$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffbfdd54-633b-3731-9964-cd59a225d043.roa File: ffbfdd54-633b-3731-9964-cd59a225d043.roa (raw, json) Hash identifier: DpvEiNisnWFGZj5fjgDC0D8LdxKK5NeZODwojoSTI4Y= Subject key identifier: 75:C6:BC:F1:85:E5:F4:E5:5A:AA:6D:D7:7B:DC:33:F4:C9:E5:F5:E7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584CA7F46DEBFDC99BFA7C9F7100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffbfdd54-633b-3731-9964-cd59a225d043.roa Signing time: Mon 26 Jan 2026 19:07:08 +0000 ROA not before: Mon 26 Jan 2026 19:07:08 +0000 ROA not after: Sun 26 Apr 2026 18:07:08 +0000 asID: 30036 IP address blocks: 173.23.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:f4:6d:eb:fd:c9:9b:fa:7c:9f:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 26 19:07:08 2026 GMT Not After : Apr 26 18:07:08 2026 GMT Subject: CN=516ac3f7-cecb-435c-b42f-cee041a7d18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2f:ac:1c:17:65:6f:6a:e8:6e:73:b3:77:78: 93:b5:ec:bc:50:08:28:30:79:1a:8a:ba:3e:71:97: fb:58:66:f9:50:f8:b0:eb:e4:67:11:d5:b7:7c:b4: 5a:7a:59:89:f8:a2:70:9a:33:d3:74:72:7c:c8:33: fa:67:bb:c6:27:1d:0c:72:f4:18:90:c9:e3:cc:93: d1:9a:d7:df:fd:b3:cc:49:28:f4:8a:2f:f9:02:12: 1c:bb:bb:63:28:90:e8:92:a3:54:d4:b5:28:3a:98: fb:e3:0a:dd:37:ce:9e:62:90:3c:e3:1a:b8:f7:89: 8b:ee:8e:17:54:80:6e:e6:8f:91:3d:a2:1e:19:7d: 42:b1:e1:ae:a4:bc:8d:eb:7c:38:aa:af:af:d2:fa: 3f:6d:d8:1b:5d:ff:fc:21:37:b6:46:38:63:2b:b0: c2:cb:b0:88:0a:89:41:a6:fd:3d:20:2e:34:cc:b6: e7:ba:f9:8e:78:2b:1b:f6:94:22:fd:e8:65:7e:2f: 4d:e8:3f:3b:43:d4:00:a4:e1:f8:3a:ee:05:94:bb: f6:b9:dc:66:36:20:f7:ed:5c:62:19:b4:90:8d:0d: 56:11:38:02:28:71:67:da:3d:92:1c:84:86:7e:ef: 10:c0:9e:cb:e8:b5:86:47:2a:f7:d2:85:c8:32:84: 6d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C6:BC:F1:85:E5:F4:E5:5A:AA:6D:D7:7B:DC:33:F4:C9:E5:F5:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ffbfdd54-633b-3731-9964-cd59a225d043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:9a:1f:66:7e:98:6a:da:36:72:1e:10:4c:9b:02:b0:2e:68: 70:29:90:ad:4e:89:e0:b0:b4:65:90:c5:27:28:14:6e:1d:be: fd:f2:73:f6:8e:e1:ca:03:dc:b8:cd:46:58:2c:51:26:df:e6: 89:8e:35:8f:4c:e5:6d:05:8a:ed:04:78:bf:22:4d:63:93:61: 26:96:e6:ec:f9:fb:5b:6c:39:1a:76:fa:8f:f2:05:fe:58:04: 45:62:69:51:71:f3:bc:70:d0:c3:f9:e6:4a:13:15:fe:7d:1d: 8d:a3:7e:74:06:c1:72:89:7c:09:62:c5:ba:b0:49:c6:ec:94: 8f:2a:29:ec:34:74:1d:9a:dd:bc:a2:91:cb:c6:56:1d:40:94: a8:bf:3b:95:6c:79:36:35:01:7e:15:6e:b3:12:fb:fc:6c:6b: 0f:a3:25:4b:71:89:60:ea:8c:31:36:11:7d:05:b4:c4:bf:10: 46:62:ae:6e:f8:0e:06:65:22:80:2c:77:53:f8:21:12:31:46: 8d:e3:81:24:2d:8d:fb:32:91:50:6f:63:19:2a:e6:b9:e7:b5: 16:02:02:92:f8:14:9c:41:bf:19:05:ec:8d:d3:da:8e:d4:28: ee:6c:26:64:45:30:36:a0:42:a7:f7:3e:28:25:1a:5a:82:eb: c4:da:ce:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyn9G3r/cmb+nyfcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDEyNjE5MDcwOFoXDTI2MDQyNjE4MDcwOFowLzEtMCsGA1UEAxMk NTE2YWMzZjctY2VjYi00MzVjLWI0MmYtY2VlMDQxYTdkMThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS+sHBdlb2robnOzd3iTtey8UAgoMHkairo+ cZf7WGb5UPiw6+RnEdW3fLRaelmJ+KJwmjPTdHJ8yDP6Z7vGJx0McvQYkMnjzJPR mtff/bPMSSj0ii/5AhIcu7tjKJDokqNU1LUoOpj74wrdN86eYpA84xq494mL7o4X VIBu5o+RPaIeGX1CseGupLyN63w4qq+v0vo/bdgbXf/8ITe2RjhjK7DCy7CIColB pv09IC40zLbnuvmOeCsb9pQi/ehlfi9N6D87Q9QApOH4Ou4FlLv2udxmNiD37Vxi GbSQjQ1WETgCKHFn2j2SHISGfu8QwJ7L6LWGRyr30oXIMoRt1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXGvPGF5fTlWqpt13vcM/TJ5fXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmZiZmRkNTQtNjMzYi0z NzMxLTk5NjQtY2Q1OWEyMjVkMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKaH2Z+mGraNnIeEEybArAuaHApkK1OieCwtGWQxScoFG4dvv3yc/aO 4coD3LjNRlgsUSbf5omONY9M5W0Fiu0EeL8iTWOTYSaW5uz5+1tsORp2+o/yBf5Y BEViaVFx87xw0MP55koTFf59HY2jfnQGwXKJfAlixbqwScbslI8qKew0dB2a3byi kcvGVh1AlKi/O5VseTY1AX4VbrMS+/xsaw+jJUtxiWDqjDE2EX0FtMS/EEZirm74 DgZlIoAsd1P4IRIxRo3jgSQtjfsykVBvYxkq5rnntRYCApL4FJxBvxkF7I3T2o7U KO5sJmRFMDagQqf3PiglGlqC68Taznc= -----END CERTIFICATE-----Generated at Mon Mar 2 01:04:57 2026 by rpki-client