$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc81bafd-ede1-356e-9aaf-2401dcd886b7.roa File: fc81bafd-ede1-356e-9aaf-2401dcd886b7.roa (raw, json) Hash identifier: gkPEY9SSJtrizkNaBq9pk/6xaY8OOa8VTvknZmkHQR0= Subject key identifier: 29:CB:94:87:7D:49:8B:9A:4A:6B:9D:86:E3:F9:AC:F4:41:5D:7F:68 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49737138146EF96BEF2387C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc81bafd-ede1-356e-9aaf-2401dcd886b7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.31.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:71:38:14:6e:f9:6b:ef:23:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c45bfbc0-4b27-4993-9752-19dd20a8afc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:07:15:a6:f8:6e:75:cb:4b:7f:f4:77:3e:39: 0f:75:86:0f:23:07:37:35:51:57:7b:9a:21:c3:8c: 4c:af:0d:a6:fd:b1:09:5d:f8:44:f4:82:59:2d:2e: 11:6f:71:66:b7:8f:05:bd:e1:8f:33:42:b6:94:08: bf:17:4e:17:80:27:a3:0f:ed:b6:13:13:9e:78:f6: cf:cd:c0:79:b7:86:ea:cf:40:81:3e:81:0d:13:31: 90:ae:e9:d0:a0:fc:ff:48:52:f7:0d:f9:a9:44:eb: 08:0e:5e:08:6d:71:ad:80:11:bb:4a:30:e4:06:72: c9:4f:e5:ef:91:ab:9e:d2:0e:45:db:5f:2f:ec:cf: 86:78:51:dc:9e:2e:6d:4a:2c:55:ef:1f:af:ac:17: c1:19:89:a4:90:21:98:f0:28:cf:b3:57:b8:55:66: d3:59:32:8b:8c:f2:f4:8f:46:12:fd:d2:6e:15:19: 76:f3:74:01:d9:eb:c0:f5:6e:5c:10:c2:e2:a4:5a: 7e:75:a2:b2:e2:41:fd:10:9d:3c:18:a8:b9:e4:12: 59:3a:8f:8e:14:f3:10:2b:24:26:27:c2:0e:b1:45: 66:7b:3a:a5:ed:66:25:55:86:81:c2:2d:0d:55:d7: 4e:1d:4f:30:df:ea:a6:44:ed:89:2c:6a:9e:5b:26: be:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CB:94:87:7D:49:8B:9A:4A:6B:9D:86:E3:F9:AC:F4:41:5D:7F:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fc81bafd-ede1-356e-9aaf-2401dcd886b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1a:e4:e7:5b:b4:7e:5d:db:bf:04:d7:8c:fa:24:43:ad:9b: be:1c:cb:c3:13:c7:33:6e:de:9a:1f:f9:34:7d:a2:00:cd:2e: 18:e8:35:8c:72:4b:b7:39:03:44:1f:15:81:b1:2c:b1:db:dc: c0:a7:65:8a:b4:9e:65:a3:6a:d6:85:91:52:f4:45:c7:ec:bd: d8:8e:c4:09:af:2a:fb:3c:b8:42:66:7e:24:44:61:62:c7:0d: 37:6f:c3:26:a0:bf:76:54:46:a7:57:81:eb:df:cf:c7:59:67: 05:96:be:f6:37:42:6e:5b:1c:40:a7:bd:f8:72:1a:39:e6:57: be:66:1b:ef:47:9a:7e:46:a3:40:54:65:eb:e6:fb:e2:34:00: 74:b0:ec:2d:fa:7b:12:ad:95:91:0e:8f:37:7d:0f:e8:ab:70: 91:84:19:58:f0:9d:cd:f4:4a:ea:cd:e8:32:ce:33:ed:ec:4f: 3e:62:89:37:5c:72:4e:f6:5e:20:e8:7f:21:ee:21:da:99:b3: 21:cf:22:55:82:c8:09:b7:8e:ff:8c:71:31:2f:3f:74:94:6a: ca:7e:9c:bc:14:c8:92:0a:21:7d:d6:fc:72:51:4f:ad:53:d3: 40:53:1a:3e:db:12:f5:1d:f5:5b:be:03:9c:f7:da:93:82:94: 66:fc:f2:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc3E4FG75a+8jh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzQ1YmZiYzAtNGIyNy00OTkzLTk3NTItMTlkZDIwYThhZmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigcVpvhudctLf/R3PjkPdYYPIwc3NVFXe5oh w4xMrw2m/bEJXfhE9IJZLS4Rb3Fmt48FveGPM0K2lAi/F04XgCejD+22ExOeePbP zcB5t4bqz0CBPoENEzGQrunQoPz/SFL3DfmpROsIDl4IbXGtgBG7SjDkBnLJT+Xv kaue0g5F218v7M+GeFHcni5tSixV7x+vrBfBGYmkkCGY8CjPs1e4VWbTWTKLjPL0 j0YS/dJuFRl283QB2evA9W5cEMLipFp+daKy4kH9EJ08GKi55BJZOo+OFPMQKyQm J8IOsUVmezql7WYlVYaBwi0NVddOHU8w3+qmRO2JLGqeWya+MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnLlId9SYuaSmudhuP5rPRBXX9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmM4MWJhZmQtZWRlMS0z NTZlLTlhYWYtMjQwMWRjZDg4NmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR84MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsa5OdbtH5d278E14z6JEOtm74cy8MTxzNu3pof+TR9ogDNLhjoNYxy S7c5A0QfFYGxLLHb3MCnZYq0nmWjataFkVL0RcfsvdiOxAmvKvs8uEJmfiREYWLH DTdvwyagv3ZURqdXgevfz8dZZwWWvvY3Qm5bHECnvfhyGjnmV75mG+9Hmn5Go0BU Zevm++I0AHSw7C36exKtlZEOjzd9D+ircJGEGVjwnc30SurN6DLOM+3sTz5iiTdc ck72XiDofyHuIdqZsyHPIlWCyAm3jv+McTEvP3SUasp+nLwUyJIKIX3W/HJRT61T 00BTGj7bEvUd9Vu+A5z32pOClGb88tU= -----END CERTIFICATE-----Generated at Sat Sep 26 07:59:47 2026 by rpki-client