$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d8d4815-ec48-3baf-b760-7fe106a740b0.roa File: 3d8d4815-ec48-3baf-b760-7fe106a740b0.roa (raw, json) Hash identifier: Sm6cXDdEtqGVSrdIBHY1LOTZeeGOb5zAOdxbcwibBX8= Subject key identifier: AF:D4:34:95:FB:D3:5A:8A:27:A6:FA:A7:D0:B7:F8:61:A9:78:0A:4A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DCDC5D1528695B0C5ACF67A40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d8d4815-ec48-3baf-b760-7fe106a740b0.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 19905 IP address blocks: 173.31.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:d1:52:86:95:b0:c5:ac:f6:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=87d45894-1683-43b8-ac4c-d3a8d6920a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:e0:d2:a7:93:ac:43:63:32:10:97:d6:ee: 46:0a:cc:64:6f:34:a3:93:22:1b:df:0a:1f:35:a3: fb:af:41:09:37:2f:df:2a:86:99:42:ac:c8:7a:eb: e2:6e:b7:d5:bd:5a:38:bb:f5:2a:81:da:ad:27:76: ff:ff:59:73:54:4b:ff:dc:a4:4f:0d:d3:1e:75:17: 6c:01:6b:26:4c:71:06:9a:93:ce:b2:30:d6:f6:5a: 7f:a2:5d:b5:39:ce:10:94:c0:d6:b9:d5:27:e2:05: 9c:6c:d0:59:ad:ab:e1:03:23:b8:78:4e:d6:14:c1: 0e:56:63:85:49:6f:29:05:9e:56:00:ef:de:ca:05: 4e:94:57:fd:0d:75:fc:d7:d5:7f:09:9d:2c:4c:5d: d4:17:39:5b:69:b1:7e:67:df:fe:b3:72:d2:0c:a8: 7c:7a:e2:f3:d9:75:ac:53:2c:03:d3:33:94:24:63: 77:85:d7:af:71:0f:c2:2a:5a:83:76:4f:8a:98:e6: 96:51:45:57:0f:23:09:9a:e1:c3:7e:29:1f:85:64: 97:59:f2:c8:65:32:70:c9:2c:88:63:77:55:74:aa: f7:80:a1:46:bb:98:6e:b8:84:d1:fa:69:3c:b3:d8: 0b:21:95:fc:8f:15:06:b3:81:f2:be:4b:c4:cf:96: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D4:34:95:FB:D3:5A:8A:27:A6:FA:A7:D0:B7:F8:61:A9:78:0A:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d8d4815-ec48-3baf-b760-7fe106a740b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:eb:73:54:68:88:c2:6c:43:b9:e9:8f:c2:ab:84:20:68:4b: 52:ac:67:37:a3:a6:a5:21:7c:21:03:76:c9:8d:5f:84:d5:ca: 12:43:ee:54:bc:b0:52:fe:21:56:f0:d3:5f:28:d2:29:9a:7f: 0d:5a:24:84:07:d1:6a:fe:6a:1d:b9:c5:20:ba:95:ec:dd:40: 9e:44:8a:32:e4:0c:7f:33:9f:33:25:26:be:9a:45:99:df:a1: 6d:93:3e:b0:56:1d:bf:5b:37:2a:73:2b:26:54:c8:fd:74:0d: a8:9b:2c:f3:f9:4c:d2:76:af:30:6c:3d:c2:c3:ed:04:56:31: c5:fb:34:8f:bb:5c:4c:d4:b2:d2:62:81:a5:dc:4b:f5:1a:8c: 27:41:d3:e8:e5:9e:06:29:e8:a0:de:03:83:f7:11:ca:7f:d4: cb:42:65:c1:ba:ec:5f:ee:80:21:fe:34:f0:39:d6:00:6f:d2: 25:8b:a5:ce:5c:e9:1f:36:d4:40:0f:62:dd:d8:04:7e:3b:36: b8:56:ea:62:31:35:d6:c8:4a:b1:1e:43:07:20:ff:62:e8:0b: 38:5f:ae:f7:63:a1:1e:2d:ac:b0:27:2d:c1:d9:da:92:ab:bb: 87:10:ed:77:4e:74:a2:25:ca:14:86:48:c8:ff:94:bb:e3:62: a7:fa:f7:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NxdFShpWwxaz2ekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk ODdkNDU4OTQtMTY4My00M2I4LWFjNGMtZDNhOGQ2OTIwYTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut/g0qeTrENjMhCX1u5GCsxkbzSjkyIb3wof NaP7r0EJNy/fKoaZQqzIeuvibrfVvVo4u/UqgdqtJ3b//1lzVEv/3KRPDdMedRds AWsmTHEGmpPOsjDW9lp/ol21Oc4QlMDWudUn4gWcbNBZravhAyO4eE7WFMEOVmOF SW8pBZ5WAO/eygVOlFf9DXX819V/CZ0sTF3UFzlbabF+Z9/+s3LSDKh8euLz2XWs UywD0zOUJGN3hdevcQ/CKlqDdk+KmOaWUUVXDyMJmuHDfikfhWSXWfLIZTJwySyI Y3dVdKr3gKFGu5huuITR+mk8s9gLIZX8jxUGs4HyvkvEz5YdKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/UNJX701qKJ6b6p9C3+GGpeApKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Q4ZDQ4MTUtZWM0OC0z YmFmLWI3NjAtN2ZlMTA2YTc0MGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbrc1RoiMJsQ7npj8KrhCBoS1KsZzejpqUhfCEDdsmNX4TVyhJD7lS8 sFL+IVbw018o0imafw1aJIQH0Wr+ah25xSC6lezdQJ5EijLkDH8znzMlJr6aRZnf oW2TPrBWHb9bNypzKyZUyP10DaibLPP5TNJ2rzBsPcLD7QRWMcX7NI+7XEzUstJi gaXcS/UajCdB0+jlngYp6KDeA4P3Ecp/1MtCZcG67F/ugCH+NPA51gBv0iWLpc5c 6R821EAPYt3YBH47NrhW6mIxNdbISrEeQwcg/2LoCzhfrvdjoR4trLAnLcHZ2pKr u4cQ7XdOdKIlyhSGSMj/lLvjYqf69/E= -----END CERTIFICATE-----Generated at Wed May 13 09:06:48 2026 by rpki-client