$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad554eb-9cea-3b26-9fe7-0a0e8542d977.roa File: 0ad554eb-9cea-3b26-9fe7-0a0e8542d977.roa (raw, json) Hash identifier: PmEB2GU3NKz+sYsgzItvjAhpgacFVaWpXfx7ki8G314= Subject key identifier: 7A:C2:E2:DE:56:B4:0D:22:54:45:FB:66:40:9F:1D:30:1E:09:8A:6C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49732889003A96367D015700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad554eb-9cea-3b26-9fe7-0a0e8542d977.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.31.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:28:89:00:3a:96:36:7d:01:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=aa29a5e7-0f8f-441a-ad49-8f786a69dbbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2e:dd:a6:e1:a0:fe:ed:cd:b5:96:45:1c:c2: 12:3c:7f:f0:94:8f:ab:38:c0:31:f9:ba:0a:aa:c7: 6d:b3:8f:6a:73:90:f8:95:27:39:8c:0e:78:e8:64: 38:cf:52:ce:fd:de:4e:89:0c:a1:b7:a4:73:05:f7: a4:88:c7:31:11:e4:bb:54:28:8f:a7:cd:9f:d7:26: 12:cb:47:6f:51:fa:b0:5d:87:4b:e7:40:08:c5:7a: a2:40:6e:69:50:cb:9f:6d:eb:c2:32:07:7d:d8:7b: 12:e7:cc:7e:5c:15:ae:50:e1:57:9c:46:67:a8:7c: 98:01:fe:1c:21:16:7a:cc:c0:ab:d3:b0:73:9e:64: 9c:37:3e:35:e1:5d:66:cb:7f:55:be:4d:b4:ac:7c: a8:13:a4:45:e6:07:ef:66:bf:53:f0:95:28:17:50: 57:e4:e6:e8:c4:44:93:bb:a2:5d:dd:fc:2b:a1:77: ec:90:f3:f8:be:56:76:09:28:28:15:2b:02:5d:66: 1c:3c:20:50:b4:b4:22:eb:f8:ab:0f:88:e2:99:62: 84:a6:c1:07:b7:de:f4:e6:e4:52:8d:04:e9:ea:bf: 96:37:91:f1:7f:1f:b7:62:45:44:84:07:cd:6c:c9: 7d:37:df:50:66:f6:23:8d:c2:08:a4:2f:f6:6b:c7: ca:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C2:E2:DE:56:B4:0D:22:54:45:FB:66:40:9F:1D:30:1E:09:8A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ad554eb-9cea-3b26-9fe7-0a0e8542d977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ab:d5:84:22:14:e1:ed:0d:a4:d2:20:36:db:90:58:67:f2: be:ce:7c:31:be:a9:52:ce:1d:0b:20:f4:83:98:d4:7d:00:da: 5a:97:ba:f6:95:d9:0e:fd:ed:0d:21:7c:dd:d8:1e:b6:f3:95: d8:ea:ae:7d:81:65:86:4d:bd:f5:5e:c7:7e:0f:7d:ab:b4:ef: 35:06:72:45:5a:b8:b4:be:9d:48:49:5c:17:65:12:51:e6:f1: 09:61:f3:02:d8:62:cf:b8:f4:7e:32:4e:d9:6b:a1:5b:1f:b2: 94:b2:b6:f0:a9:4a:9b:c0:7e:59:bc:59:46:32:d0:1c:e2:97: 8e:90:65:7c:6f:40:7b:1d:e7:5c:64:1a:db:ba:16:8f:d2:20: 59:e7:d2:a0:b0:4e:cb:81:80:5e:14:49:b8:91:c5:f5:d3:03: 02:41:27:fe:7f:16:55:89:ea:74:80:f4:29:cb:5c:32:be:fc: ba:aa:94:cd:cf:8b:d0:bd:78:2b:3a:e1:70:99:33:41:ab:28: 37:d2:3c:2b:63:dd:b6:f4:d8:76:ed:17:78:e1:3d:e8:60:42: 4d:9a:19:e2:95:5f:93:65:4c:ad:18:d5:c1:3c:d1:ff:3f:d4: 82:37:96:d0:ad:de:40:01:87:6d:ae:bf:fa:43:b6:69:9c:6b: 8d:9c:e5:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcyiJADqWNn0BVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWEyOWE1ZTctMGY4Zi00NDFhLWFkNDktOGY3ODZhNjlkYmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8S7dpuGg/u3NtZZFHMISPH/wlI+rOMAx+boK qsdts49qc5D4lSc5jA546GQ4z1LO/d5OiQyht6RzBfekiMcxEeS7VCiPp82f1yYS y0dvUfqwXYdL50AIxXqiQG5pUMufbevCMgd92HsS58x+XBWuUOFXnEZnqHyYAf4c IRZ6zMCr07BznmScNz414V1my39Vvk20rHyoE6RF5gfvZr9T8JUoF1BX5OboxEST u6Jd3fwroXfskPP4vlZ2CSgoFSsCXWYcPCBQtLQi6/irD4jimWKEpsEHt9705uRS jQTp6r+WN5Hxfx+3YkVEhAfNbMl9N99QZvYjjcIIpC/2a8fKbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrC4t5WtA0iVEX7ZkCfHTAeCYpsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGFkNTU0ZWItOWNlYS0z YjI2LTlmZTctMGEwZTg1NDJkOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyr1YQiFOHtDaTSIDbbkFhn8r7OfDG+qVLOHQsg9IOY1H0A2lqXuvaV 2Q797Q0hfN3YHrbzldjqrn2BZYZNvfVex34Pfau07zUGckVauLS+nUhJXBdlElHm 8Qlh8wLYYs+49H4yTtlroVsfspSytvCpSpvAflm8WUYy0Bzil46QZXxvQHsd51xk Gtu6Fo/SIFnn0qCwTsuBgF4USbiRxfXTAwJBJ/5/FlWJ6nSA9CnLXDK+/LqqlM3P i9C9eCs64XCZM0GrKDfSPCtj3bb02HbtF3jhPehgQk2aGeKVX5NlTK0Y1cE80f8/ 1II3ltCt3kABh22uv/pDtmmca42c5aQ= -----END CERTIFICATE-----Generated at Tue Sep 29 13:25:17 2026 by rpki-client