$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa File: bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa (raw, json) Hash identifier: CykiNKIECWGyAIJQxHxvG7wWH9bLPMrWW/trSVs8KXU= Subject key identifier: 8F:C8:8C:95:1D:41:9F:48:A1:6B:4A:2C:AB:46:88:B3:39:4C:4D:60 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498B9ACAA280D4D7E3D29C40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.31.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:9a:ca:a2:80:d4:d7:e3:d2:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c91664fe-9602-49de-8e1e-ede6c0a57292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:55:99:42:74:9f:10:58:29:21:16:54:cf: 89:98:e9:2d:d6:d8:f5:75:d2:47:18:88:c4:db:c2: e8:2a:af:a3:11:d5:a4:9e:57:52:0a:cd:e6:e5:da: af:87:6b:c7:b2:0d:db:b6:c9:61:f3:9e:48:89:39: fd:35:84:8d:57:13:6c:7d:ef:88:e7:d1:8f:13:b9: fd:75:b9:d8:66:77:69:0d:4f:0e:02:64:bf:1f:32: 80:ae:a0:31:c6:09:db:e7:d8:cc:33:ab:ed:f5:6e: 2c:5d:f6:79:b2:4a:2d:d5:7b:d4:11:69:02:60:41: a2:ab:94:08:1f:f2:e9:f5:13:65:76:61:9d:2e:e7: d5:35:4a:6f:c0:b1:43:d5:8e:50:61:5b:bb:4b:d9: 23:06:33:76:0b:95:d6:4e:8d:d5:77:0a:58:e7:92: 90:ec:26:14:5f:64:c0:f5:76:e9:32:95:ce:68:ab: 3c:c0:39:86:68:90:67:97:d8:f9:b5:77:4b:f4:ad: 9b:d7:53:79:68:e5:8e:0c:e8:6f:68:bc:cc:97:8b: 15:dc:d4:4c:28:12:be:6a:9b:11:20:02:24:56:ea: a2:db:80:d9:09:68:f9:14:4f:9d:b5:7b:c0:3a:f8: 72:db:94:89:2e:85:fd:d4:00:91:58:1e:1d:0a:0a: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C8:8C:95:1D:41:9F:48:A1:6B:4A:2C:AB:46:88:B3:39:4C:4D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:26:22:a3:33:43:13:5a:9a:08:25:c8:5b:a4:42:88:18:47: 0b:77:3b:e4:f8:34:d0:94:c9:1c:d6:03:22:2b:86:c5:22:a4: 7b:c9:ba:05:00:b9:ca:72:b8:74:5e:5e:9e:44:7a:c3:6b:7b: d2:18:1f:f4:ee:3b:66:28:24:b6:5b:53:ee:ea:6a:b7:98:97: 14:23:4a:59:0d:81:4e:5d:95:5c:1f:d5:8e:1d:b8:c7:4f:fe: c0:bd:b0:af:31:d6:5d:04:ab:41:1e:d0:a5:9d:a9:17:70:89: f6:80:17:c5:8e:82:3b:84:08:17:ed:f1:c5:de:3e:a0:f8:38: 8c:b8:ad:03:03:c3:38:e9:6a:53:3f:10:cb:a6:de:fc:64:78: f2:2e:26:9a:6e:e8:97:c7:11:54:04:7c:48:7c:04:83:32:36: a4:35:09:36:d7:de:f1:40:fd:ea:04:52:96:8d:a0:8c:c9:23: 38:8f:83:64:48:32:e0:6d:33:e9:96:d4:8e:1e:cc:b4:75:a8: 95:90:83:9b:13:36:55:9c:a4:63:8f:e1:04:a3:c6:23:2f:67: 3c:fd:8a:02:0a:ed:2a:5b:f1:07:b4:01:d4:65:06:58:dc:a2: 70:7a:da:58:34:57:97:3b:1f:99:0c:aa:5c:7f:d0:03:8e:8f: 17:89:4d:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji5rKooDU1+PSnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzkxNjY0ZmUtOTYwMi00OWRlLThlMWUtZWRlNmMwYTU3MjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnFVmUJ0nxBYKSEWVM+JmOkt1tj1ddJHGIjE 28LoKq+jEdWknldSCs3m5dqvh2vHsg3btslh855IiTn9NYSNVxNsfe+I59GPE7n9 dbnYZndpDU8OAmS/HzKArqAxxgnb59jMM6vt9W4sXfZ5skot1XvUEWkCYEGiq5QI H/Lp9RNldmGdLufVNUpvwLFD1Y5QYVu7S9kjBjN2C5XWTo3VdwpY55KQ7CYUX2TA 9XbpMpXOaKs8wDmGaJBnl9j5tXdL9K2b11N5aOWODOhvaLzMl4sV3NRMKBK+apsR IAIkVuqi24DZCWj5FE+dtXvAOvhy25SJLoX91ACRWB4dCgrntwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/IjJUdQZ9IoWtKLKtGiLM5TE1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZmN2MyNWQtMGUzOC0z OWRiLWFiZjYtZDBmNGM2YWVlYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR86MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEomIqMzQxNamgglyFukQogYRwt3O+T4NNCUyRzWAyIrhsUipHvJugUA ucpyuHReXp5EesNre9IYH/TuO2YoJLZbU+7qareYlxQjSlkNgU5dlVwf1Y4duMdP /sC9sK8x1l0Eq0Ee0KWdqRdwifaAF8WOgjuECBft8cXePqD4OIy4rQMDwzjpalM/ EMum3vxkePIuJppu6JfHEVQEfEh8BIMyNqQ1CTbX3vFA/eoEUpaNoIzJIziPg2RI MuBtM+mW1I4ezLR1qJWQg5sTNlWcpGOP4QSjxiMvZzz9igIK7Spb8Qe0AdRlBljc onB62lg0V5c7H5kMqlx/0AOOjxeJTeQ= -----END CERTIFICATE-----Generated at Fri Sep 25 09:52:48 2026 by rpki-client