$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09457e15-48da-3306-8f1f-fe9e2da0fa29.roa File: 09457e15-48da-3306-8f1f-fe9e2da0fa29.roa (raw, json) Hash identifier: IYTFg03ldDrVTSuyOi4dwtUtFM0w2pmUpbX27HFax6A= Subject key identifier: F5:18:97:3C:67:4B:ED:3C:F1:DA:E6:0F:D1:0E:05:28:55:8D:B1:B6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E12211810837CAC17008F0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09457e15-48da-3306-8f1f-fe9e2da0fa29.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.31.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:22:11:81:08:37:ca:c1:70:08:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=96100809-7fa7-4eaa-8abf-41b70e73f001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:6c:d4:36:de:9a:ca:49:3f:b9:1c:72:34: 3b:fc:82:47:ad:6c:95:1c:47:2a:c2:7d:cf:1d:8b: f2:c7:9f:de:4e:87:79:7b:f3:97:2b:31:3c:57:b4: 83:8c:c4:c7:70:cf:e4:ef:10:db:b2:01:f7:d6:ad: 16:d7:24:c4:c1:a0:5d:ba:04:0a:e3:1d:a0:de:3b: ae:cb:4d:56:9b:37:7c:3c:b3:4e:29:a2:e4:7a:f0: 94:6a:3b:b1:33:11:72:cf:e7:5b:4f:7c:04:aa:81: fc:bf:bc:15:8b:22:50:43:3c:e7:7a:0f:f6:c5:81: 59:e8:37:76:e6:25:cd:a1:68:fb:9d:a4:0c:47:78: 0d:f3:16:91:63:13:2a:88:2b:0a:aa:dd:76:9f:44: ac:6b:b1:9e:a7:63:75:4d:20:9d:33:34:42:3c:0f: 99:07:e7:69:e8:74:bc:86:ec:c4:71:e8:40:75:41: e2:34:ab:2a:a5:3a:5f:be:12:fe:57:b0:2f:a2:e4: 44:b9:39:e7:f0:9b:40:df:58:09:9a:73:67:4c:f1: 43:23:ab:64:30:e8:11:68:4e:3c:a4:9a:ee:b1:11: 86:71:40:71:15:02:01:e4:3d:bf:7d:fc:f7:48:41: 46:aa:0a:00:a1:a6:05:f6:06:77:45:14:f2:68:4b: 25:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:18:97:3C:67:4B:ED:3C:F1:DA:E6:0F:D1:0E:05:28:55:8D:B1:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/09457e15-48da-3306-8f1f-fe9e2da0fa29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:39:6c:1c:e3:80:12:68:c7:5c:bc:c0:73:85:3c:f2:c7:2e: 21:70:ea:cd:fa:26:b3:0b:dd:df:d5:e1:57:ce:2a:5a:b3:71: ba:e6:65:20:f1:07:20:e5:cf:5a:7e:b1:93:0c:3c:a2:11:08: 32:83:4b:40:0e:b0:8c:ef:b6:70:c1:70:37:b5:34:6e:66:f6: 0e:1c:68:10:06:12:c5:b1:6f:9e:b7:b5:19:a0:6e:ef:a6:0a: d5:de:91:e0:04:af:63:0a:f9:5a:07:bc:5f:0f:08:43:8e:c5: 5f:fc:60:03:b5:0c:91:f4:76:40:ae:0e:ec:74:fc:e0:92:d2: 49:b1:83:2e:71:93:88:81:18:77:9f:be:22:68:d2:82:fe:61: f1:82:71:3c:8c:4b:d8:5c:ee:b7:97:1a:41:20:a5:1d:2f:df: b4:ca:68:83:c8:6e:59:2c:e1:83:a6:54:28:54:15:b9:3c:a1: 18:d3:4d:15:1d:b8:da:b1:67:18:2d:bd:87:9f:32:83:a7:b7: 02:f8:17:65:3a:60:06:7d:99:f7:4f:22:88:2b:d7:ed:0d:9f: 16:6a:44:86:de:cc:01:6e:83:98:5a:28:ba:50:0b:b4:39:ee: ed:5e:d1:a6:3c:8f:ef:5d:e7:1d:ca:83:21:92:67:6f:6c:d7: 0a:5e:7e:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4SIRgQg3ysFwCPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OTYxMDA4MDktN2ZhNy00ZWFhLThhYmYtNDFiNzBlNzNmMDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW5s1DbemspJP7kccjQ7/IJHrWyVHEcqwn3P HYvyx5/eTod5e/OXKzE8V7SDjMTHcM/k7xDbsgH31q0W1yTEwaBdugQK4x2g3juu y01Wmzd8PLNOKaLkevCUajuxMxFyz+dbT3wEqoH8v7wViyJQQzzneg/2xYFZ6Dd2 5iXNoWj7naQMR3gN8xaRYxMqiCsKqt12n0Ssa7Gep2N1TSCdMzRCPA+ZB+dp6HS8 huzEcehAdUHiNKsqpTpfvhL+V7AvouREuTnn8JtA31gJmnNnTPFDI6tkMOgRaE48 pJrusRGGcUBxFQIB5D2/ffz3SEFGqgoAoaYF9gZ3RRTyaEslFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUYlzxnS+088drmD9EOBShVjbG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDk0NTdlMTUtNDhkYS0z MzA2LThmMWYtZmU5ZTJkYTBmYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFY5bBzjgBJox1y8wHOFPPLHLiFw6s36JrML3d/V4VfOKlqzcbrmZSDx ByDlz1p+sZMMPKIRCDKDS0AOsIzvtnDBcDe1NG5m9g4caBAGEsWxb563tRmgbu+m CtXekeAEr2MK+VoHvF8PCEOOxV/8YAO1DJH0dkCuDux0/OCS0kmxgy5xk4iBGHef viJo0oL+YfGCcTyMS9hc7reXGkEgpR0v37TKaIPIblks4YOmVChUFbk8oRjTTRUd uNqxZxgtvYefMoOntwL4F2U6YAZ9mfdPIogr1+0NnxZqRIbezAFug5haKLpQC7Q5 7u1e0aY8j+9d5x3KgyGSZ29s1wpefjY= -----END CERTIFICATE-----Generated at Thu Mar 26 15:27:23 2026 by rpki-client