$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dab50542-2835-3a6a-9072-fac087ccebce.roa File: dab50542-2835-3a6a-9072-fac087ccebce.roa (raw, json) Hash identifier: Izt6Pr1HuMS2gVV2Y/GrT412RgC6iyHu/aCnWU2NW2Q= Subject key identifier: 29:5B:DD:DD:17:25:1A:DA:10:32:DE:5B:B6:C5:39:E4:1D:E0:98:25 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E4C548C7BEF2B8F9CE5334200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dab50542-2835-3a6a-9072-fac087ccebce.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 19905 IP address blocks: 173.31.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:8c:7b:ef:2b:8f:9c:e5:33:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=15d5ad5e-3b9a-47ad-a890-c0db006ef1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:00:ab:74:90:ba:11:cd:5e:ce:e4:97:f0:03: 1e:32:df:57:ca:28:01:9a:3f:ea:34:d2:cd:1d:19: d6:c3:d4:91:7f:25:ae:f8:e9:08:fa:c1:be:e0:bf: 06:98:89:d9:5f:23:5b:8d:75:c9:9a:86:02:08:be: 2b:34:62:59:4f:ec:35:60:5a:f6:d9:19:3b:ce:5e: 86:5a:37:4e:8c:f6:e6:ec:00:f1:93:57:e7:3a:b8: 52:a3:6c:d5:be:6b:c9:9e:7c:78:73:0f:aa:50:0d: 22:6f:40:32:57:e1:30:c5:e9:4e:f5:12:82:9e:6f: 78:2c:28:16:cd:d4:22:a6:29:63:0e:ae:0b:c8:5a: ec:5a:12:20:d5:b1:e0:5a:18:c7:3c:74:cb:eb:ce: e5:ff:d1:c7:e7:2d:0c:09:04:78:6d:4e:d9:17:1c: dd:62:67:f9:ab:b7:89:9b:25:9b:e5:71:c6:cc:56: 53:cd:84:e9:ee:99:06:31:cc:d1:24:61:7d:52:47: bc:58:8c:d2:40:25:16:10:f5:06:23:61:65:98:bc: 20:e8:c0:c8:d4:7b:0e:df:98:f6:d2:2a:72:4e:2a: c3:9b:9b:5c:27:19:65:77:ea:f3:ef:5f:fc:0d:4b: c2:71:a0:98:da:f0:98:bd:c5:0d:6d:85:1c:ef:73: 25:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5B:DD:DD:17:25:1A:DA:10:32:DE:5B:B6:C5:39:E4:1D:E0:98:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dab50542-2835-3a6a-9072-fac087ccebce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:93:5a:12:3e:3b:53:ee:3f:8a:da:9f:78:2b:8e:2b:c2:9e: 30:ee:a1:70:eb:64:f0:50:40:d1:41:04:a8:06:f5:0f:44:d0: f4:70:ed:92:02:37:d8:ef:3a:cf:18:a7:78:35:1b:6f:dc:4f: 6f:94:75:bc:be:d7:49:3f:0f:a8:29:8e:c1:af:e8:30:23:45: 9d:da:b0:40:74:76:73:57:57:16:71:92:58:aa:a3:26:25:78: 7e:1e:64:3e:f5:c0:e7:e5:a4:c4:eb:6d:2a:cd:ce:a8:cf:38: fd:dd:73:e7:19:3d:aa:74:da:d4:f7:d4:ff:2e:4c:a2:77:39: 81:e3:4a:44:90:44:4e:f4:5d:28:d0:60:46:d6:ec:06:03:ca: a1:e2:9d:72:92:85:61:46:41:72:40:86:7b:b5:c4:10:bd:4f: 09:ea:46:22:27:df:67:46:c8:00:87:93:66:76:5c:37:fe:5b: e1:1e:3a:2b:14:89:3a:af:32:d9:29:2e:1f:1d:42:bb:54:c7: cf:9d:80:7e:bf:8b:6d:ac:a4:b5:f1:85:58:9f:c9:78:ba:98: de:44:94:c2:7d:fb:cd:04:f2:a4:34:4c:51:ab:b1:35:e0:33: 42:07:53:76:71:e0:db:92:2d:cd:6c:50:04:4a:c6:fe:cc:d8: 55:53:f4:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVIx77yuPnOUzQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk MTVkNWFkNWUtM2I5YS00N2FkLWE4OTAtYzBkYjAwNmVmMWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQCrdJC6Ec1ezuSX8AMeMt9XyigBmj/qNNLN HRnWw9SRfyWu+OkI+sG+4L8GmInZXyNbjXXJmoYCCL4rNGJZT+w1YFr22Rk7zl6G WjdOjPbm7ADxk1fnOrhSo2zVvmvJnnx4cw+qUA0ib0AyV+EwxelO9RKCnm94LCgW zdQipiljDq4LyFrsWhIg1bHgWhjHPHTL687l/9HH5y0MCQR4bU7ZFxzdYmf5q7eJ myWb5XHGzFZTzYTp7pkGMczRJGF9Uke8WIzSQCUWEPUGI2FlmLwg6MDI1HsO35j2 0ipyTirDm5tcJxlld+rz71/8DUvCcaCY2vCYvcUNbYUc73MlHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClb3d0XJRraEDLeW7bFOeQd4JglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGFiNTA1NDItMjgzNS0z YTZhLTkwNzItZmFjMDg3Y2NlYmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeTWhI+O1PuP4ran3grjivCnjDuoXDrZPBQQNFBBKgG9Q9E0PRw7ZIC N9jvOs8Yp3g1G2/cT2+Udby+10k/D6gpjsGv6DAjRZ3asEB0dnNXVxZxkliqoyYl eH4eZD71wOflpMTrbSrNzqjPOP3dc+cZPap02tT31P8uTKJ3OYHjSkSQRE70XSjQ YEbW7AYDyqHinXKShWFGQXJAhnu1xBC9TwnqRiIn32dGyACHk2Z2XDf+W+EeOisU iTqvMtkpLh8dQrtUx8+dgH6/i22spLXxhVifyXi6mN5ElMJ9+80E8qQ0TFGrsTXg M0IHU3Zx4NuSLc1sUARKxv7M2FVT9HQ= -----END CERTIFICATE-----Generated at Fri Jul 24 05:22:56 2026 by rpki-client