$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f35ce1d9-4792-36cc-964a-028ad14820ea.roa File: f35ce1d9-4792-36cc-964a-028ad14820ea.roa (raw, json) Hash identifier: Qkv0f6RQHdqVUq15zFnh2Idy36a8FgiHajMy50a5EXc= Subject key identifier: DC:CE:72:BC:AF:D5:A0:90:84:7C:FE:5F:74:8A:68:7F:62:12:20:D1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D27AAC62E5ECB4D7859616580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f35ce1d9-4792-36cc-964a-028ad14820ea.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.31.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:c6:2e:5e:cb:4d:78:59:61:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=c547ee64-998a-4b1b-970b-6a4d50f8b171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:05:4a:00:df:32:4b:63:32:70:be:2d:13:30: ae:01:fb:23:2a:69:80:ce:54:83:3b:b4:ae:0f:02: 3e:8a:8b:93:f8:de:c4:b7:f6:e9:e4:9a:5c:ca:05: b5:86:1a:8f:a0:8c:84:37:cd:12:f6:27:d1:1a:54: 3a:52:4b:6b:d8:5d:7b:b0:7a:3d:06:51:eb:1e:3b: bd:0c:13:04:ab:c7:69:02:5c:2d:de:19:8a:56:ce: 8a:a3:9f:5a:20:1b:b8:9f:d4:9b:48:b7:f6:fd:31: f5:54:35:5d:20:26:f2:44:60:6f:f9:3b:ad:ea:1e: d6:81:0d:d1:79:2a:21:05:c4:7f:7f:a4:1c:cf:d0: 9d:15:b0:6f:72:42:48:9f:83:31:5b:92:8d:25:ce: 12:c0:08:40:19:9c:b5:66:11:f4:53:e9:f0:54:c0: 79:9a:67:46:91:6f:1b:c3:d5:7c:b4:1f:b0:8a:0e: 0a:63:01:af:bd:ca:51:69:1d:0c:23:8d:24:3d:97: 80:d9:31:3d:6d:98:91:d9:45:6a:a6:cb:d6:98:f0: 47:36:b0:34:5d:6c:49:79:11:3c:d3:71:fd:51:d5: 57:b5:7f:95:36:5d:e2:b7:17:e9:6c:be:7a:5a:f0: a8:78:90:4a:b4:d6:43:c6:ee:95:f3:2a:51:54:c3: 28:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CE:72:BC:AF:D5:A0:90:84:7C:FE:5F:74:8A:68:7F:62:12:20:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f35ce1d9-4792-36cc-964a-028ad14820ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c3:66:54:e7:6c:22:45:c4:86:72:b1:0e:af:28:ad:5d:72: 6f:11:2f:e2:0c:8f:71:1b:a7:34:1f:ab:17:7d:83:98:9b:41: f1:43:ce:fb:67:f7:d8:d7:9d:2b:6d:6f:7d:82:eb:54:f9:06: d8:a7:4e:ac:3e:7e:99:94:13:b8:e7:8e:cb:29:65:c7:47:88: 8b:fc:f4:6e:9a:88:59:d5:14:12:06:f3:b3:14:23:4e:53:5d: 91:07:09:0c:8e:9a:2f:ab:53:00:ee:7a:86:73:97:0d:81:0b: 57:eb:ab:52:9b:4e:47:c8:ee:46:d5:84:88:40:3b:91:71:cc: 0d:29:e5:ca:71:5b:87:c2:c9:b2:ca:74:7e:4f:fb:cb:99:7c: 0c:b4:9b:eb:31:c1:29:d8:82:4d:f1:c7:c4:db:a2:64:6f:fd: c9:58:26:80:a7:b3:1c:70:21:cc:27:81:58:5c:33:3b:98:29: 9c:af:ea:7f:3a:b4:ae:fd:a1:d0:6f:ae:97:d6:1a:9d:06:e5: 67:98:4d:0f:f8:4d:05:08:74:66:08:27:b3:aa:74:13:8f:04: b9:06:d7:cd:21:14:b9:f5:43:bf:4b:d1:21:26:ec:b9:01:9f: 20:23:95:98:1c:2f:a5:e2:34:db:51:24:b7:ec:b1:d9:c0:0c: a7:49:29:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqsYuXstNeFlhZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk YzU0N2VlNjQtOTk4YS00YjFiLTk3MGItNmE0ZDUwZjhiMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAVKAN8yS2MycL4tEzCuAfsjKmmAzlSDO7Su DwI+iouT+N7Et/bp5JpcygW1hhqPoIyEN80S9ifRGlQ6Uktr2F17sHo9BlHrHju9 DBMEq8dpAlwt3hmKVs6Ko59aIBu4n9SbSLf2/TH1VDVdICbyRGBv+Tut6h7WgQ3R eSohBcR/f6Qcz9CdFbBvckJIn4MxW5KNJc4SwAhAGZy1ZhH0U+nwVMB5mmdGkW8b w9V8tB+wig4KYwGvvcpRaR0MI40kPZeA2TE9bZiR2UVqpsvWmPBHNrA0XWxJeRE8 03H9UdVXtX+VNl3itxfpbL56WvCoeJBKtNZDxu6V8ypRVMMoSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzOcryv1aCQhHz+X3SKaH9iEiDRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjM1Y2UxZDktNDc5Mi0z NmNjLTk2NGEtMDI4YWQxNDgyMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzDZlTnbCJFxIZysQ6vKK1dcm8RL+IMj3EbpzQfqxd9g5ibQfFDzvtn 99jXnSttb32C61T5BtinTqw+fpmUE7jnjsspZcdHiIv89G6aiFnVFBIG87MUI05T XZEHCQyOmi+rUwDueoZzlw2BC1frq1KbTkfI7kbVhIhAO5FxzA0p5cpxW4fCybLK dH5P+8uZfAy0m+sxwSnYgk3xx8TbomRv/clYJoCnsxxwIcwngVhcMzuYKZyv6n86 tK79odBvrpfWGp0G5WeYTQ/4TQUIdGYIJ7OqdBOPBLkG180hFLn1Q79L0SEm7LkB nyAjlZgcL6XiNNtRJLfssdnADKdJKcE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:00:40 2026 by rpki-client