$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9b3e35d-47d1-3af0-9773-086c2338376c.roa File: f9b3e35d-47d1-3af0-9773-086c2338376c.roa (raw, json) Hash identifier: AOGtzDt2wHp+44DKY+SPksz0pliv1aJp3a7Ntm6YX0A= Subject key identifier: B6:09:B3:0A:00:40:40:7B:39:55:03:34:19:87:48:52:59:08:D5:0D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A6940206A9BD4B50BAEF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9b3e35d-47d1-3af0-9773-086c2338376c.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.20.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:94:02:06:a9:bd:4b:50:ba:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=dbca1bc6-fe23-4621-84b2-aec96de01e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fe:78:10:4a:7b:7f:a5:1f:7c:60:06:f6:9e: c1:2c:5e:88:64:34:55:ef:6d:62:47:79:de:bc:16: 1b:6e:3b:b1:1f:f4:0e:8c:d4:e3:75:47:95:88:43: 0d:85:3f:0e:e6:24:b4:18:3e:10:e7:df:80:c7:5a: 27:a1:67:cd:50:c8:fa:c2:39:51:69:92:94:f3:9e: 84:32:69:0a:09:b2:2d:c4:b2:a7:23:e5:c8:c7:eb: 43:f2:14:1c:1a:57:a1:fc:fd:94:77:32:e7:28:44: 95:71:a8:07:c7:9b:9d:62:6d:ce:6f:e3:b3:a5:de: bf:85:4a:b8:7d:64:7f:a3:e4:b6:63:ff:01:78:cc: 95:bd:67:92:3b:3f:59:3d:b4:18:47:a2:40:0d:26: b9:11:74:81:8b:2a:03:2c:86:25:6b:4f:03:33:f6: 1c:b9:b7:17:cf:f2:ac:b0:a3:41:4c:10:df:43:8a: 3b:e7:a0:65:e2:4a:df:12:64:bf:13:58:c6:b8:34: 26:c5:69:42:5e:43:34:c2:76:9f:b7:90:5c:74:eb: 83:22:4d:16:50:1e:79:06:fb:74:6d:3a:00:db:78: cf:7a:40:ee:a9:73:ce:05:d3:30:c6:03:81:68:48: d7:a1:7e:d7:61:a7:9d:69:bb:5f:65:57:7b:51:57: ed:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:09:B3:0A:00:40:40:7B:39:55:03:34:19:87:48:52:59:08:D5:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f9b3e35d-47d1-3af0-9773-086c2338376c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:5f:89:bf:cb:98:60:7f:1d:cc:7b:c2:5d:80:70:d6:9d:ad: 50:9f:db:2b:a8:ac:78:55:a1:eb:59:c3:6c:41:2c:95:61:7e: 1b:93:ac:7f:cd:99:35:11:ba:4c:d4:15:10:7c:0c:bc:29:87: 7d:d1:e6:a5:10:c9:d9:75:3c:ee:3e:9c:d3:86:bb:da:1d:cf: 66:9a:9d:a8:6f:45:89:32:ba:83:89:03:0f:70:d8:63:c8:e1: d1:63:c4:e1:50:9b:72:85:aa:e0:79:6a:e8:1f:0a:b5:b2:f7: 96:48:de:aa:ca:86:a1:ca:37:f1:d8:3d:22:da:fa:69:59:99: 4d:4e:f3:39:f1:b5:41:3b:9e:7a:f0:f5:8a:26:74:4b:28:ad: f0:d7:99:77:b3:6a:6e:45:d6:2f:cb:a4:bb:1d:3b:ea:36:2b: d3:85:a7:f9:25:d0:0d:7a:f7:1d:5f:43:ba:6a:7a:03:ad:84: 40:2a:dd:7e:bd:a9:3e:2a:ca:2f:f0:d1:51:6b:e2:fb:a2:5d: 4a:57:63:59:d3:59:38:13:ba:66:49:d7:5f:95:74:c8:d1:ed: 56:47:0f:a7:73:34:39:6c:95:c2:97:33:bc:53:68:90:d2:90: 00:9a:24:8b:f6:2a:50:1f:ca:5c:84:93:98:3e:0c:8e:85:f2: 9b:77:3c:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFppQCBqm9S1C674AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZGJjYTFiYzYtZmUyMy00NjIxLTg0YjItYWVjOTZkZTAxZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof54EEp7f6UffGAG9p7BLF6IZDRV721iR3ne vBYbbjuxH/QOjNTjdUeViEMNhT8O5iS0GD4Q59+Ax1onoWfNUMj6wjlRaZKU856E MmkKCbItxLKnI+XIx+tD8hQcGleh/P2UdzLnKESVcagHx5udYm3Ob+Ozpd6/hUq4 fWR/o+S2Y/8BeMyVvWeSOz9ZPbQYR6JADSa5EXSBiyoDLIYla08DM/YcubcXz/Ks sKNBTBDfQ4o756Bl4krfEmS/E1jGuDQmxWlCXkM0wnaft5BcdOuDIk0WUB55Bvt0 bToA23jPekDuqXPOBdMwxgOBaEjXoX7XYaedabtfZVd7UVftIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYJswoAQEB7OVUDNBmHSFJZCNUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjliM2UzNWQtNDdkMS0z YWYwLTk3NzMtMDg2YzIzMzgzNzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRR5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxfib/LmGB/Hcx7wl2AcNadrVCf2yuorHhVoetZw2xBLJVhfhuTrH/N mTURukzUFRB8DLwph33R5qUQydl1PO4+nNOGu9odz2aanahvRYkyuoOJAw9w2GPI 4dFjxOFQm3KFquB5augfCrWy95ZI3qrKhqHKN/HYPSLa+mlZmU1O8znxtUE7nnrw 9YomdEsorfDXmXezam5F1i/LpLsdO+o2K9OFp/kl0A169x1fQ7pqegOthEAq3X69 qT4qyi/w0VFr4vuiXUpXY1nTWTgTumZJ11+VdMjR7VZHD6dzNDlslcKXM7xTaJDS kACaJIv2KlAfylyEk5g+DI6F8pt3PGA= -----END CERTIFICATE-----Generated at Mon Mar 2 06:52:12 2026 by rpki-client