$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39d794a6-d782-3907-850d-ab31d0fa8b9f.roa File: 39d794a6-d782-3907-850d-ab31d0fa8b9f.roa (raw, json) Hash identifier: 8HwX8Sq/LwJa6aLNv1njxVyY+/AOLz/d54PYR5/Pn7g= Subject key identifier: 38:77:71:9A:13:6B:AF:64:1E:36:87:70:AB:05:E2:C9:33:32:DA:16 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E4F1F37CCAC8C59A6B76A804C Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39d794a6-d782-3907-850d-ab31d0fa8b9f.roa Signing time: Sat 27 Jun 2026 09:00:12 +0000 ROA not before: Sat 27 Jun 2026 09:00:12 +0000 ROA not after: Fri 25 Sep 2026 09:00:12 +0000 asID: 19905 IP address blocks: 173.31.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:1f:37:cc:ac:8c:59:a6:b7:6a:80:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 27 09:00:12 2026 GMT Not After : Sep 25 09:00:12 2026 GMT Subject: CN=8152a9d6-f34a-4a4d-a236-207d7135b86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:91:d2:4b:aa:ae:ab:50:ee:85:b8:33:62:dd: 9b:ea:81:25:8f:30:cf:d0:34:56:c4:c0:4f:69:53: c7:5c:e0:fe:ee:e9:4d:42:e8:01:a8:ad:04:ce:2f: 41:39:78:7a:b3:47:1f:3f:4e:12:66:e4:88:3b:d9: 41:b4:3f:7c:bc:91:71:ae:29:5d:8f:ff:39:49:b6: 59:94:2b:cb:77:38:ac:d4:fc:78:91:85:79:78:d8: 71:a0:b6:17:5f:39:c8:7a:46:12:45:35:c0:58:af: 34:5a:0a:50:9f:2a:f3:60:22:73:37:9e:97:0b:cb: a7:3b:9f:89:b6:8b:5d:62:2f:9a:af:cd:b5:12:2c: d0:84:59:da:2a:c6:4c:74:80:a2:75:c2:ed:87:fb: 90:72:6e:00:a7:60:89:ac:bc:5f:b8:d2:e3:74:07: 00:0e:c8:3a:d6:5c:26:f5:69:8c:a7:aa:e3:19:cb: cb:b2:c4:5c:7d:12:8d:11:00:21:d0:08:b4:6c:f3: c0:c5:2e:31:4d:78:74:98:d9:ca:06:e2:79:7d:65: f3:c2:71:8e:29:e1:1d:b5:38:c1:24:e1:f5:f7:8f: ee:53:f7:84:f7:95:c6:f3:1c:9d:7e:97:dc:55:2a: 72:98:bf:c0:3c:de:f9:57:b9:fb:99:69:82:4c:5b: 2a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:77:71:9A:13:6B:AF:64:1E:36:87:70:AB:05:E2:C9:33:32:DA:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39d794a6-d782-3907-850d-ab31d0fa8b9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d2:6a:c4:eb:a9:34:04:e6:71:bc:45:bb:05:91:cb:8e:56: 23:a8:9d:28:52:f6:ce:02:da:41:c7:87:14:9e:19:06:e1:8a: 30:7a:47:f3:b4:47:b1:19:72:04:56:63:f6:31:4c:49:1e:3b: 4a:ac:f3:09:fa:00:5b:1e:24:73:fb:d4:f9:9b:12:9b:be:7e: 1b:2e:24:45:25:47:bd:46:47:54:29:64:1c:90:ff:51:98:a4: 14:74:dc:fa:ef:15:5b:b2:ed:9b:3f:3b:58:74:d9:c6:f4:1a: c7:3a:ec:46:96:e8:1e:84:b1:1b:91:6c:29:97:73:0d:d3:50: 2e:2e:35:77:f7:ad:25:5e:c5:e5:50:7d:e0:8f:ea:94:23:85: bf:3c:98:ee:ae:e0:ee:57:ac:52:84:d3:88:f1:95:d1:cd:72: 46:00:bc:b5:3d:b4:be:a2:72:27:2d:00:ea:ec:7c:82:f8:b3: c9:84:fc:6e:12:56:35:90:5b:19:c3:7b:58:81:87:3e:64:bb: b5:4e:af:85:5d:9e:74:4c:54:ae:b0:1f:e4:30:57:6c:c8:82: 51:f7:c6:02:53:7c:6c:bf:b5:0a:07:b3:bf:6a:42:81:67:59: 7c:50:4f:8d:ab:58:d9:66:04:33:f9:d1:76:3f:66:af:18:b9: cb:d6:1b:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PHzfMrIxZprdqgEwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk ODE1MmE5ZDYtZjM0YS00YTRkLWEyMzYtMjA3ZDcxMzViODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpHSS6quq1DuhbgzYt2b6oEljzDP0DRWxMBP aVPHXOD+7ulNQugBqK0Ezi9BOXh6s0cfP04SZuSIO9lBtD98vJFxrildj/85SbZZ lCvLdzis1Px4kYV5eNhxoLYXXznIekYSRTXAWK80WgpQnyrzYCJzN56XC8unO5+J totdYi+ar821EizQhFnaKsZMdICidcLth/uQcm4Ap2CJrLxfuNLjdAcADsg61lwm 9WmMp6rjGcvLssRcfRKNEQAh0Ai0bPPAxS4xTXh0mNnKBuJ5fWXzwnGOKeEdtTjB JOH194/uU/eE95XG8xydfpfcVSpymL/APN75V7n7mWmCTFsqXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDh3cZoTa69kHjaHcKsF4skzMtoWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzlkNzk0YTYtZDc4Mi0z OTA3LTg1MGQtYWIzMWQwZmE4YjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7SasTrqTQE5nG8RbsFkcuOViOonShS9s4C2kHHhxSeGQbhijB6R/O0 R7EZcgRWY/YxTEkeO0qs8wn6AFseJHP71PmbEpu+fhsuJEUlR71GR1QpZByQ/1GY pBR03PrvFVuy7Zs/O1h02cb0Gsc67EaW6B6EsRuRbCmXcw3TUC4uNXf3rSVexeVQ feCP6pQjhb88mO6u4O5XrFKE04jxldHNckYAvLU9tL6icictAOrsfIL4s8mE/G4S VjWQWxnDe1iBhz5ku7VOr4VdnnRMVK6wH+QwV2zIglH3xgJTfGy/tQoHs79qQoFn WXxQT42rWNlmBDP50XY/Zq8YucvWGyo= -----END CERTIFICATE-----Generated at Fri Jul 24 10:10:08 2026 by rpki-client