$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c8d948e-565b-33fd-90e4-46342b304a1b.roa File: 8c8d948e-565b-33fd-90e4-46342b304a1b.roa (raw, json) Hash identifier: dWv+dA6s70eQVPQR4pH++TJr2sARuxv8b/Ezu70E7yE= Subject key identifier: C0:21:40:E4:AB:9D:5C:50:5A:E8:99:B9:F9:45:37:46:7A:7F:C2:C4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24E11D9E07B79B2A1CB309C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c8d948e-565b-33fd-90e4-46342b304a1b.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.31.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:1d:9e:07:b7:9b:2a:1c:b3:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=2feaae31-6290-4c68-bd21-5fcba5ea8fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b9:5a:cd:2f:af:53:fc:7c:f0:55:ec:cc:70: c4:50:ec:e7:41:8e:db:83:8e:41:32:04:43:f4:71: 8c:b0:66:89:58:48:13:ca:cf:cc:b1:58:38:f0:5d: 96:48:41:33:58:9e:1b:88:7f:f7:b0:0f:c0:82:dc: 8d:fe:7e:02:a8:f6:a3:0c:e6:5e:0d:a0:f1:09:e2: 2b:81:ec:3d:70:15:d0:45:5c:fc:6b:1c:ee:94:ef: a7:72:e8:d0:a6:db:43:35:2a:48:95:0b:d4:25:27: 95:b6:2f:eb:ed:7d:9c:b8:fe:3b:66:27:a9:21:06: 70:94:51:50:76:cb:30:89:66:d4:61:55:de:93:6d: dd:a6:6e:9a:ab:ff:02:6d:0c:0f:6f:04:bd:72:3c: c3:b7:23:b1:15:74:b5:32:16:22:3a:31:1d:00:26: 4d:d3:04:e3:45:74:b5:47:0d:1e:12:e2:9e:03:b8: 1c:dd:db:4e:fd:77:93:dd:f5:1a:72:f4:2d:54:ab: b4:ea:2b:b9:8c:1b:9b:17:75:d7:ec:77:58:05:79: 43:46:17:4e:22:5a:3a:38:74:d6:e4:d5:e1:e9:c6: 8b:aa:36:00:98:4f:00:ef:02:04:c6:32:b5:1b:a0: 4e:ac:20:52:20:ed:95:b2:97:4b:17:5c:3e:4b:30: 5f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:21:40:E4:AB:9D:5C:50:5A:E8:99:B9:F9:45:37:46:7A:7F:C2:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c8d948e-565b-33fd-90e4-46342b304a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ae:4a:d8:c8:5a:9d:3e:77:e2:35:a7:a6:b5:bf:2a:13:43: e2:e5:3f:e1:08:3a:9a:37:42:13:71:72:b7:5e:e1:cf:45:29: 36:2c:b7:07:a1:48:78:1f:05:4e:21:24:8b:25:a1:52:72:89: ad:11:63:7a:4a:cc:9e:8c:83:4a:e3:3e:47:f1:df:97:a3:49: 03:79:e9:a5:75:45:c1:c9:82:37:5d:cc:2c:eb:5a:59:6e:ec: 03:65:81:66:2c:21:b0:e2:02:fc:b9:4a:1d:12:53:6e:59:17: d5:e5:3d:d6:b1:eb:28:3f:1c:40:4a:e1:8a:a3:cb:76:42:be: f6:15:0c:e1:d2:25:fe:bf:19:21:7b:8d:73:a5:09:5f:cb:84: bb:f5:6c:2c:41:6e:85:fb:e8:f5:36:71:32:a5:29:9a:de:a3: e8:5f:dc:a7:06:76:f7:84:9d:8b:3d:4d:9a:a7:c9:1b:54:3c: 1b:4d:dc:6a:28:b4:9d:86:c3:af:69:9a:9f:f4:8c:d1:c4:1f: 68:97:db:61:db:9e:98:da:e4:82:4a:b5:3b:26:77:41:be:50: f8:63:dc:1b:25:39:a2:64:d3:29:a4:48:c7:10:0b:3e:86:8b: 52:ad:06:14:88:63:64:8e:da:2b:d8:ac:02:9c:67:e0:6e:74: 58:ab:a3:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4R2eB7ebKhyzCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MmZlYWFlMzEtNjI5MC00YzY4LWJkMjEtNWZjYmE1ZWE4ZmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhblazS+vU/x88FXszHDEUOznQY7bg45BMgRD 9HGMsGaJWEgTys/MsVg48F2WSEEzWJ4biH/3sA/AgtyN/n4CqPajDOZeDaDxCeIr gew9cBXQRVz8axzulO+ncujQpttDNSpIlQvUJSeVti/r7X2cuP47ZiepIQZwlFFQ dsswiWbUYVXek23dpm6aq/8CbQwPbwS9cjzDtyOxFXS1MhYiOjEdACZN0wTjRXS1 Rw0eEuKeA7gc3dtO/XeT3fUacvQtVKu06iu5jBubF3XX7HdYBXlDRhdOIlo6OHTW 5NXh6caLqjYAmE8A7wIExjK1G6BOrCBSIO2VspdLF1w+SzBf4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAhQOSrnVxQWuiZuflFN0Z6f8LEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGM4ZDk0OGUtNTY1Yi0z M2ZkLTkwZTQtNDYzNDJiMzA0YTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6uStjIWp0+d+I1p6a1vyoTQ+LlP+EIOpo3QhNxcrde4c9FKTYstweh SHgfBU4hJIsloVJyia0RY3pKzJ6Mg0rjPkfx35ejSQN56aV1RcHJgjddzCzrWllu 7ANlgWYsIbDiAvy5Sh0SU25ZF9XlPdax6yg/HEBK4Yqjy3ZCvvYVDOHSJf6/GSF7 jXOlCV/LhLv1bCxBboX76PU2cTKlKZreo+hf3KcGdveEnYs9TZqnyRtUPBtN3Goo tJ2Gw69pmp/0jNHEH2iX22Hbnpja5IJKtTsmd0G+UPhj3BslOaJk0ymkSMcQCz6G i1KtBhSIY2SO2ivYrAKcZ+BudFiro6A= -----END CERTIFICATE-----Generated at Thu Mar 26 12:20:23 2026 by rpki-client