$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9de043b-ac25-3bdd-8daa-fa73c48ab2c9.roa File: a9de043b-ac25-3bdd-8daa-fa73c48ab2c9.roa (raw, json) Hash identifier: mPKx69BvQsVxAoppgET4Ck+x1kGG1piCKEri2RTpVw0= Subject key identifier: 39:D7:70:46:27:20:6C:C5:D1:3F:61:A6:4D:D6:25:84:EC:82:25:7D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059B3E684EA90B40FDC90524 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9de043b-ac25-3bdd-8daa-fa73c48ab2c9.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.23.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:3e:68:4e:a9:0b:40:fd:c9:05:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=21fe7b6e-8466-44d2-b61b-e8593966ec92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3a:83:00:94:65:32:6b:0e:fd:9b:f9:67:87: 00:68:89:88:e6:1c:71:2e:3f:3d:5b:41:3e:9c:03: 42:ff:3a:65:de:90:86:26:62:96:34:fa:32:cb:bd: 7b:04:0c:f1:4b:51:31:d6:5a:c6:c2:12:e2:6f:90: 83:ae:57:92:1f:28:44:bf:36:c6:4a:98:3a:71:66: f9:20:c2:42:14:a8:e0:a7:90:6c:8f:9d:2d:cc:31: 89:85:9a:18:25:95:6b:55:dd:cf:8d:2e:2e:d9:67: 35:01:6d:85:b5:81:9e:26:ba:a1:a0:44:c1:ec:1c: c0:9c:02:3d:88:f6:9a:dc:94:04:c2:07:97:90:6c: 05:2b:06:23:48:e8:93:f7:20:bd:cc:9f:3d:77:5c: d9:ab:24:f5:4b:4e:d0:24:c2:67:aa:12:73:aa:6e: cd:5b:53:8b:aa:0e:89:13:b1:2b:61:04:60:6e:e9: b0:d3:c1:74:bc:e3:16:c3:e7:c5:6c:a3:9f:4e:8b: 00:c1:44:86:4a:6c:c8:37:c5:a9:b7:22:0d:71:44: 22:78:14:60:35:f0:c3:fc:ba:d1:03:61:68:d5:3e: 9b:ff:a1:00:d6:86:d2:b6:cf:be:0a:1a:5d:a9:be: 1f:a2:ca:4d:65:86:2e:c1:1b:ae:63:de:fe:a1:e7: 3b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D7:70:46:27:20:6C:C5:D1:3F:61:A6:4D:D6:25:84:EC:82:25:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9de043b-ac25-3bdd-8daa-fa73c48ab2c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:65:63:37:e1:88:6a:2c:c5:0d:78:cf:c3:bb:44:b6:03:8f: ae:c8:77:e7:fe:72:1a:c2:8b:74:f1:5f:92:40:ce:11:9a:4e: 29:88:8a:f5:41:7f:11:d8:d9:02:9e:2a:ba:3b:aa:51:ad:6a: c3:31:4c:7c:62:2d:d7:08:64:4d:5a:9e:e1:e4:e8:35:3e:66: ab:51:79:99:b4:55:5b:b6:ec:e2:98:77:8b:36:11:d2:d8:a4: 6a:c4:39:2e:5a:95:c7:7c:df:67:6f:28:80:03:a9:07:97:c7: 4a:48:24:b5:e6:4f:97:f6:17:e7:8e:b6:bf:c0:83:4e:8e:31: a2:28:00:65:1e:1c:cf:fa:cc:29:8e:59:f9:a6:3b:2f:be:bc: 28:37:1d:c5:c7:d5:be:ce:c5:4e:ad:6f:00:e2:39:ca:69:cb: c5:02:4d:0e:a4:42:7f:8a:24:32:48:d2:ba:e2:6f:15:06:67: 97:9e:24:fa:d8:96:c6:3b:f2:09:0b:cb:9a:aa:5e:1c:3b:d7: cc:ad:9c:78:33:ca:5c:0f:23:47:a2:76:09:03:13:77:ef:13: 36:43:ca:b9:90:ac:58:c2:39:0b:14:d4:aa:4c:5a:e1:63:90: ed:53:8b:92:ee:25:1b:44:9a:4d:b9:6f:e9:eb:c1:f1:32:ee: 8d:a6:1a:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Fmz5oTqkLQP3JBSQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk MjFmZTdiNmUtODQ2Ni00NGQyLWI2MWItZTg1OTM5NjZlYzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTqDAJRlMmsO/Zv5Z4cAaImI5hxxLj89W0E+ nANC/zpl3pCGJmKWNPoyy717BAzxS1Ex1lrGwhLib5CDrleSHyhEvzbGSpg6cWb5 IMJCFKjgp5Bsj50tzDGJhZoYJZVrVd3PjS4u2Wc1AW2FtYGeJrqhoETB7BzAnAI9 iPaa3JQEwgeXkGwFKwYjSOiT9yC9zJ89d1zZqyT1S07QJMJnqhJzqm7NW1OLqg6J E7ErYQRgbumw08F0vOMWw+fFbKOfTosAwUSGSmzIN8WptyINcUQieBRgNfDD/LrR A2Fo1T6b/6EA1obSts++Chpdqb4fospNZYYuwRuuY97+oec71QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnXcEYnIGzF0T9hpk3WJYTsgiV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTlkZTA0M2ItYWMyNS0z YmRkLThkYWEtZmE3M2M0OGFiMmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRdIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRlYzfhiGosxQ14z8O7RLYDj67Id+f+chrCi3TxX5JAzhGaTimIivVB fxHY2QKeKro7qlGtasMxTHxiLdcIZE1anuHk6DU+ZqtReZm0VVu27OKYd4s2EdLY pGrEOS5alcd832dvKIADqQeXx0pIJLXmT5f2F+eOtr/Ag06OMaIoAGUeHM/6zCmO WfmmOy++vCg3HcXH1b7OxU6tbwDiOcppy8UCTQ6kQn+KJDJI0rribxUGZ5eeJPrY lsY78gkLy5qqXhw718ytnHgzylwPI0eidgkDE3fvEzZDyrmQrFjCOQsU1KpMWuFj kO1Ti5LuJRtEmk25b+nrwfEy7o2mGoM= -----END CERTIFICATE-----Generated at Sat Jun 13 16:01:30 2026 by rpki-client