$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58f65567-1019-3bcd-90b9-d7e6ef69c9d6.roa File: 58f65567-1019-3bcd-90b9-d7e6ef69c9d6.roa (raw, json) Hash identifier: YRS39kkpxPhR/O+wiK8Pb/6VxbrK5LdNCcD0rMR8N2s= Subject key identifier: BD:F3:A2:EB:FE:29:F8:D1:CA:B8:7A:59:BC:59:61:34:BB:BE:35:76 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D754CF9A34ABB42808AC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58f65567-1019-3bcd-90b9-d7e6ef69c9d6.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.31.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:75:4c:f9:a3:4a:bb:42:80:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=a43973df-b0bd-49e7-83c3-4ca475afb6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:20:36:4c:ca:1d:d7:b4:6f:44:f5:20:88:93: 4a:6a:b4:44:e7:cf:dd:70:5b:0e:80:6d:48:a3:e9: a0:47:fe:7b:a6:2c:dc:e1:ce:41:25:69:a0:c4:2d: 4f:15:3b:79:f3:e1:23:cf:80:3a:32:5a:dc:1e:1b: e7:c2:94:eb:b3:56:d4:bb:05:93:f5:bd:23:3d:95: 73:a5:c2:5d:f0:f3:b8:5e:97:1a:47:50:f7:e9:7f: 1e:c3:e6:bb:92:7e:59:ee:06:44:fe:09:00:d9:09: 62:3f:5e:9b:da:0a:4b:de:1e:97:43:9e:ae:c1:d5: 88:cd:a9:67:67:18:68:e3:f4:1c:15:c3:0b:4c:e2: 9f:09:93:85:fd:5b:20:a1:0f:f2:1e:ff:93:eb:e9: e3:f5:6a:c2:3a:c1:f8:93:58:6b:f1:b6:a9:52:88: 99:0b:eb:fa:af:0d:2f:82:d1:e8:ac:55:08:3c:b8: 5d:f2:df:21:69:0c:d4:65:cd:09:0d:58:5f:d7:41: 08:52:ad:8e:f7:d8:61:8a:7a:44:eb:b0:98:e8:31: 42:0d:1e:47:ab:11:e2:59:13:61:e0:41:11:6f:19: 69:7f:6a:5b:8e:b1:f1:8f:c3:9e:40:20:48:7c:04: 4a:f2:28:c2:5b:2f:99:29:7f:4c:ab:b0:2d:fc:b7: 51:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F3:A2:EB:FE:29:F8:D1:CA:B8:7A:59:BC:59:61:34:BB:BE:35:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/58f65567-1019-3bcd-90b9-d7e6ef69c9d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b8:91:6a:0e:fd:17:d3:a3:a7:81:53:b2:9c:59:2e:4b:e2: 37:e4:4e:2c:bd:80:1c:da:4c:38:29:b4:93:cb:e8:dc:0e:82: 88:51:00:ec:a2:43:7c:46:8a:a6:65:74:47:c2:49:d7:6d:37: aa:fd:d3:23:19:e4:ce:a9:7f:8a:8b:93:eb:17:89:b3:99:66: 6a:2d:4f:1c:60:9f:cb:8d:77:82:47:73:92:6f:95:88:53:dd: ea:c3:c9:aa:59:e6:bd:63:35:03:e9:a3:71:1b:a0:5d:11:04: be:79:b6:2e:e3:8b:43:af:35:4a:f0:68:e5:d9:16:8a:42:cd: 70:e7:d9:cb:b3:d1:04:89:fb:5d:31:ec:fc:96:19:f7:72:96: 54:24:ab:06:00:f6:a5:db:9b:2c:c8:f2:06:6f:3f:c8:b2:f2: 90:52:e1:80:bc:0e:6f:5f:19:ef:39:64:37:23:5f:46:59:fa: f4:40:f7:48:8a:0f:2d:a5:81:c8:f6:50:67:9f:d9:2a:08:73: bc:42:2d:81:ff:e1:57:4b:3b:75:ef:30:18:df:ff:36:68:75: 4f:70:ab:e9:bc:ee:81:4f:22:6f:c7:ec:e7:9c:ff:3b:57:2b: 7f:01:51:d6:e9:96:46:34:44:e2:4b:cf:36:3e:33:25:96:b3: 44:c1:14:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXVM+aNKu0KAisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YTQzOTczZGYtYjBiZC00OWU3LTgzYzMtNGNhNDc1YWZiNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyA2TMod17RvRPUgiJNKarRE58/dcFsOgG1I o+mgR/57pizc4c5BJWmgxC1PFTt58+Ejz4A6MlrcHhvnwpTrs1bUuwWT9b0jPZVz pcJd8PO4XpcaR1D36X8ew+a7kn5Z7gZE/gkA2QliP16b2gpL3h6XQ56uwdWIzaln Zxho4/QcFcMLTOKfCZOF/VsgoQ/yHv+T6+nj9WrCOsH4k1hr8bapUoiZC+v6rw0v gtHorFUIPLhd8t8haQzUZc0JDVhf10EIUq2O99hhinpE67CY6DFCDR5HqxHiWRNh 4EERbxlpf2pbjrHxj8OeQCBIfARK8ijCWy+ZKX9Mq7At/LdRCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3zouv+KfjRyrh6WbxZYTS7vjV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNThmNjU1NjctMTAxOS0z YmNkLTkwYjktZDdlNmVmNjljOWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm4kWoO/RfTo6eBU7KcWS5L4jfkTiy9gBzaTDgptJPL6NwOgohRAOyi Q3xGiqZldEfCSddtN6r90yMZ5M6pf4qLk+sXibOZZmotTxxgn8uNd4JHc5JvlYhT 3erDyapZ5r1jNQPpo3EboF0RBL55ti7ji0OvNUrwaOXZFopCzXDn2cuz0QSJ+10x 7PyWGfdyllQkqwYA9qXbmyzI8gZvP8iy8pBS4YC8Dm9fGe85ZDcjX0ZZ+vRA90iK Dy2lgcj2UGef2SoIc7xCLYH/4VdLO3XvMBjf/zZodU9wq+m87oFPIm/H7Oec/ztX K38BUdbplkY0ROJLzzY+MyWWs0TBFC0= -----END CERTIFICATE-----Generated at Sat Sep 26 03:32:14 2026 by rpki-client