$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f85c0a7f-c5b9-3787-8857-f631c0f43879.roa File: f85c0a7f-c5b9-3787-8857-f631c0f43879.roa (raw, json) Hash identifier: Ka4mJ+O1A8I9IjAX3Wv+6LnPDnlTFyQ2Ws21HefVjv4= Subject key identifier: 0F:1F:EF:6E:3F:40:EC:57:B2:5F:71:81:C6:9F:62:40:2A:C0:64:A9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D24DF979EBC9EE473E0819580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f85c0a7f-c5b9-3787-8857-f631c0f43879.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.31.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:97:9e:bc:9e:e4:73:e0:81:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=9c6c0bc1-110c-4583-8ab2-bc6e187bde93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:66:20:ec:2d:3d:93:f1:c4:d5:e3:c7:2b: 69:76:18:aa:f9:7c:79:7e:9f:43:c4:04:87:59:b0: b1:d9:dd:d7:2e:55:84:01:27:2d:be:81:db:58:3c: e7:ad:d6:f1:5d:d1:f0:e9:b9:2a:50:42:13:ed:40: cf:77:dc:4f:d9:da:0b:df:7a:52:2d:7f:59:6c:62: 0b:37:8b:63:7d:23:c1:e4:36:d1:9b:66:53:5e:f5: fb:a8:f3:85:77:24:34:07:29:43:06:53:fd:c1:24: 1f:cf:3c:90:7a:52:8d:8e:1f:44:29:1f:02:3e:ad: 33:0b:9d:e9:6f:52:44:b4:fa:34:5c:90:54:84:46: 7b:0e:08:c6:4f:8d:93:64:4e:ab:37:31:ec:17:e1: 82:be:59:07:1d:3b:fd:2e:99:0a:75:17:ef:54:2d: 96:72:62:5d:c5:d2:46:b0:38:9c:78:45:68:ba:71: c2:da:48:93:9b:fc:e0:dc:bc:c1:6e:67:9c:94:7e: 89:ce:60:7f:6f:67:8e:63:cc:1a:20:a0:3c:91:e6: b2:a4:f5:7f:7b:e4:48:da:0c:1d:14:b1:f8:91:7d: 20:7d:1e:a1:92:e3:fa:d9:ae:e4:6e:45:c0:5e:b4: 3e:3e:08:c9:95:a2:54:90:f7:07:c8:b1:6d:c8:b7: 89:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1F:EF:6E:3F:40:EC:57:B2:5F:71:81:C6:9F:62:40:2A:C0:64:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f85c0a7f-c5b9-3787-8857-f631c0f43879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:ad:9a:79:17:3f:79:cf:ed:53:22:f5:a3:80:5c:09:d8:c8: 69:60:8d:f9:c4:03:d2:25:74:5b:67:6e:24:69:6d:d1:83:ba: 6b:58:3d:88:92:f5:4b:08:85:22:0d:31:04:99:e1:c5:92:e8: 25:15:e7:15:11:1c:60:b8:28:01:4c:b9:12:4c:28:dc:4d:5d: ae:f3:0f:37:c8:b8:d0:e9:ee:b3:91:b9:06:a8:04:b3:c5:9f: cf:05:17:bd:e1:5c:1b:21:b1:26:29:47:42:f9:a6:a8:24:6a: 01:34:ae:dc:d0:40:b9:d2:5d:6a:ee:77:60:7b:3d:ee:14:ad: 54:df:0a:a8:51:8c:2c:e7:95:ca:37:0e:92:b8:af:ad:a5:39: 47:2e:1c:6b:0a:e9:28:26:d6:fe:bd:b1:1c:45:7c:67:1c:6b: a5:94:75:6f:9b:80:bf:01:88:fc:07:31:e5:77:6e:d8:13:2b: 1b:48:cf:45:44:65:14:8a:36:21:f5:06:fa:1e:58:d6:63:a1: 6a:6a:3b:07:90:f5:25:a8:7a:c9:b0:f9:06:1d:9f:38:18:29: 76:46:c0:ec:24:73:75:7d:32:2d:35:be:d2:00:4c:ab:ab:c8: b8:1c:85:49:79:ba:19:50:f5:f9:73:36:cb:70:1f:2f:5e:68: f8:df:e2:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k35eevJ7kc+CBlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OWM2YzBiYzEtMTEwYy00NTgzLThhYjItYmM2ZTE4N2JkZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7hmIOwtPZPxxNXjxytpdhiq+Xx5fp9DxASH WbCx2d3XLlWEASctvoHbWDznrdbxXdHw6bkqUEIT7UDPd9xP2doL33pSLX9ZbGIL N4tjfSPB5DbRm2ZTXvX7qPOFdyQ0BylDBlP9wSQfzzyQelKNjh9EKR8CPq0zC53p b1JEtPo0XJBUhEZ7DgjGT42TZE6rNzHsF+GCvlkHHTv9LpkKdRfvVC2WcmJdxdJG sDiceEVounHC2kiTm/zg3LzBbmeclH6JzmB/b2eOY8waIKA8keaypPV/e+RI2gwd FLH4kX0gfR6hkuP62a7kbkXAXrQ+PgjJlaJUkPcHyLFtyLeJSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8f724/QOxXsl9xgcafYkAqwGSpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjg1YzBhN2YtYzViOS0z Nzg3LTg4NTctZjYzMWMwZjQzODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2tmnkXP3nP7VMi9aOAXAnYyGlgjfnEA9IldFtnbiRpbdGDumtYPYiS 9UsIhSINMQSZ4cWS6CUV5xURHGC4KAFMuRJMKNxNXa7zDzfIuNDp7rORuQaoBLPF n88FF73hXBshsSYpR0L5pqgkagE0rtzQQLnSXWrud2B7Pe4UrVTfCqhRjCznlco3 DpK4r62lOUcuHGsK6Sgm1v69sRxFfGcca6WUdW+bgL8BiPwHMeV3btgTKxtIz0VE ZRSKNiH1BvoeWNZjoWpqOweQ9SWoesmw+QYdnzgYKXZGwOwkc3V9Mi01vtIATKur yLgchUl5uhlQ9flzNstwHy9eaPjf4qA= -----END CERTIFICATE-----Generated at Thu Mar 26 20:43:21 2026 by rpki-client