$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdc03c6a-67dd-311e-ad5a-c56dde3a4589.roa File: bdc03c6a-67dd-311e-ad5a-c56dde3a4589.roa (raw, json) Hash identifier: AiefrDkEvf7E4j9aBx9Fig7cb4zbLtI8BFkX+tdhiyw= Subject key identifier: 85:BC:1C:45:76:D8:37:12:B4:84:F4:FD:72:E5:FE:0A:C3:FF:52:2C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CCFD731CE07C2520072189980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdc03c6a-67dd-311e-ad5a-c56dde3a4589.roa Signing time: Tue 10 Feb 2026 02:00:31 +0000 ROA not before: Tue 10 Feb 2026 02:00:31 +0000 ROA not after: Mon 11 May 2026 01:00:31 +0000 asID: 30036 IP address blocks: 173.24.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cf:d7:31:ce:07:c2:52:00:72:18:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 10 02:00:31 2026 GMT Not After : May 11 01:00:31 2026 GMT Subject: CN=fe3472f7-79fd-4c9d-b7e9-59a6683896cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:73:8d:6e:1f:57:88:75:85:4e:b9:46:58:ae: f7:15:f1:69:36:96:6b:11:5e:f2:cb:13:c1:8d:95: 44:0f:15:c1:a6:59:26:95:fc:31:e7:70:be:02:d4: 02:4b:94:06:18:3c:ff:62:68:54:71:40:48:0e:e4: 7f:a3:1f:cb:9b:83:1c:f8:a4:10:cc:ed:75:cf:f7: 3e:7a:13:7a:86:5e:b5:90:3a:71:ec:b4:3d:88:3e: 27:d2:cd:b1:94:69:29:a0:32:9b:7e:2a:c1:00:07: ef:05:27:be:84:47:94:c5:41:aa:07:0f:82:c7:f0: 27:23:fa:09:8c:1f:b3:32:39:46:1f:a8:10:cd:89: 23:ec:49:e7:b6:49:3b:45:b8:26:74:37:96:3a:43: b3:07:8c:e4:98:5e:5a:96:d2:7d:18:5e:52:eb:7c: 0d:d1:18:b5:1f:12:c3:3c:c2:84:cf:d1:1a:5f:c8: d9:a1:85:ec:1d:29:81:23:dc:14:40:47:eb:c8:4d: ad:d5:ae:64:9c:55:98:d4:3e:f8:0b:54:50:a6:5a: ed:b8:51:59:2b:10:67:b5:4f:3e:94:e1:4f:77:5b: 53:89:1e:88:4e:65:a0:f9:98:85:c5:e6:eb:9c:0f: d2:5c:42:81:50:c5:6a:bb:29:e9:ab:ba:3e:2e:f4: d9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BC:1C:45:76:D8:37:12:B4:84:F4:FD:72:E5:FE:0A:C3:FF:52:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdc03c6a-67dd-311e-ad5a-c56dde3a4589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:95:74:f9:00:28:ef:9f:ed:c9:ba:d9:88:4c:40:77:34:df: 35:33:1d:3d:45:19:03:ab:b8:c3:20:82:1c:a4:a0:3b:b8:25: 5c:3f:d5:64:ac:07:7c:c3:fa:c1:77:a2:96:0b:f5:b3:3a:1c: 03:ec:45:ab:51:41:e8:ec:98:44:0a:51:20:8a:47:25:14:9a: ae:ca:b2:5a:bd:8a:ee:72:a9:8c:82:66:ec:88:1a:a0:45:26: 05:ea:f5:ff:93:2f:75:35:04:db:9d:6c:12:d5:31:da:c5:8d: 03:a5:94:e9:79:1e:e5:e7:c2:49:7d:9d:cc:d9:10:2c:d5:6f: a8:3b:0c:77:93:64:a2:21:07:7e:2c:31:f8:d1:11:7b:81:88: 2d:bf:09:f4:68:96:2f:38:50:42:0a:15:37:b0:57:b9:ca:6c: 3c:d2:b9:4b:6e:cb:c2:52:03:ae:94:69:e0:43:fc:d5:db:36: d3:df:47:1e:7d:e4:54:22:49:7f:22:a9:22:6f:76:10:72:3a: ab:2a:7c:00:a5:f9:8c:8a:4f:b2:8b:e8:df:68:41:7e:96:cd: df:ac:ec:f0:41:83:da:fc:d4:8f:31:17:d5:a7:33:eb:c8:44: 24:5d:6e:39:1e:0a:f5:68:74:be:4c:30:3e:73:b8:f4:df:2b: 21:de:6c:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzP1zHOB8JSAHIYmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIxMDAyMDAzMVoXDTI2MDUxMTAxMDAzMVowLzEtMCsGA1UEAxMk ZmUzNDcyZjctNzlmZC00YzlkLWI3ZTktNTlhNjY4Mzg5NmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3ONbh9XiHWFTrlGWK73FfFpNpZrEV7yyxPB jZVEDxXBplkmlfwx53C+AtQCS5QGGDz/YmhUcUBIDuR/ox/Lm4Mc+KQQzO11z/c+ ehN6hl61kDpx7LQ9iD4n0s2xlGkpoDKbfirBAAfvBSe+hEeUxUGqBw+Cx/AnI/oJ jB+zMjlGH6gQzYkj7Enntkk7RbgmdDeWOkOzB4zkmF5altJ9GF5S63wN0Ri1HxLD PMKEz9EaX8jZoYXsHSmBI9wUQEfryE2t1a5knFWY1D74C1RQplrtuFFZKxBntU8+ lOFPd1tTiR6ITmWg+ZiFxebrnA/SXEKBUMVquynpq7o+LvTZqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIW8HEV22DcStIT0/XLl/grD/1IsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmRjMDNjNmEtNjdkZC0z MTFlLWFkNWEtYzU2ZGRlM2E0NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuVdPkAKO+f7cm62YhMQHc03zUzHT1FGQOruMMgghykoDu4JVw/1WSs B3zD+sF3opYL9bM6HAPsRatRQejsmEQKUSCKRyUUmq7Kslq9iu5yqYyCZuyIGqBF JgXq9f+TL3U1BNudbBLVMdrFjQOllOl5HuXnwkl9nczZECzVb6g7DHeTZKIhB34s MfjREXuBiC2/CfRoli84UEIKFTewV7nKbDzSuUtuy8JSA66UaeBD/NXbNtPfRx59 5FQiSX8iqSJvdhByOqsqfACl+YyKT7KL6N9oQX6Wzd+s7PBBg9r81I8xF9WnM+vI RCRdbjkeCvVodL5MMD5zuPTfKyHebFo= -----END CERTIFICATE-----Generated at Sun Mar 1 23:15:50 2026 by rpki-client