$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df86be88-d98b-3931-bb62-775405bd16d2.roa File: df86be88-d98b-3931-bb62-775405bd16d2.roa (raw, json) Hash identifier: XhhR86hqmCNARWmRF8Ovp5nUWbaZnFqmCYFX/J8QOmc= Subject key identifier: 57:7F:C0:C8:62:1A:BF:E8:60:62:D7:2F:83:77:79:A9:32:4F:0A:D7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D0647AB689B9D858636F6B6E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df86be88-d98b-3931-bb62-775405bd16d2.roa Signing time: Sun 01 Mar 2026 14:00:41 +0000 ROA not before: Sun 01 Mar 2026 14:00:41 +0000 ROA not after: Sat 30 May 2026 13:00:41 +0000 asID: 19905 IP address blocks: 173.23.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:06:47:ab:68:9b:9d:85:86:36:f6:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 1 14:00:41 2026 GMT Not After : May 30 13:00:41 2026 GMT Subject: CN=71a68914-f9da-4d5f-9929-b9ace4db01ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:cc:fe:8c:48:0c:38:e5:98:68:f1:b7:09: 96:ac:62:5f:0d:6d:ad:a7:74:55:eb:b2:19:56:2d: b0:3a:17:be:7d:37:8d:ea:df:8e:45:6b:00:21:88: 29:18:d5:66:38:01:51:14:a4:8a:d9:e8:7a:cb:29: bd:84:97:84:55:77:e7:35:e7:67:7f:4d:1e:60:f1: cd:14:7d:28:c6:72:17:c2:5e:b4:81:83:d3:8d:d6: 62:a2:07:4b:dd:07:c5:bc:ce:19:11:fb:b9:cd:f1: 25:07:ff:ca:76:ed:e6:a5:6d:41:d8:23:ee:2b:00: 22:bf:c0:67:13:b3:4d:ff:5c:98:d0:bc:ab:7d:b1: 29:56:e1:90:11:97:b2:ff:f5:ba:9e:7f:4c:53:8d: a3:d7:cc:11:b5:c1:6a:be:df:6f:91:e6:40:dc:e2: 6f:05:58:e0:f0:cb:08:28:3c:36:71:25:3b:45:af: c4:ef:19:53:da:84:12:3d:48:2d:80:46:e0:b7:c9: 77:e1:f6:7b:ce:b2:bf:62:51:37:3f:ce:9e:5b:41: 3e:6d:4c:1e:93:f9:7a:d4:56:f4:49:87:af:23:f6: 75:bb:20:fb:65:d0:2d:a0:bc:cf:82:02:de:40:9f: ec:9d:9d:09:b1:a6:46:4c:70:11:9c:2d:a8:18:e0: 7e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7F:C0:C8:62:1A:BF:E8:60:62:D7:2F:83:77:79:A9:32:4F:0A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df86be88-d98b-3931-bb62-775405bd16d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e1:18:28:8a:7b:83:fc:c7:83:96:cb:a5:c7:7b:fd:5d:0c: 24:b1:71:ab:7b:4c:d8:13:73:31:1a:76:f0:28:78:a8:a7:f4: 7e:ee:36:83:ce:fa:31:a6:a4:d1:6e:a2:81:13:a0:6f:aa:a9: fc:10:aa:6b:2f:e9:f4:c2:b6:f9:3f:d0:2b:6f:46:77:1d:8f: 52:6f:68:90:d6:c1:8a:86:03:41:2d:35:0b:46:84:68:f7:53: 6d:e6:a5:c5:e5:c8:1b:8c:b3:c1:ba:4b:14:1a:4c:e1:fe:39: 29:19:e1:5d:ac:90:00:fb:24:f4:bb:95:a4:20:ab:4a:c3:ce: 26:01:f5:25:c2:b6:89:ac:64:4f:4e:6c:42:0e:0a:46:e0:03: 65:1c:59:8f:d3:8d:0c:e8:3f:48:e5:f5:ec:ac:1e:3a:cd:e2: 96:75:dd:90:35:e4:f2:9e:49:92:ed:0e:00:1a:30:2e:fd:be: e1:05:34:77:02:d7:5f:65:4a:2e:a7:68:36:11:b3:aa:f7:79: 7a:8f:53:52:e5:7b:f0:a1:30:28:02:91:86:e4:86:9a:55:d7: 13:b9:4d:74:60:b7:d2:3e:96:0f:e9:c6:90:d9:d1:60:ec:fa: 79:b5:90:55:5e:27:ee:52:95:34:3f:96:8b:52:46:ea:a7:f1: 9d:64:24:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0GR6tom52Fhjb2tuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwMTE0MDA0MVoXDTI2MDUzMDEzMDA0MVowLzEtMCsGA1UEAxMk NzFhNjg5MTQtZjlkYS00ZDVmLTk5MjktYjlhY2U0ZGIwMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/PM/oxIDDjlmGjxtwmWrGJfDW2tp3RV67IZ Vi2wOhe+fTeN6t+ORWsAIYgpGNVmOAFRFKSK2eh6yym9hJeEVXfnNednf00eYPHN FH0oxnIXwl60gYPTjdZiogdL3QfFvM4ZEfu5zfElB//Kdu3mpW1B2CPuKwAiv8Bn E7NN/1yY0LyrfbEpVuGQEZey//W6nn9MU42j18wRtcFqvt9vkeZA3OJvBVjg8MsI KDw2cSU7Ra/E7xlT2oQSPUgtgEbgt8l34fZ7zrK/YlE3P86eW0E+bUwek/l61Fb0 SYevI/Z1uyD7ZdAtoLzPggLeQJ/snZ0JsaZGTHARnC2oGOB+FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFd/wMhiGr/oYGLXL4N3eakyTwrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGY4NmJlODgtZDk4Yi0z OTMxLWJiNjItNzc1NDA1YmQxNmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRe6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzhGCiKe4P8x4OWy6XHe/1dDCSxcat7TNgTczEadvAoeKin9H7uNoPO +jGmpNFuooEToG+qqfwQqmsv6fTCtvk/0CtvRncdj1JvaJDWwYqGA0EtNQtGhGj3 U23mpcXlyBuMs8G6SxQaTOH+OSkZ4V2skAD7JPS7laQgq0rDziYB9SXCtomsZE9O bEIOCkbgA2UcWY/TjQzoP0jl9eysHjrN4pZ13ZA15PKeSZLtDgAaMC79vuEFNHcC 119lSi6naDYRs6r3eXqPU1Lle/ChMCgCkYbkhppV1xO5TXRgt9I+lg/pxpDZ0WDs +nm1kFVeJ+5SlTQ/lotSRuqn8Z1kJPM= -----END CERTIFICATE-----Generated at Sun Mar 1 23:30:59 2026 by rpki-client