$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1c2fb7d-f22a-3edb-878b-5a4c9c67b624.roa File: a1c2fb7d-f22a-3edb-878b-5a4c9c67b624.roa (raw, json) Hash identifier: 4r+prR0ThyJjlqIRh3EsSXh4cxyg64rLavmDnhQdQzg= Subject key identifier: 43:38:DD:10:E3:AD:60:C0:94:27:95:8C:DE:01:15:AE:A3:46:9F:ED Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF77717CE28662920EB4E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1c2fb7d-f22a-3edb-878b-5a4c9c67b624.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.31.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:77:71:7c:e2:86:62:92:0e:b4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=85d7859a-327e-4270-8125-dff12fd4a111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:7b:f3:aa:56:d3:8b:d2:3e:2a:61:22:a8: bf:93:19:4f:6d:25:ff:ac:6d:7d:5d:cd:ae:36:73: f6:54:85:ce:cd:dd:7d:ee:69:be:0f:f4:05:75:62: 31:f2:28:b7:42:bb:04:80:75:d8:ec:d9:dd:a6:49: f2:ac:06:97:bf:8c:df:81:c6:7b:85:c1:7d:f1:e3: 94:46:10:03:e9:2b:ab:72:6e:91:5a:3d:c6:b1:c8: 83:a8:09:a9:ea:31:fd:7a:a0:3f:d8:f2:28:94:83: f0:18:12:33:35:2e:d5:06:6b:89:10:fc:05:93:32: c0:1c:f6:f5:5d:be:a9:43:80:75:b4:4b:71:01:23: af:b0:e3:35:ba:73:1d:01:8d:8a:ea:4f:a0:a7:bb: b7:f2:45:80:6c:d7:43:da:88:34:6a:92:c6:45:90: 73:4a:36:24:40:2a:22:3b:1e:4d:f3:70:7c:5f:4f: ef:41:0b:95:6d:18:e3:ff:8e:04:c4:40:d0:ed:c7: bd:02:0f:69:6f:dd:02:5c:c1:2a:df:02:75:ad:88: c8:2f:9c:02:fb:62:4c:4c:f9:72:9c:d5:78:7c:ba: d9:b9:32:8d:ce:12:a5:e3:6b:39:0a:66:c4:bc:20: 72:39:e8:61:39:de:b4:bb:1c:e4:5b:a8:a5:eb:41: ea:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:38:DD:10:E3:AD:60:C0:94:27:95:8C:DE:01:15:AE:A3:46:9F:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a1c2fb7d-f22a-3edb-878b-5a4c9c67b624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:af:58:f2:42:34:ff:db:2c:fc:bb:00:fd:92:e9:7d:5c:73: 19:f7:18:9a:c0:e2:73:87:7c:3b:58:46:0b:1c:86:4a:31:d9: 15:7d:26:6f:04:b5:35:c1:6d:24:e0:17:27:44:be:8f:53:28: 05:fa:25:7e:bc:56:03:a5:ea:61:20:ca:a6:11:bc:61:ca:e7: d9:84:6e:c4:96:ed:1a:26:52:65:b7:77:d1:fe:52:16:44:15: fc:1b:11:77:d2:a5:d5:c4:c0:76:08:23:6f:20:63:05:23:ce: 6a:48:09:fc:4e:30:a0:e1:ee:59:76:75:22:4b:78:ee:6a:48: 64:7a:7a:0d:88:9c:1b:c6:39:56:8d:b3:b4:e3:12:24:64:18: 93:33:9a:86:99:b3:b3:24:c4:5f:3d:73:1c:c8:13:7b:ac:ca: 7f:ea:4a:65:1b:be:25:81:33:cb:dc:09:e2:6f:f3:59:23:80: 10:b0:c6:e2:3f:f4:f4:af:55:f5:97:e8:d5:4e:68:ce:1b:03: c2:fe:28:f4:77:fa:5f:27:4c:79:2f:56:b9:32:5f:2b:19:1b: 80:f3:ec:45:6f:5c:f3:a0:e4:fe:00:3d:c2:e9:af:98:8a:6b: e1:db:ec:15:bd:97:bc:f9:26:a4:f8:6d:0f:5d:64:c2:e7:ab: 5b:fc:66:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k33dxfOKGYpIOtOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ODVkNzg1OWEtMzI3ZS00MjcwLTgxMjUtZGZmMTJmZDRhMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRF786pW04vSPiphIqi/kxlPbSX/rG19Xc2u NnP2VIXOzd197mm+D/QFdWIx8ii3QrsEgHXY7NndpknyrAaXv4zfgcZ7hcF98eOU RhAD6Surcm6RWj3GsciDqAmp6jH9eqA/2PIolIPwGBIzNS7VBmuJEPwFkzLAHPb1 Xb6pQ4B1tEtxASOvsOM1unMdAY2K6k+gp7u38kWAbNdD2og0apLGRZBzSjYkQCoi Ox5N83B8X0/vQQuVbRjj/44ExEDQ7ce9Ag9pb90CXMEq3wJ1rYjIL5wC+2JMTPly nNV4fLrZuTKNzhKl42s5CmbEvCByOehhOd60uxzkW6il60HqiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEM43RDjrWDAlCeVjN4BFa6jRp/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTFjMmZiN2QtZjIyYS0z ZWRiLTg3OGItNWE0YzljNjdiNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKvWPJCNP/bLPy7AP2S6X1ccxn3GJrA4nOHfDtYRgschkox2RV9Jm8E tTXBbSTgFydEvo9TKAX6JX68VgOl6mEgyqYRvGHK59mEbsSW7RomUmW3d9H+UhZE FfwbEXfSpdXEwHYII28gYwUjzmpICfxOMKDh7ll2dSJLeO5qSGR6eg2InBvGOVaN s7TjEiRkGJMzmoaZs7MkxF89cxzIE3usyn/qSmUbviWBM8vcCeJv81kjgBCwxuI/ 9PSvVfWX6NVOaM4bA8L+KPR3+l8nTHkvVrkyXysZG4Dz7EVvXPOg5P4APcLpr5iK a+Hb7BW9l7z5JqT4bQ9dZMLnq1v8ZlM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:06:05 2026 by rpki-client