$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cebe64c9-8bfd-3edc-899e-6137e364f921.roa File: cebe64c9-8bfd-3edc-899e-6137e364f921.roa (raw, json) Hash identifier: MqA6PT0ZH9ZFjV7HfM23LoMcDhJLmduhg0m0Kxqj0c0= Subject key identifier: 74:C7:3A:2E:6D:EC:0E:94:DF:C7:C0:0E:C8:DF:EE:B3:F8:7E:6B:1E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D0647B66F5285A860C36BD3C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cebe64c9-8bfd-3edc-899e-6137e364f921.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 19905 IP address blocks: 173.19.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:b6:6f:52:85:a8:60:c3:6b:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=da0b3d9c-2d92-4618-a5cd-efa5ebe90f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:66:26:e8:87:c5:2f:1e:6f:03:0f:2c:7f:db: d0:72:5e:36:c0:79:75:32:8d:7a:4a:bc:d0:b2:fd: 73:42:77:66:77:7e:01:7d:25:60:dc:81:2c:04:bc: d1:85:b7:e3:03:16:a2:db:67:2d:8b:dd:b2:31:da: 4a:c2:9b:23:14:8d:71:99:5a:ab:55:fa:83:5f:dd: f5:b9:bb:31:c0:47:d5:33:c4:78:1f:a3:33:3d:56: ff:73:dd:ef:3a:56:81:38:6a:11:e2:cc:05:49:93: 6d:e7:72:ed:12:63:26:6b:d6:af:da:d1:90:c4:76: 30:f0:65:d1:e7:63:ce:93:99:c7:b5:97:20:96:e8: 95:49:80:46:4e:f0:52:3e:28:e0:e2:54:32:bf:4a: 9d:53:9c:89:25:3a:46:b4:1d:fe:91:93:1c:5a:51: 46:33:80:7b:db:28:62:a1:ec:29:a9:be:2d:66:61: f3:38:3d:ec:59:b4:16:33:76:52:22:da:81:5f:d7: 96:59:1f:6d:20:3d:3c:5e:55:d4:a7:a4:76:61:dc: db:5c:cc:d4:fd:b2:6e:2b:3a:1e:61:69:e9:b9:e0: 82:dc:d7:4c:c3:7f:df:b2:ea:97:ab:a6:20:40:51: 4d:94:01:31:92:64:38:97:e3:f1:a3:f8:3e:51:fa: 17:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C7:3A:2E:6D:EC:0E:94:DF:C7:C0:0E:C8:DF:EE:B3:F8:7E:6B:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cebe64c9-8bfd-3edc-899e-6137e364f921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:0c:2c:85:ff:2d:87:12:05:c9:ac:15:aa:e6:ab:19:19:bc: cc:0c:4e:5e:1e:aa:28:c9:f5:91:60:ac:95:30:09:f7:f7:d4: e6:61:43:03:00:56:ad:cc:1a:18:bd:8c:a1:ab:c3:f0:33:d8: 53:7c:bd:6c:88:8f:03:b1:d0:b4:30:15:87:e8:f1:67:33:58: 5d:ac:bc:30:af:d3:d2:18:6e:e4:a2:a2:61:78:6b:1d:ad:60: 52:50:09:e4:85:26:f4:e7:d1:e7:b7:2a:79:9a:ba:33:02:1c: a5:04:32:d5:21:f3:ad:cf:1d:5b:77:51:d5:83:4c:20:76:ce: a1:a8:42:23:08:42:da:f0:0c:58:88:09:50:1f:f9:ee:b7:89: a9:f0:78:56:ae:1e:c3:d4:a4:c4:b3:a4:fe:3a:3f:37:28:f6: 99:d8:22:2b:a3:ed:f7:e6:12:76:fd:77:b0:fb:13:59:22:db: 0c:e3:6f:0d:0e:60:65:9c:83:c2:18:da:24:2d:d1:0c:0c:98: e9:81:72:00:a6:99:90:07:12:a8:c9:ef:60:dd:bf:84:bf:58: 00:4a:80:94:f4:2e:e8:1f:24:e6:61:02:4d:1a:93:54:66:54: bb:6e:2b:4d:ec:cb:7e:cc:29:be:d2:12:d6:3a:97:09:2a:75: 82:bf:5f:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR7ZvUoWoYMNr08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk ZGEwYjNkOWMtMmQ5Mi00NjE4LWE1Y2QtZWZhNWViZTkwZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmYm6IfFLx5vAw8sf9vQcl42wHl1Mo16SrzQ sv1zQndmd34BfSVg3IEsBLzRhbfjAxai22cti92yMdpKwpsjFI1xmVqrVfqDX931 ubsxwEfVM8R4H6MzPVb/c93vOlaBOGoR4swFSZNt53LtEmMma9av2tGQxHYw8GXR 52POk5nHtZcgluiVSYBGTvBSPijg4lQyv0qdU5yJJTpGtB3+kZMcWlFGM4B72yhi oewpqb4tZmHzOD3sWbQWM3ZSItqBX9eWWR9tID08XlXUp6R2YdzbXMzU/bJuKzoe YWnpueCC3NdMw3/fsuqXq6YgQFFNlAExkmQ4l+Pxo/g+UfoXDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTHOi5t7A6U38fADsjf7rP4fmseMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2ViZTY0YzktOGJmZC0z ZWRjLTg5OWUtNjEzN2UzNjRmOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYMLIX/LYcSBcmsFarmqxkZvMwMTl4eqijJ9ZFgrJUwCff31OZhQwMA Vq3MGhi9jKGrw/Az2FN8vWyIjwOx0LQwFYfo8WczWF2svDCv09IYbuSiomF4ax2t YFJQCeSFJvTn0ee3KnmaujMCHKUEMtUh863PHVt3UdWDTCB2zqGoQiMIQtrwDFiI CVAf+e63ianweFauHsPUpMSzpP46Pzco9pnYIiuj7ffmEnb9d7D7E1ki2wzjbw0O YGWcg8IY2iQt0QwMmOmBcgCmmZAHEqjJ72Ddv4S/WABKgJT0LugfJOZhAk0ak1Rm VLtuK03sy37MKb7SEtY6lwkqdYK/X7M= -----END CERTIFICATE-----Generated at Sun Mar 1 23:16:36 2026 by rpki-client