$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/761c5231-3c09-3d63-a585-57def094f5d2.roa File: 761c5231-3c09-3d63-a585-57def094f5d2.roa (raw, json) Hash identifier: FYIqWqUrPYC3QQ+TBaz1bHNv7BV2eaAKqqbhs5e2xWM= Subject key identifier: B4:1A:EB:DC:86:2B:5B:36:96:BB:41:81:B2:8C:25:73:6E:F3:96:03 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D39CF9B6498C15BE15FEF1A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/761c5231-3c09-3d63-a585-57def094f5d2.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.31.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:9b:64:98:c1:5b:e1:5f:ef:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=1ff281db-1ed7-44b3-9c17-38e578d781af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cd:a4:e5:b4:7b:c7:49:5c:7d:fe:b0:72:19: f7:ef:4f:b4:18:71:bc:29:7d:89:69:0e:94:f3:68: da:65:2e:4e:a3:9a:3d:02:42:ac:d0:ba:af:3e:a5: 70:6c:27:9b:cc:26:39:a0:d6:31:e1:e3:34:a1:05: 72:ec:c0:24:03:5c:77:9a:9f:e7:56:77:40:69:f5: ce:4f:50:82:37:04:95:7d:a3:bd:3e:17:e0:a5:65: 96:c0:3f:bb:a5:4c:4d:ae:98:9e:e2:6c:ad:41:55: 12:9a:a2:e5:0e:7f:4e:04:d6:e7:42:8b:4b:f5:95: b9:79:d6:14:c4:9c:94:0c:6f:71:f8:21:be:76:2a: ab:80:46:e7:a0:b2:7b:18:f6:9b:f0:54:42:b2:74: b8:4f:bc:26:14:4f:cd:f2:be:89:76:9b:fd:bb:35: b0:fc:5a:ec:93:a3:df:7a:54:44:f5:28:ec:99:06: 02:69:d6:0e:c6:b6:a1:ca:e2:26:cc:d1:15:b0:10: f4:d1:27:29:cc:72:12:b0:10:39:d0:cb:40:cc:8e: 7b:ef:1a:2f:a4:a2:5a:c9:09:ee:22:35:f8:f0:3c: f5:73:74:4b:7c:ec:a1:0d:84:55:c1:53:a8:88:77: 11:8f:29:e0:5b:65:f2:2d:e7:83:37:ad:f3:eb:37: 2d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1A:EB:DC:86:2B:5B:36:96:BB:41:81:B2:8C:25:73:6E:F3:96:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/761c5231-3c09-3d63-a585-57def094f5d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d9:19:5b:81:c1:f0:16:9c:10:48:6c:ab:58:22:50:9c:24: cd:bb:02:4b:27:26:82:e0:a6:f0:b8:3d:b9:90:d1:08:08:36: 1e:ae:ec:65:d6:18:8f:24:a5:b1:50:3c:cc:c1:d7:dd:8a:ce: 11:c5:51:8c:e4:91:b4:dc:ce:6c:92:f1:a3:5b:42:0c:b3:a9: 59:bb:7a:75:10:f7:7b:15:cc:78:d2:23:5c:29:22:a3:60:8c: d3:3f:07:57:89:11:58:23:1c:12:5e:9f:de:c9:57:fe:df:62: ce:e8:06:5a:71:d4:93:18:a3:28:c1:8a:b6:d1:2c:af:8e:ed: 8c:b3:f8:ec:f9:61:65:32:02:5c:6b:4d:54:f7:2c:9a:d2:da: 8b:a0:b3:0f:ef:43:e1:17:15:e1:17:91:52:62:81:3f:28:c8: 28:fb:71:a8:e1:55:83:f8:ee:6e:7c:c5:da:71:a9:2a:7a:06: b8:fe:8b:c6:9b:0e:c2:fc:9a:e3:e8:17:9d:0c:90:09:6e:91: 50:64:55:82:ba:51:8d:7f:b3:80:da:d0:51:87:cf:2c:a8:0f: 09:62:f4:68:88:46:c1:d7:bf:4c:a4:66:32:18:da:73:cf:26: c3:cb:c2:3e:ad:e9:f3:38:70:48:a2:83:9a:47:71:2e:53:94: c3:33:57:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z5tkmMFb4V/vGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MWZmMjgxZGItMWVkNy00NGIzLTljMTctMzhlNTc4ZDc4MWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4c2k5bR7x0lcff6wchn370+0GHG8KX2JaQ6U 82jaZS5Oo5o9AkKs0LqvPqVwbCebzCY5oNYx4eM0oQVy7MAkA1x3mp/nVndAafXO T1CCNwSVfaO9PhfgpWWWwD+7pUxNrpie4mytQVUSmqLlDn9OBNbnQotL9ZW5edYU xJyUDG9x+CG+diqrgEbnoLJ7GPab8FRCsnS4T7wmFE/N8r6Jdpv9uzWw/Frsk6Pf elRE9SjsmQYCadYOxrahyuImzNEVsBD00ScpzHISsBA50MtAzI577xovpKJayQnu IjX48Dz1c3RLfOyhDYRVwVOoiHcRjyngW2XyLeeDN63z6zctyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQa69yGK1s2lrtBgbKMJXNu85YDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzYxYzUyMzEtM2MwOS0z ZDYzLWE1ODUtNTdkZWYwOTRmNWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzZGVuBwfAWnBBIbKtYIlCcJM27AksnJoLgpvC4PbmQ0QgINh6u7GXW GI8kpbFQPMzB192KzhHFUYzkkbTczmyS8aNbQgyzqVm7enUQ93sVzHjSI1wpIqNg jNM/B1eJEVgjHBJen97JV/7fYs7oBlpx1JMYoyjBirbRLK+O7Yyz+Oz5YWUyAlxr TVT3LJrS2ougsw/vQ+EXFeEXkVJigT8oyCj7cajhVYP47m58xdpxqSp6Brj+i8ab DsL8muPoF50MkAlukVBkVYK6UY1/s4Da0FGHzyyoDwli9GiIRsHXv0ykZjIY2nPP JsPLwj6t6fM4cEiig5pHcS5TlMMzV24= -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:18 2026 by rpki-client