$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be170823-1607-31e2-ae50-fd110376686b.roa File: be170823-1607-31e2-ae50-fd110376686b.roa (raw, json) Hash identifier: s2minz1n1uugQtgPf/2gBVn6VYklljOZZPjJE7azLsc= Subject key identifier: 88:DC:21:91:79:24:EA:08:16:E4:30:2A:AD:5D:C1:EA:51:AF:BF:89 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CEFF26004389B5633C8F264C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be170823-1607-31e2-ae50-fd110376686b.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 19905 IP address blocks: 173.29.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:60:04:38:9b:56:33:c8:f2:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=0f5367c8-1793-44ab-9a34-db1ec9a20035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4f:a4:12:ab:8c:17:d3:d6:dd:97:1a:17:8d: 9b:71:25:c3:ee:e5:42:6a:03:77:f6:14:b2:b9:36: a0:5e:c9:a8:e5:8c:c7:2f:16:d3:89:e5:c1:60:b9: 24:21:36:20:6d:e1:da:eb:f7:bc:67:46:c4:4d:69: dc:e6:7b:b6:91:f3:92:1a:81:b0:4d:35:71:80:7c: 9a:7f:49:59:fc:f9:ef:4f:29:50:c8:29:5c:37:fa: a8:f6:15:3f:ed:e7:0d:59:ef:1a:09:5b:3d:9a:a1: ed:82:e8:da:7f:4b:9f:ff:47:89:f1:7a:39:b0:32: 81:8a:05:0d:a4:52:ef:62:63:84:4f:b0:24:f0:8c: 6b:e0:00:c5:a9:ae:27:88:b4:de:75:a8:1c:98:5d: 5c:81:fb:1a:0f:bc:70:fb:42:01:9a:3e:89:28:d4: da:d6:dc:9d:4c:25:e1:7f:20:17:2c:43:48:b3:35: 30:58:75:a0:18:4b:47:f3:77:11:bd:a8:d5:9e:c2: ec:1c:2e:1b:54:d3:58:a7:ee:b7:c2:1e:09:9f:ee: 70:d4:da:1a:23:6d:65:57:32:f5:1a:b5:a8:e4:84: 20:28:a0:0d:3c:ee:dd:bd:ab:7b:91:af:86:10:ea: 2f:c7:15:11:9e:9e:5c:f8:a0:49:64:5c:bd:e7:0e: b9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DC:21:91:79:24:EA:08:16:E4:30:2A:AD:5D:C1:EA:51:AF:BF:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be170823-1607-31e2-ae50-fd110376686b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c7:79:92:ed:f0:ff:8d:1c:9e:13:74:57:1a:2e:dc:76:81: b6:ee:1b:8f:24:d2:87:73:af:9e:1e:27:12:fd:07:63:a4:bc: 91:09:f4:a0:f9:42:00:e6:e3:4e:f1:d2:dc:5c:0d:0b:7c:44: 4a:c3:a3:74:1c:68:75:bc:56:58:32:cb:75:c5:19:69:75:fc: b9:ae:a4:cc:50:34:c9:d2:5d:58:e6:1f:1c:1f:f1:1a:53:a4: 9c:3b:ec:0b:2d:18:e4:05:6b:52:02:57:8b:ca:ef:c3:c0:38: da:2b:7d:42:58:39:1a:1e:b8:1e:b1:21:1f:dc:62:79:31:f8: 7e:88:51:2e:d3:54:1f:79:a9:19:fd:66:1e:4d:74:1b:3a:0f: c1:36:fd:42:2d:8e:d8:a9:65:83:5a:31:85:c5:98:d5:a1:9c: 34:d3:07:11:c3:1e:89:09:74:88:70:ae:e5:55:96:27:75:cb: 21:af:78:00:c8:9b:20:2b:1e:9a:47:64:92:70:f6:ea:96:92: 10:40:25:a9:23:3f:3a:7c:7f:71:03:f8:32:37:01:c2:61:bb: 6d:22:f5:f1:a1:48:ca:55:76:56:3a:d6:b1:9f:3d:67:6f:ed: c6:ce:64:46:56:29:05:f0:78:ee:e9:d1:8a:d3:c9:78:38:d1: 8c:95:90:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8mAEOJtWM8jyZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk MGY1MzY3YzgtMTc5My00NGFiLTlhMzQtZGIxZWM5YTIwMDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk+kEquMF9PW3ZcaF42bcSXD7uVCagN39hSy uTagXsmo5YzHLxbTieXBYLkkITYgbeHa6/e8Z0bETWnc5nu2kfOSGoGwTTVxgHya f0lZ/PnvTylQyClcN/qo9hU/7ecNWe8aCVs9mqHtgujaf0uf/0eJ8Xo5sDKBigUN pFLvYmOET7Ak8Ixr4ADFqa4niLTedagcmF1cgfsaD7xw+0IBmj6JKNTa1tydTCXh fyAXLENIszUwWHWgGEtH83cRvajVnsLsHC4bVNNYp+63wh4Jn+5w1NoaI21lVzL1 GrWo5IQgKKANPO7dvat7ka+GEOovxxURnp5c+KBJZFy95w65CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjcIZF5JOoIFuQwKq1dwepRr7+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmUxNzA4MjMtMTYwNy0z MWUyLWFlNTAtZmQxMTAzNzY2ODZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjHeZLt8P+NHJ4TdFcaLtx2gbbuG48k0odzr54eJxL9B2OkvJEJ9KD5 QgDm407x0txcDQt8RErDo3QcaHW8Vlgyy3XFGWl1/LmupMxQNMnSXVjmHxwf8RpT pJw77AstGOQFa1ICV4vK78PAONorfUJYORoeuB6xIR/cYnkx+H6IUS7TVB95qRn9 Zh5NdBs6D8E2/UItjtipZYNaMYXFmNWhnDTTBxHDHokJdIhwruVVlid1yyGveADI myArHppHZJJw9uqWkhBAJakjPzp8f3ED+DI3AcJhu20i9fGhSMpVdlY61rGfPWdv 7cbOZEZWKQXweO7p0YrTyXg40YyVkJI= -----END CERTIFICATE-----Generated at Mon Mar 2 10:16:34 2026 by rpki-client