$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/320fdcb1-da17-37d4-a57e-e33ff9106025.roa File: 320fdcb1-da17-37d4-a57e-e33ff9106025.roa (raw, json) Hash identifier: qlOmsRbmIfL9S41vVK5iuGlrID3kkz9Qoq90uT8XERA= Subject key identifier: 20:63:5E:78:31:5F:35:5C:4E:9B:B2:BC:31:CE:4A:B4:AA:75:E3:78 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F480D312E0CB0653A2E8AB9C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/320fdcb1-da17-37d4-a57e-e33ff9106025.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.31.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:31:2e:0c:b0:65:3a:2e:8a:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=aa2f577b-8412-433b-9734-5b487a1e80fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:ca:25:de:c6:a9:08:48:ce:5c:eb:de:e8: 04:2d:c4:be:23:66:7a:10:2b:14:b1:6a:e1:07:26: 65:00:69:0a:87:fc:58:71:01:0e:f1:6b:6a:dc:ce: 57:9c:99:d9:b9:5e:10:20:63:e5:a8:e7:30:15:64: d3:58:3f:72:4a:e9:8c:84:41:e6:88:d0:54:a6:0b: 6e:8f:76:cb:a5:85:cb:6e:e1:b9:1b:63:11:49:14: 37:2c:9a:2c:80:6c:b6:74:90:8a:52:73:75:d9:4d: 2a:f2:28:6c:72:8d:5b:ec:63:d3:eb:a6:c2:62:3e: 71:83:8f:f6:05:68:95:12:8b:65:56:f0:09:83:63: e6:7b:f6:7e:a0:a3:e3:60:4b:f5:03:91:4c:51:14: 07:02:5e:dc:0b:73:dd:d4:43:6e:9a:3e:3a:f8:bc: 5f:72:b9:79:d5:e3:5a:6a:58:4d:c0:45:e1:1f:05: f8:fc:dd:4b:03:ec:d9:87:42:4c:2a:f2:da:d7:9f: 0f:e2:4e:25:f2:ef:ed:2a:50:9f:0e:d7:aa:fb:e9: e5:79:5a:e2:a0:ae:31:f1:6f:5e:3d:23:95:f3:72: b4:85:d2:04:b0:3a:90:74:fc:9a:2b:c1:8d:f4:4e: 4b:fc:2a:f9:5d:7d:73:ca:ab:8a:09:5f:1c:aa:5f: 34:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:63:5E:78:31:5F:35:5C:4E:9B:B2:BC:31:CE:4A:B4:AA:75:E3:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/320fdcb1-da17-37d4-a57e-e33ff9106025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a9:f2:9e:f1:ff:c5:84:cd:58:e5:cb:c1:65:b0:2a:e7:e3: 0c:6a:ac:ca:67:19:36:e7:99:fa:bb:1f:6b:5e:e8:90:12:db: 5d:12:10:e4:f0:0b:b4:d0:d5:7d:29:23:9c:27:73:d5:b5:a3: af:da:b3:de:ff:b6:85:71:be:c8:66:f1:1b:af:38:9d:4f:dd: 62:75:c9:33:bd:45:da:af:3b:b6:37:5a:0a:54:69:65:68:2e: d2:12:f0:cb:26:57:f8:7a:93:72:1b:38:9d:f4:a3:81:ce:ed: 1d:ed:2d:da:ee:c7:9c:0d:08:be:e1:c5:6d:07:25:fc:53:f6: 4d:fc:fe:cb:59:be:e1:b4:23:89:f8:82:62:09:6b:f9:40:16: 43:b8:87:98:2b:17:69:45:8e:b3:4b:c9:7c:4e:f1:f5:49:9c: 35:b0:f1:71:8d:3f:9c:0d:05:b2:26:26:60:ed:c1:93:26:aa: 55:87:89:88:30:cb:35:fa:a4:72:3d:35:0f:2a:c2:9c:92:ff: 50:a4:8a:f4:7a:5c:8e:e4:c6:4b:23:0f:96:31:4f:fe:5d:3d: f0:e5:73:6b:11:e6:f9:a4:35:a3:1e:f5:8d:1e:98:fa:29:3c: d0:f1:52:25:33:82:1e:aa:b5:af:54:4f:96:c8:16:2b:be:38: 9c:3a:b2:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDTEuDLBlOi6KucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk YWEyZjU3N2ItODQxMi00MzNiLTk3MzQtNWI0ODdhMWU4MGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy/KJd7GqQhIzlzr3ugELcS+I2Z6ECsUsWrh ByZlAGkKh/xYcQEO8Wtq3M5XnJnZuV4QIGPlqOcwFWTTWD9ySumMhEHmiNBUpgtu j3bLpYXLbuG5G2MRSRQ3LJosgGy2dJCKUnN12U0q8ihsco1b7GPT66bCYj5xg4/2 BWiVEotlVvAJg2Pme/Z+oKPjYEv1A5FMURQHAl7cC3Pd1ENumj46+Lxfcrl51eNa alhNwEXhHwX4/N1LA+zZh0JMKvLa158P4k4l8u/tKlCfDteq++nleVrioK4x8W9e PSOV83K0hdIEsDqQdPyaK8GN9E5L/Cr5XX1zyquKCV8cql804wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBjXngxXzVcTpuyvDHOSrSqdeN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzIwZmRjYjEtZGExNy0z N2Q0LWE1N2UtZTMzZmY5MTA2MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR+qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFap8p7x/8WEzVjly8FlsCrn4wxqrMpnGTbnmfq7H2te6JAS210SEOTw C7TQ1X0pI5wnc9W1o6/as97/toVxvshm8RuvOJ1P3WJ1yTO9RdqvO7Y3WgpUaWVo LtIS8MsmV/h6k3IbOJ30o4HO7R3tLdrux5wNCL7hxW0HJfxT9k38/stZvuG0I4n4 gmIJa/lAFkO4h5grF2lFjrNLyXxO8fVJnDWw8XGNP5wNBbImJmDtwZMmqlWHiYgw yzX6pHI9NQ8qwpyS/1CkivR6XI7kxksjD5YxT/5dPfDlc2sR5vmkNaMe9Y0emPop PNDxUiUzgh6qta9UT5bIFiu+OJw6spk= -----END CERTIFICATE-----Generated at Fri Sep 25 09:27:42 2026 by rpki-client