$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31592171-b7c5-351e-9e88-b38ea9311cea.roa File: 31592171-b7c5-351e-9e88-b38ea9311cea.roa (raw, json) Hash identifier: v2GQKXCGRnN/skVCZpG4VCD8GaKY7nz76L25vgjoUmo= Subject key identifier: A7:B7:E4:6B:9C:9B:F8:D9:D6:06:22:F2:5C:0E:7F:57:B0:9C:A8:38 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2644AE61E3B7F81E50D1DFE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31592171-b7c5-351e-9e88-b38ea9311cea.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 30036 IP address blocks: 173.21.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:ae:61:e3:b7:f8:1e:50:d1:df:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=a0ae23cc-54f3-47b7-830c-b0c3a619fe3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:31:a2:4e:56:8b:32:46:74:97:d9:d8:9e:f2: 2e:a6:c2:46:f2:51:6c:52:65:88:a0:e8:2d:99:8f: c4:50:7c:83:af:ca:f4:05:29:c0:af:c5:c7:0e:c2: 5f:7b:08:b5:64:2d:0c:92:97:ae:f6:2d:15:c9:9e: 7f:74:8d:2a:44:91:ea:1a:8e:ed:9f:6c:a2:52:28: f7:c3:26:fe:ab:c9:b2:fe:20:f9:42:83:53:ef:55: 3b:36:53:d9:67:fc:bb:f7:4b:ee:fc:6d:9d:76:a8: 95:3c:06:93:7d:d7:f6:79:6d:56:eb:87:70:6c:14: 4f:e9:73:93:16:5e:e3:9b:8e:1e:bc:0f:92:8b:8f: 41:4d:84:64:3d:2b:10:c4:12:0f:fb:c8:ac:70:17: 7e:3c:40:f3:cc:ac:9a:3c:2f:64:c7:90:7f:78:73: 31:48:82:d7:47:60:db:c7:49:d5:41:09:66:e0:a9: 6c:88:4e:ad:7f:4f:8f:f1:cc:83:4b:a8:f4:c1:99: e3:97:84:14:d7:cf:16:8f:89:66:0b:30:ee:2d:aa: 7d:ae:48:70:e4:56:f0:d8:64:32:d6:73:0c:a9:c9: dd:14:45:c1:81:fe:1e:2c:e2:ce:0a:38:6a:3e:11: ae:cf:94:c8:41:a6:c1:fe:5b:50:50:1e:17:2a:ef: 2a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B7:E4:6B:9C:9B:F8:D9:D6:06:22:F2:5C:0E:7F:57:B0:9C:A8:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/31592171-b7c5-351e-9e88-b38ea9311cea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:41:eb:c3:e8:1d:24:d7:16:f0:1f:9d:35:21:a3:9b:be:c7: 05:90:49:b8:50:76:71:87:9c:73:97:0e:40:ac:61:35:9f:d8: cb:96:b8:7e:f5:0e:b8:f9:5c:81:b5:e9:60:9f:0b:e6:67:ed: 4e:bd:a4:7d:fe:be:59:da:b5:ee:a3:d9:cf:c5:4f:f1:e9:ff: 4e:1b:f7:1a:ea:64:38:7b:fe:14:d5:04:d9:a5:dc:b5:40:37: 67:80:c8:77:dd:08:f8:14:8d:e0:c3:78:e8:1d:b9:2a:85:5b: 82:e0:ec:4f:2e:f8:09:fc:63:cd:a1:09:6d:f0:78:17:93:19: f7:ad:c1:7f:56:7b:a1:5c:e2:6c:88:75:d5:7a:cb:88:af:de: a3:fc:15:03:84:2e:43:5d:20:f1:8b:84:06:cd:15:07:6e:a1: 5b:9a:ee:34:5d:61:4b:19:f4:f3:f8:b9:85:9a:78:9d:72:df: a6:1b:f6:9d:19:c1:e8:2a:1a:a8:cd:c8:6b:48:8a:af:b1:ff: 34:c4:67:cc:27:76:35:59:f3:85:d1:f5:ab:98:c1:2f:a3:b8: fc:3c:e4:ab:c8:a8:48:b1:96:e1:17:ee:b5:b2:b6:3d:54:17: 96:29:74:ec:1c:04:da:44:e1:bf:51:9a:f1:9c:e6:a2:0c:28: 90:c4:c4:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRK5h47f4HlDR3+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk YTBhZTIzY2MtNTRmMy00N2I3LTgzMGMtYjBjM2E2MTlmZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDGiTlaLMkZ0l9nYnvIupsJG8lFsUmWIoOgt mY/EUHyDr8r0BSnAr8XHDsJfewi1ZC0Mkpeu9i0VyZ5/dI0qRJHqGo7tn2yiUij3 wyb+q8my/iD5QoNT71U7NlPZZ/y790vu/G2ddqiVPAaTfdf2eW1W64dwbBRP6XOT Fl7jm44evA+Si49BTYRkPSsQxBIP+8iscBd+PEDzzKyaPC9kx5B/eHMxSILXR2Db x0nVQQlm4KlsiE6tf0+P8cyDS6j0wZnjl4QU188Wj4lmCzDuLap9rkhw5Fbw2GQy 1nMMqcndFEXBgf4eLOLOCjhqPhGuz5TIQabB/ltQUB4XKu8qQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKe35Gucm/jZ1gYi8lwOf1ewnKg4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzE1OTIxNzEtYjdjNS0z NTFlLTllODgtYjM4ZWE5MzExY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVB68PoHSTXFvAfnTUho5u+xwWQSbhQdnGHnHOXDkCsYTWf2MuWuH71 Drj5XIG16WCfC+Zn7U69pH3+vlnate6j2c/FT/Hp/04b9xrqZDh7/hTVBNml3LVA N2eAyHfdCPgUjeDDeOgduSqFW4Lg7E8u+An8Y82hCW3weBeTGfetwX9We6Fc4myI ddV6y4iv3qP8FQOELkNdIPGLhAbNFQduoVua7jRdYUsZ9PP4uYWaeJ1y36Yb9p0Z wegqGqjNyGtIiq+x/zTEZ8wndjVZ84XR9auYwS+juPw85KvIqEixluEX7rWytj1U F5YpdOwcBNpE4b9RmvGc5qIMKJDExIQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:05:44 2026 by rpki-client