$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1954fa4-3a55-38fb-8f20-034f813e98cf.roa File: a1954fa4-3a55-38fb-8f20-034f813e98cf.roa (raw, json) Hash identifier: SwGPrtrw2HWy7x0O3acVYegb4ouZZvGrkFgW3idsIC0= Subject key identifier: 8D:02:6D:F5:A1:B6:19:3A:B4:21:A0:32:4B:35:13:4A:C3:F9:4F:3A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D6DCE7E7DAF0EC225A480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1954fa4-3a55-38fb-8f20-034f813e98cf.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.31.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:6d:ce:7e:7d:af:0e:c2:25:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=38f46306-de15-421b-be86-feb14dcfd564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:83:b3:0e:53:73:3c:d4:13:41:81:07:8f:37: 86:37:86:2b:4a:98:36:c4:e7:fd:45:b2:9e:c7:6d: 73:96:6d:6e:e2:b2:f6:75:0d:7b:38:28:d0:de:72: 92:d3:d1:d3:3b:8f:5d:42:ec:e9:22:2e:66:04:fb: 3a:c5:7f:28:68:5c:55:7f:da:2c:ee:fd:20:6c:a8: 07:55:14:35:44:92:2c:91:06:5f:0e:95:5b:99:a2: f4:10:80:d2:99:60:1d:2a:ae:c6:f9:32:b7:46:50: 57:a7:6e:12:03:a1:84:7b:bd:42:b5:79:95:76:5d: 7e:a5:db:1c:50:65:04:a1:a3:2f:b6:6f:d0:54:19: 1e:83:a5:32:26:7c:ab:52:39:9a:4e:1e:38:48:07: 9a:b7:4c:da:da:fa:03:16:22:b4:2a:72:10:63:61: 78:f7:31:77:70:99:7d:c6:a3:aa:29:0e:a9:41:97: d6:6d:36:c6:02:8f:9d:34:64:08:1f:37:52:fd:aa: ab:1f:30:ab:b7:37:ba:08:70:45:64:84:84:ed:ee: 0c:62:0b:c1:74:a4:f2:8b:f2:ff:1e:8c:59:85:b4: 3b:ba:6e:82:8d:3f:7f:cb:d0:dd:3d:eb:5a:67:31: a4:da:db:19:0c:26:a7:53:0a:80:1e:f9:66:7a:fb: 96:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:02:6D:F5:A1:B6:19:3A:B4:21:A0:32:4B:35:13:4A:C3:F9:4F:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1954fa4-3a55-38fb-8f20-034f813e98cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:dc:df:48:91:12:33:82:ea:ad:72:87:7c:6b:90:1a:b4:35: fc:fe:7d:c9:a9:8e:8a:9d:d0:2c:a3:f8:65:1b:8f:87:1a:16: ce:d4:58:11:7e:1a:94:ce:68:08:15:58:d6:cc:9f:06:54:6e: b4:15:e9:ec:79:b5:64:1a:c3:29:be:9d:be:e1:65:b6:5a:7c: 8f:32:dd:e9:cd:16:75:41:ca:be:36:cf:6e:5f:55:18:a8:91: 60:7d:cd:48:a3:2b:7a:4d:2b:02:8b:91:a6:08:df:eb:3c:02: 1c:85:e3:24:1e:63:93:d7:b1:81:c1:27:94:99:1a:05:3b:32: 70:10:9c:ff:e0:32:82:b0:3c:85:13:e7:c3:61:1b:58:ed:24: ef:eb:10:d6:c2:2a:01:2b:4c:48:fb:77:c0:3f:88:5c:f5:40: 7e:9b:f5:31:7e:b8:4a:23:5c:b8:8e:0a:e0:6c:bf:c5:16:bd: 82:f0:ad:d7:1d:06:55:7c:fc:b2:64:2b:db:b1:94:d7:31:2d: 77:5c:58:b4:53:90:ef:00:4b:26:94:92:8b:a4:fb:f5:95:5d: a3:be:bd:7d:aa:76:10:16:17:25:aa:d3:77:6a:49:7b:53:95: 0b:88:34:5c:8e:14:77:88:a3:6f:06:25:30:be:12:8d:ed:09: 1c:78:81:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPW3Ofn2vDsIlpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MzhmNDYzMDYtZGUxNS00MjFiLWJlODYtZmViMTRkY2ZkNTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIOzDlNzPNQTQYEHjzeGN4YrSpg2xOf9RbKe x21zlm1u4rL2dQ17OCjQ3nKS09HTO49dQuzpIi5mBPs6xX8oaFxVf9os7v0gbKgH VRQ1RJIskQZfDpVbmaL0EIDSmWAdKq7G+TK3RlBXp24SA6GEe71CtXmVdl1+pdsc UGUEoaMvtm/QVBkeg6UyJnyrUjmaTh44SAeat0za2voDFiK0KnIQY2F49zF3cJl9 xqOqKQ6pQZfWbTbGAo+dNGQIHzdS/aqrHzCrtze6CHBFZISE7e4MYgvBdKTyi/L/ HoxZhbQ7um6CjT9/y9DdPetaZzGk2tsZDCanUwqAHvlmevuWwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0CbfWhthk6tCGgMks1E0rD+U86MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTE5NTRmYTQtM2E1NS0z OGZiLThmMjAtMDM0ZjgxM2U5OGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfc30iREjOC6q1yh3xrkBq0Nfz+fcmpjoqd0Cyj+GUbj4caFs7UWBF+ GpTOaAgVWNbMnwZUbrQV6ex5tWQawym+nb7hZbZafI8y3enNFnVByr42z25fVRio kWB9zUijK3pNKwKLkaYI3+s8AhyF4yQeY5PXsYHBJ5SZGgU7MnAQnP/gMoKwPIUT 58NhG1jtJO/rENbCKgErTEj7d8A/iFz1QH6b9TF+uEojXLiOCuBsv8UWvYLwrdcd BlV8/LJkK9uxlNcxLXdcWLRTkO8ASyaUkouk+/WVXaO+vX2qdhAWFyWq03dqSXtT lQuINFyOFHeIo28GJTC+Eo3tCRx4gaQ= -----END CERTIFICATE-----Generated at Sat Sep 26 18:45:53 2026 by rpki-client