$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1c06191-0508-3181-985b-36e20515ab8a.roa File: c1c06191-0508-3181-985b-36e20515ab8a.roa (raw, json) Hash identifier: HzM0K8JFz5oqwBgk57dTo4Vk7yWSRBpjNqZpWH03kVc= Subject key identifier: 6F:CF:58:C1:A4:6A:E8:D3:6E:B7:D7:CE:07:0F:B1:A4:21:B2:A9:2C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CF6ECCF9E5FAA79AA1AC4F640 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1c06191-0508-3181-985b-36e20515ab8a.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 30036 IP address blocks: 173.18.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:cf:9e:5f:aa:79:aa:1a:c4:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=78f6a428-fbfb-497d-a06d-6c907afd4a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:db:e3:97:26:7d:08:15:85:2a:db:29:64:a9: c5:41:ce:68:06:63:87:33:29:49:ef:5e:6f:06:e0: 37:a6:88:aa:76:eb:31:1f:94:14:bc:4e:96:6c:a8: 8b:2a:13:27:46:f9:84:81:46:41:32:f0:c4:aa:45: 8f:27:f6:5a:bb:cc:f3:03:66:4d:7a:c4:a1:29:0b: ac:2f:69:1c:a9:24:13:d1:26:2c:10:cf:ea:f5:94: 7d:98:a5:a7:58:36:92:d0:bf:78:a0:2a:74:44:cf: c1:b5:e7:a4:d2:f1:f6:cd:6b:30:25:a3:0c:ab:74: 5b:ad:e0:79:3d:5f:c5:e4:90:c4:fa:fe:f1:02:7a: 31:22:db:e6:14:1e:63:5f:1c:ab:20:0b:36:5c:39: 0c:27:8d:7a:19:ee:73:c6:5e:85:bb:48:e0:1c:6a: ce:7d:c6:4e:59:2c:c9:5d:e7:0c:c1:b5:0d:e9:b6: 72:36:a8:d7:87:d9:42:b8:f1:9e:26:43:24:67:11: 3f:f3:83:e2:dd:56:6f:30:79:69:a5:6d:b2:55:ff: e2:f9:20:9e:8c:4e:24:de:05:c0:13:b7:7d:c5:62: 25:10:73:c1:fe:69:39:3f:2f:a3:4e:83:e7:52:c0: 2b:56:f8:39:e0:23:e1:bd:e3:2f:65:98:67:c3:5e: 0b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CF:58:C1:A4:6A:E8:D3:6E:B7:D7:CE:07:0F:B1:A4:21:B2:A9:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1c06191-0508-3181-985b-36e20515ab8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:4d:5d:a8:21:e9:57:ea:30:22:ba:66:23:2e:1e:b4:f8:b8: 49:49:d2:04:fd:92:ed:23:db:ea:83:48:52:12:62:3c:d5:cd: 20:f3:d9:0c:6f:ed:88:b5:c0:6b:47:46:08:22:45:0b:4f:27: 3a:38:42:f0:ca:2f:cf:06:e7:7c:14:55:9b:02:ab:cc:42:d7: 0a:fe:e6:47:c2:50:ff:5d:95:56:2c:c4:43:56:be:ed:b5:d2: 29:d7:a9:c3:f2:86:01:f9:96:db:63:86:ab:bf:45:43:2f:ef: eb:05:d6:22:03:bf:6f:fe:cd:00:77:83:a9:81:00:d6:44:2a: 6e:a9:8f:6f:be:0d:7a:70:1f:40:ff:8c:0e:4f:fd:de:f6:f8: 44:3c:03:ca:83:5f:37:45:8e:d2:b1:c7:b9:4e:8b:7d:af:a3: 05:9c:4b:29:1a:fe:f1:db:f1:30:2e:98:1d:2b:ce:3e:9a:a2: 86:70:c2:66:fa:1b:6f:ac:87:0e:5d:b5:ab:e6:66:5f:29:2b: 8d:19:5f:b3:90:18:7c:ed:5a:3e:44:f4:84:a7:ee:ef:0d:ae: ed:94:3e:6c:6d:44:36:ea:fb:b6:6c:fb:f8:03:d5:ee:da:37: 6c:99:e1:2f:33:a8:9f:52:e7:4f:be:6b:44:9d:7d:ac:4d:16: 6e:ea:7c:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27M+eX6p5qhrE9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk NzhmNmE0MjgtZmJmYi00OTdkLWEwNmQtNmM5MDdhZmQ0YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNvjlyZ9CBWFKtspZKnFQc5oBmOHMylJ715v BuA3poiqdusxH5QUvE6WbKiLKhMnRvmEgUZBMvDEqkWPJ/Zau8zzA2ZNesShKQus L2kcqSQT0SYsEM/q9ZR9mKWnWDaS0L94oCp0RM/Bteek0vH2zWswJaMMq3RbreB5 PV/F5JDE+v7xAnoxItvmFB5jXxyrIAs2XDkMJ416Ge5zxl6Fu0jgHGrOfcZOWSzJ XecMwbUN6bZyNqjXh9lCuPGeJkMkZxE/84Pi3VZvMHlppW2yVf/i+SCejE4k3gXA E7d9xWIlEHPB/mk5Py+jToPnUsArVvg54CPhveMvZZhnw14LIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/PWMGkaujTbrfXzgcPsaQhsqksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzFjMDYxOTEtMDUwOC0z MTgxLTk4NWItMzZlMjA1MTVhYjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBNXagh6VfqMCK6ZiMuHrT4uElJ0gT9ku0j2+qDSFISYjzVzSDz2Qxv 7Yi1wGtHRggiRQtPJzo4QvDKL88G53wUVZsCq8xC1wr+5kfCUP9dlVYsxENWvu21 0inXqcPyhgH5lttjhqu/RUMv7+sF1iIDv2/+zQB3g6mBANZEKm6pj2++DXpwH0D/ jA5P/d72+EQ8A8qDXzdFjtKxx7lOi32vowWcSyka/vHb8TAumB0rzj6aooZwwmb6 G2+shw5dtavmZl8pK40ZX7OQGHztWj5E9ISn7u8Nru2UPmxtRDbq+7Zs+/gD1e7a N2yZ4S8zqJ9S50++a0SdfaxNFm7qfDQ= -----END CERTIFICATE-----Generated at Mon Mar 2 08:39:21 2026 by rpki-client