$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdc7e180-24a4-32a0-8c23-5f7ec1532975.roa File: bdc7e180-24a4-32a0-8c23-5f7ec1532975.roa (raw, json) Hash identifier: yYRwWd0CHJ3lPdA2fCdnj/rlO+AoBcNJA+MIOMj59T8= Subject key identifier: B1:83:E5:B2:97:D4:71:56:5C:79:1D:0E:15:58:2D:CF:9C:0C:F4:51 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CD4BD26DC05A0C14CB4597800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdc7e180-24a4-32a0-8c23-5f7ec1532975.roa Signing time: Wed 11 Feb 2026 20:07:07 +0000 ROA not before: Wed 11 Feb 2026 20:07:07 +0000 ROA not after: Tue 12 May 2026 19:07:07 +0000 asID: 19905 IP address blocks: 173.17.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:bd:26:dc:05:a0:c1:4c:b4:59:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 11 20:07:07 2026 GMT Not After : May 12 19:07:07 2026 GMT Subject: CN=aa2a5863-38dd-4d21-9896-730de2c01f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:dd:35:8c:67:c3:38:54:11:ba:51:4b:6b:dc: 2e:22:9a:b6:25:2f:35:1c:d2:2b:86:5d:83:5f:01: ac:dc:c5:f2:f2:89:68:20:9d:c2:da:26:ec:da:38: 41:db:3c:20:d0:6c:4a:34:f6:77:19:e0:36:26:c5: 38:e3:05:9e:34:a3:48:40:31:f6:72:b2:2c:e1:2e: 45:14:bd:d1:f9:16:02:05:d8:05:68:af:da:4a:13: 2b:98:0f:f7:1a:12:19:20:00:62:eb:80:e2:61:3e: c9:fa:fa:71:7f:b3:0e:c6:21:24:f8:d0:60:a7:8f: 6e:c4:e7:73:22:52:06:7e:4a:96:6a:c8:29:cc:36: a5:c9:c1:0c:17:4c:2f:e0:80:e5:8c:39:75:4c:09: 5c:0d:9a:74:76:07:74:73:d5:44:54:47:1b:5a:9d: 38:6d:aa:4a:92:94:3d:e4:17:08:17:00:b5:76:53: 20:15:68:02:45:d2:07:7f:a4:a2:69:9f:53:03:7e: ad:89:66:81:aa:73:30:01:45:fb:0c:cc:5c:ef:68: 94:bb:2e:3e:33:7a:d5:51:3d:b4:10:88:d7:77:41: 8e:6f:0c:60:7c:94:71:2f:b1:85:8f:d7:c7:00:6e: 54:d7:25:aa:27:82:e8:17:6e:4a:a4:f8:c7:44:d8: 80:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:83:E5:B2:97:D4:71:56:5C:79:1D:0E:15:58:2D:CF:9C:0C:F4:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdc7e180-24a4-32a0-8c23-5f7ec1532975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:56:3f:58:f7:e3:1b:4c:54:a1:92:28:d7:c1:33:fd:4a:f6: 74:3b:f7:1b:bb:1a:79:af:1b:c1:7f:3e:69:6c:44:8f:92:2b: e4:7a:d7:c5:4a:b3:cf:04:94:ec:12:98:ca:c4:ff:47:4f:7f: af:d6:d0:05:2a:b6:21:2b:ec:dd:6a:8b:57:b7:a2:07:bc:e7: 5d:ea:ba:88:58:97:93:f6:e4:b6:35:94:b1:89:13:bc:8c:ed: db:44:cb:76:12:3d:7e:16:10:39:ab:02:e2:cb:8b:37:df:9f: 87:15:eb:ef:3e:b4:a8:cd:27:84:bf:18:58:15:08:7b:eb:89: 7e:d6:dc:91:73:01:39:c5:99:eb:68:48:6a:1f:2b:56:17:a9: ce:2a:03:d9:5f:e1:b8:f0:ba:ba:5f:dc:cc:c0:2a:a6:8a:3b: c1:b4:0f:48:bb:72:45:ec:02:45:2b:b0:ed:08:b5:10:91:01: 05:3c:10:60:a8:bd:cf:9e:b1:e7:07:91:3d:32:89:63:cd:bc: b6:fe:b9:a0:a0:ee:be:3f:68:12:6b:2a:84:9c:e4:f4:94:73: 56:1d:a1:97:bb:7d:66:f0:c3:26:25:e4:b2:78:92:df:7c:8b: 38:9e:d0:1e:11:b0:7f:1a:ee:7f:58:7e:15:e6:97:9d:d5:db: 92:93:9b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUvSbcBaDBTLRZeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIxMTIwMDcwN1oXDTI2MDUxMjE5MDcwN1owLzEtMCsGA1UEAxMk YWEyYTU4NjMtMzhkZC00ZDIxLTk4OTYtNzMwZGUyYzAxZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt01jGfDOFQRulFLa9wuIpq2JS81HNIrhl2D XwGs3MXy8oloIJ3C2ibs2jhB2zwg0GxKNPZ3GeA2JsU44wWeNKNIQDH2crIs4S5F FL3R+RYCBdgFaK/aShMrmA/3GhIZIABi64DiYT7J+vpxf7MOxiEk+NBgp49uxOdz IlIGfkqWasgpzDalycEMF0wv4IDljDl1TAlcDZp0dgd0c9VEVEcbWp04bapKkpQ9 5BcIFwC1dlMgFWgCRdIHf6SiaZ9TA36tiWaBqnMwAUX7DMxc72iUuy4+M3rVUT20 EIjXd0GObwxgfJRxL7GFj9fHAG5U1yWqJ4LoF25KpPjHRNiArwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGD5bKX1HFWXHkdDhVYLc+cDPRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmRjN2UxODAtMjRhNC0z MmEwLThjMjMtNWY3ZWMxNTMyOTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1WP1j34xtMVKGSKNfBM/1K9nQ79xu7GnmvG8F/PmlsRI+SK+R618VK s88ElOwSmMrE/0dPf6/W0AUqtiEr7N1qi1e3oge8513quohYl5P25LY1lLGJE7yM 7dtEy3YSPX4WEDmrAuLLizffn4cV6+8+tKjNJ4S/GFgVCHvriX7W3JFzATnFmeto SGofK1YXqc4qA9lf4bjwurpf3MzAKqaKO8G0D0i7ckXsAkUrsO0ItRCRAQU8EGCo vc+esecHkT0yiWPNvLb+uaCg7r4/aBJrKoSc5PSUc1YdoZe7fWbwwyYl5LJ4kt98 izie0B4RsH8a7n9YfhXml53V25KTm8s= -----END CERTIFICATE-----Generated at Mon Mar 2 08:00:02 2026 by rpki-client