$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf83d148-34e4-3e7e-bbac-94a24746a60f.roa File: cf83d148-34e4-3e7e-bbac-94a24746a60f.roa (raw, json) Hash identifier: JGNe0hzybazZHOqsgSsJzZvLg2f1+rb99UxipE6kVVo= Subject key identifier: 8B:E4:E8:AF:93:A5:D8:31:E3:4F:72:5D:93:73:84:09:46:C7:47:40 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CF6ECCDE8EF127A1DBD9C7A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf83d148-34e4-3e7e-bbac-94a24746a60f.roa Signing time: Tue 24 Feb 2026 02:00:31 +0000 ROA not before: Tue 24 Feb 2026 02:00:31 +0000 ROA not after: Mon 25 May 2026 01:00:31 +0000 asID: 19905 IP address blocks: 173.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:ec:cd:e8:ef:12:7a:1d:bd:9c:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Feb 24 02:00:31 2026 GMT Not After : May 25 01:00:31 2026 GMT Subject: CN=9553df20-51c1-4925-a9ae-66cd4b775d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:df:93:57:04:2a:20:16:ec:43:e7:45:b3:2f: f0:d8:c2:39:62:be:da:fb:7c:ba:78:c1:91:e6:87: ea:2a:76:c0:78:f8:d8:97:df:0a:28:4a:5e:d8:4f: 27:aa:0f:99:89:2c:ee:9d:14:26:6a:9f:72:b4:84: 1d:1a:60:c4:a0:46:07:91:62:58:9f:e4:58:af:02: 3a:67:76:8b:cc:9e:bc:54:9d:77:07:91:11:88:ac: 70:f9:67:64:0f:70:0c:4b:f3:a7:30:ac:3f:4f:70: 30:98:c0:29:0f:b2:1a:1c:23:16:a6:27:73:58:8b: b6:ea:c4:24:0d:c0:6c:40:16:c2:1b:ff:70:e6:27: 13:30:28:c5:b9:57:1a:ea:9a:4f:cd:62:3b:79:fb: 27:4e:ed:53:de:86:bf:e1:85:75:a0:78:93:56:00: 53:18:ae:6b:e0:2d:9e:01:ef:02:93:81:4c:1c:8e: 69:09:e3:40:b1:1c:d3:72:37:05:4b:5e:ed:6b:55: ad:22:d6:93:ee:49:be:1b:34:30:12:5f:0b:e5:31: 87:ed:90:fc:76:0a:cd:d9:ae:33:02:79:08:4b:2e: 66:c7:67:01:1f:98:71:6a:98:2d:ad:55:37:f6:5d: 8a:9d:13:98:c9:11:d2:f2:9c:85:2e:e4:fa:57:70: 4b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E4:E8:AF:93:A5:D8:31:E3:4F:72:5D:93:73:84:09:46:C7:47:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf83d148-34e4-3e7e-bbac-94a24746a60f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:95:4a:eb:9f:2b:af:c3:d5:70:b9:22:bd:3e:56:17:17:fa: 7a:3f:77:d2:14:0f:dc:b7:d3:90:4b:79:2e:cc:a4:20:2e:ce: fd:a4:d5:d2:17:b1:cc:cc:6a:9e:24:08:ee:91:e5:1e:fc:9f: 2f:18:37:e3:e2:f3:25:ce:f1:ba:04:fb:0b:cf:ce:6e:a3:cb: bc:ef:74:e7:0c:48:4b:86:6b:37:4a:d4:ae:66:0f:0c:72:51: c4:c6:aa:f9:8d:ab:0b:bc:e7:19:dc:78:41:63:75:a9:e3:08: 7f:43:31:f5:a8:1d:48:dd:3c:e2:40:34:73:4c:91:25:07:cd: a5:3f:11:cc:20:56:33:81:f3:1a:e4:ea:97:a6:cf:8d:2d:53: f6:83:b6:35:68:e5:27:5c:ad:6a:d5:3e:54:f9:d7:f6:ef:33: 45:46:74:f0:ae:e5:7b:7a:43:49:bf:cc:7b:7e:de:ff:8d:d5: c5:f0:6b:92:ab:4d:5d:d3:24:73:93:48:a7:48:f1:47:e8:4a: d9:5a:2a:48:bd:5b:f9:cc:53:52:90:66:bc:eb:4a:f7:46:6b: eb:ca:fe:b3:b3:85:6e:c0:e9:57:4a:35:ac:fe:85:ad:f8:a1: 31:74:d0:72:e0:75:40:0d:31:9b:d0:fb:57:7d:73:b4:e5:32: 3b:2b:94:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz27M3o7xJ6Hb2cegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDIyNDAyMDAzMVoXDTI2MDUyNTAxMDAzMVowLzEtMCsGA1UEAxMk OTU1M2RmMjAtNTFjMS00OTI1LWE5YWUtNjZjZDRiNzc1ZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt+TVwQqIBbsQ+dFsy/w2MI5Yr7a+3y6eMGR 5ofqKnbAePjYl98KKEpe2E8nqg+ZiSzunRQmap9ytIQdGmDEoEYHkWJYn+RYrwI6 Z3aLzJ68VJ13B5ERiKxw+WdkD3AMS/OnMKw/T3AwmMApD7IaHCMWpidzWIu26sQk DcBsQBbCG/9w5icTMCjFuVca6ppPzWI7efsnTu1T3oa/4YV1oHiTVgBTGK5r4C2e Ae8Ck4FMHI5pCeNAsRzTcjcFS17ta1WtItaT7km+GzQwEl8L5TGH7ZD8dgrN2a4z AnkISy5mx2cBH5hxapgtrVU39l2KnROYyRHS8pyFLuT6V3BLqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvk6K+Tpdgx409yXZNzhAlGx0dAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y4M2QxNDgtMzRlNC0z ZTdlLWJiYWMtOTRhMjQ3NDZhNjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+VSuufK6/D1XC5Ir0+VhcX+no/d9IUD9y305BLeS7MpCAuzv2k1dIX sczMap4kCO6R5R78ny8YN+Pi8yXO8boE+wvPzm6jy7zvdOcMSEuGazdK1K5mDwxy UcTGqvmNqwu85xnceEFjdanjCH9DMfWoHUjdPOJANHNMkSUHzaU/EcwgVjOB8xrk 6pemz40tU/aDtjVo5SdcrWrVPlT51/bvM0VGdPCu5Xt6Q0m/zHt+3v+N1cXwa5Kr TV3TJHOTSKdI8UfoStlaKki9W/nMU1KQZrzrSvdGa+vK/rOzhW7A6VdKNaz+ha34 oTF00HLgdUANMZvQ+1d9c7TlMjsrlKs= -----END CERTIFICATE-----Generated at Mon Mar 2 19:55:49 2026 by rpki-client