$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c96c5406-8b97-31a7-8a54-08bf06befd12.roa File: c96c5406-8b97-31a7-8a54-08bf06befd12.roa (raw, json) Hash identifier: GWokZE+kKbKzkup0TS83h2K8j5n/7D6fZ8WAp9fIZ9c= Subject key identifier: FE:BE:78:F0:64:D5:02:9C:39:E4:ED:68:70:AB:BB:0E:92:A5:75:85 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CA7F46DF75BD23755034BBD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c96c5406-8b97-31a7-8a54-08bf06befd12.roa Signing time: Mon 26 Jan 2026 19:07:08 +0000 ROA not before: Mon 26 Jan 2026 19:07:08 +0000 ROA not after: Sun 26 Apr 2026 18:07:08 +0000 asID: 19905 IP address blocks: 173.23.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:f4:6d:f7:5b:d2:37:55:03:4b:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 26 19:07:08 2026 GMT Not After : Apr 26 18:07:08 2026 GMT Subject: CN=86d7b2a8-b574-431c-b7b5-3f90ee477393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:67:7f:a6:07:8f:3d:c6:75:ea:3e:d0:13:15: 90:01:c7:aa:b9:31:84:4c:45:8a:98:56:d6:3b:de: 79:55:cf:07:82:16:9f:39:04:71:a8:b8:34:9b:0e: 7e:78:0e:59:ad:fc:77:d3:2b:c0:f3:2e:b9:df:61: 77:96:7f:41:0b:14:2f:85:5d:c1:cd:07:ff:39:52: 85:45:c2:43:bc:01:65:96:8b:ab:fd:b2:6c:92:6e: 62:29:1b:8b:52:b0:df:2b:9e:f9:79:11:4a:55:0c: 24:97:71:62:28:08:9a:a2:25:7c:cb:0b:97:cc:1f: e2:3a:de:0c:78:94:ae:38:f8:f8:db:d8:12:d9:3c: 25:8c:e8:e0:2e:83:30:aa:de:af:73:6c:af:a8:8a: fc:69:50:1f:e0:ab:62:b7:64:b6:46:bc:b5:14:d5: e8:6e:26:26:e1:a9:68:bf:03:e9:73:c2:58:47:e6: e0:db:ed:3e:30:60:f8:4a:f5:45:d4:c3:17:21:7e: bc:97:13:41:49:cb:91:44:a9:b3:5a:ce:18:c6:f1: b6:de:e6:9c:ed:5e:9e:dc:81:bd:f8:07:59:81:d5: d2:08:73:e1:17:53:5c:0f:c1:d5:53:ce:b1:2d:f0: 89:d2:28:5b:10:d1:54:45:70:28:e5:40:29:bb:fe: 81:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BE:78:F0:64:D5:02:9C:39:E4:ED:68:70:AB:BB:0E:92:A5:75:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c96c5406-8b97-31a7-8a54-08bf06befd12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c8:35:5b:ed:19:d8:5f:5b:7b:7f:e4:05:ac:90:73:e2:c8: 54:88:3f:59:35:72:69:41:2b:61:fb:03:a1:8e:c0:6e:2f:c1: 6e:b3:17:c9:4e:e9:1f:2d:a0:b6:d3:ed:b0:6c:c5:a1:fb:9e: 00:4a:50:88:3d:ba:a7:f2:57:11:d8:e0:1c:ad:bb:a3:77:60: 4b:d4:cf:2c:90:61:d4:c3:7f:e7:38:d8:86:c2:3d:d4:40:f7: da:33:dc:05:70:8f:1a:66:e2:73:96:bb:1b:3b:c0:7a:66:32: 1b:42:0a:27:35:b8:ee:40:7b:fd:46:ce:18:e2:72:f3:25:b5: df:42:d8:ea:4f:9e:ae:a3:e6:27:df:b3:09:c9:f6:34:93:85: a1:9a:79:dc:f1:33:f1:cc:ec:4d:46:a4:d0:40:24:6f:1c:72: 22:66:b0:16:6e:96:89:f7:13:29:cd:d7:69:d7:51:f2:82:8e: 4b:9f:5f:70:2c:f6:16:e2:74:03:8b:96:5d:9d:1d:11:46:32: 4c:a7:dc:17:e6:56:60:e5:f7:7e:b6:d4:d1:6b:29:5f:6d:b1: d4:1f:4c:02:f1:16:0e:23:2b:d1:3a:f5:a4:3b:f9:fc:37:48: d8:cb:3d:5b:53:b4:36:fa:3c:c9:9b:eb:97:f8:3b:cd:df:8d: cd:50:d3:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyn9G33W9I3VQNLvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyNjE5MDcwOFoXDTI2MDQyNjE4MDcwOFowLzEtMCsGA1UEAxMk ODZkN2IyYTgtYjU3NC00MzFjLWI3YjUtM2Y5MGVlNDc3MzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2d/pgePPcZ16j7QExWQAcequTGETEWKmFbW O955Vc8HghafOQRxqLg0mw5+eA5Zrfx30yvA8y6532F3ln9BCxQvhV3BzQf/OVKF RcJDvAFllour/bJskm5iKRuLUrDfK575eRFKVQwkl3FiKAiaoiV8ywuXzB/iOt4M eJSuOPj429gS2TwljOjgLoMwqt6vc2yvqIr8aVAf4Ktit2S2Rry1FNXobiYm4alo vwPpc8JYR+bg2+0+MGD4SvVF1MMXIX68lxNBScuRRKmzWs4YxvG23uac7V6e3IG9 +AdZgdXSCHPhF1NcD8HVU86xLfCJ0ihbENFURXAo5UApu/6BSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6+ePBk1QKcOeTtaHCruw6SpXWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzk2YzU0MDYtOGI5Ny0z MWE3LThhNTQtMDhiZjA2YmVmZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7INVvtGdhfW3t/5AWskHPiyFSIP1k1cmlBK2H7A6GOwG4vwW6zF8lO 6R8toLbT7bBsxaH7ngBKUIg9uqfyVxHY4Bytu6N3YEvUzyyQYdTDf+c42IbCPdRA 99oz3AVwjxpm4nOWuxs7wHpmMhtCCic1uO5Ae/1GzhjicvMltd9C2OpPnq6j5iff swnJ9jSThaGaedzxM/HM7E1GpNBAJG8cciJmsBZulon3EynN12nXUfKCjkufX3As 9hbidAOLll2dHRFGMkyn3BfmVmDl93621NFrKV9tsdQfTALxFg4jK9E69aQ7+fw3 SNjLPVtTtDb6PMmb65f4O83fjc1Q0yk= -----END CERTIFICATE-----Generated at Mon Mar 2 13:42:26 2026 by rpki-client