN+PmfkXmPcBI9K9kafBKmGThtGhj9kwIFkxzkj Sssz5ZvmCNGFatMqiBcNQa6SjomaJ6m83fYacMrb7dXTioTwWXbTeoIY2l7ALtO2 L8gwnsEWsJxei2lTG2sQlqYfaP4sxzFyEQ8WVMYeckTDmusqcVTUnkruZYy0/Jaa sePvwdSiMSvLfKyZO7OIevmyxWIzQKlMCSztpEXC0+//KvHQHX1f71qn/YX+tNgZ Py4E0NFmu+ehsZlS1XvCDeLaA5VzWaA= -----END CERTIFICATE-----Generated at Sat Jun 13 18:02:33 2026 by rpki-client