$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23633882-4f4c-353c-88a8-3732f64f6b69.roa File: 23633882-4f4c-353c-88a8-3732f64f6b69.roa (raw, json) Hash identifier: gmsI25PIJcRP0VKpI+c0mUxk1+XQox4aLpc7bPNVHGc= Subject key identifier: 3F:18:A8:4A:6F:38:8F:97:E6:09:19:4C:7F:4C:D6:0B:EA:50:98:19 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E11217E70615C6FD323060 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23633882-4f4c-353c-88a8-3732f64f6b69.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.31.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:12:17:e7:06:15:c6:fd:32:30:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=dc4acb3f-88ab-4b12-9869-9eb22b705a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bb:2e:68:b3:f5:ac:96:02:ab:16:6b:e6:53: f0:a5:1b:b2:76:11:0f:99:ce:04:d1:b3:13:a4:9f: c4:e3:38:17:5b:b7:82:b8:c6:86:e0:a2:59:7a:b3: 26:67:b8:a5:16:1d:c5:3c:b3:d1:af:06:25:99:3b: 00:85:0a:8c:57:6c:bd:59:0b:e3:a6:99:f8:6f:95: 85:e4:1b:b1:4e:e4:4e:2e:80:40:d6:d6:f7:05:d8: d0:c5:ce:02:f2:3c:20:d3:21:d0:e7:77:db:49:68: 55:92:41:4a:ed:b3:51:95:ba:c7:fd:23:9a:24:f8: 5f:a9:0b:78:96:8b:05:85:8a:0c:75:f4:99:fc:36: 48:fd:5e:87:e8:1a:15:1a:f4:7f:37:2a:c8:98:07: ef:50:87:80:55:1b:80:4e:bf:e3:68:96:ea:25:93: 66:46:43:79:6a:ba:12:52:4a:2e:e9:ae:ef:7f:86: 9a:7f:0f:a4:a2:c1:f3:bc:2f:15:b6:7c:4c:f2:d3: 18:94:f3:e0:1a:2a:43:12:8d:de:75:f1:39:12:ba: 7b:36:aa:a0:73:9a:0b:c3:d1:b3:92:93:8e:12:07: 63:43:80:6b:13:c8:71:b1:99:82:e1:d9:b8:4a:06: e9:e5:6a:fb:2e:9e:91:88:7c:d4:1e:f4:f2:e4:0b: 5f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:18:A8:4A:6F:38:8F:97:E6:09:19:4C:7F:4C:D6:0B:EA:50:98:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23633882-4f4c-353c-88a8-3732f64f6b69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e7:eb:a8:44:6f:68:8a:27:8c:56:97:6b:01:ed:fc:67:af: e1:ca:0f:29:59:8b:46:92:8d:e0:d9:24:c4:b5:72:16:4d:dc: 65:10:11:b3:de:6c:91:67:ef:d2:e7:91:de:33:84:da:29:a8: 00:82:f5:49:1c:d4:52:92:2a:3d:bf:1c:a7:2a:44:b6:69:68: 0a:30:d0:e8:b0:5d:54:37:36:1e:8a:fb:83:b0:c0:86:89:15: 9a:2c:89:06:28:da:db:77:92:52:fe:11:66:8b:fb:5c:c0:55: 58:57:fb:e3:7d:cc:95:d7:48:55:60:49:7c:0e:a3:3c:ea:8a: 5f:bd:dc:4c:fc:d0:b3:90:b8:68:64:91:d8:b0:9d:ab:91:8d: ec:e1:bc:0b:39:e1:2e:84:2c:b7:47:37:a1:c7:49:07:c9:7c: 5a:90:b9:70:e3:57:5b:f8:54:b1:1c:9c:c8:76:a3:8b:01:3b: bc:e7:f6:1e:d8:58:87:14:ad:fe:ad:fa:1e:c8:d3:1d:03:49: e7:7e:4a:6c:88:99:01:c7:35:4b:71:ac:d1:b6:6f:0d:63:33: bf:38:c8:73:e0:8d:b3:56:6a:4a:14:43:d6:ec:76:17:64:ca: 57:4a:0e:75:df:cd:a7:bf:a0:aa:ef:a9:1f:0d:79:45:de:20: 0b:40:62:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4RIX5wYVxv0yMGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGM0YWNiM2YtODhhYi00YjEyLTk4NjktOWViMjJiNzA1YTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLsuaLP1rJYCqxZr5lPwpRuydhEPmc4E0bMT pJ/E4zgXW7eCuMaG4KJZerMmZ7ilFh3FPLPRrwYlmTsAhQqMV2y9WQvjppn4b5WF 5BuxTuROLoBA1tb3BdjQxc4C8jwg0yHQ53fbSWhVkkFK7bNRlbrH/SOaJPhfqQt4 losFhYoMdfSZ/DZI/V6H6BoVGvR/NyrImAfvUIeAVRuATr/jaJbqJZNmRkN5aroS Ukou6a7vf4aafw+kosHzvC8VtnxM8tMYlPPgGipDEo3edfE5Erp7Nqqgc5oLw9Gz kpOOEgdjQ4BrE8hxsZmC4dm4Sgbp5Wr7Lp6RiHzUHvTy5AtftwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8YqEpvOI+X5gkZTH9M1gvqUJgZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjM2MzM4ODItNGY0Yy0z NTNjLTg4YTgtMzczMmY2NGY2YjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXn66hEb2iKJ4xWl2sB7fxnr+HKDylZi0aSjeDZJMS1chZN3GUQEbPe bJFn79Lnkd4zhNopqACC9Ukc1FKSKj2/HKcqRLZpaAow0OiwXVQ3Nh6K+4OwwIaJ FZosiQYo2tt3klL+EWaL+1zAVVhX++N9zJXXSFVgSXwOozzqil+93Ez80LOQuGhk kdiwnauRjezhvAs54S6ELLdHN6HHSQfJfFqQuXDjV1v4VLEcnMh2o4sBO7zn9h7Y WIcUrf6t+h7I0x0DSed+SmyImQHHNUtxrNG2bw1jM784yHPgjbNWakoUQ9bsdhdk yldKDnXfzae/oKrvqR8NeUXeIAtAYj0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:18:40 2026 by rpki-client