$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0882f959-9d32-324c-a10c-015dd9f9f77d.roa File: 0882f959-9d32-324c-a10c-015dd9f9f77d.roa (raw, json) Hash identifier: 5y9ClHJ3IC//QAXdboecjjhg66s4l/ChyCtWog2duR4= Subject key identifier: AE:7B:EA:3A:D0:0A:EC:C5:BA:73:6D:33:F4:38:82:29:D3:EF:5F:BE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA79882CD71518F833219F220 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0882f959-9d32-324c-a10c-015dd9f9f77d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 173.31.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:82:cd:71:51:8f:83:32:19:f2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=9cd6bd17-42f3-4a7c-b074-5df1c7d1c882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ef:d4:21:fb:fd:db:27:f3:97:93:73:c3:24: 13:26:d6:ab:a3:ac:58:d1:71:5a:bb:c5:b8:27:e9: 21:73:33:38:b6:ee:fc:c3:80:1b:96:e5:70:f7:b4: c0:b6:13:6f:91:10:de:19:c8:bc:91:47:ad:a7:1c: ae:35:ea:76:90:2b:fc:bd:bb:93:8a:52:81:c7:f3: a1:4c:3f:a8:c4:71:c2:27:a8:98:3d:24:aa:27:a4: bf:0a:e6:25:71:72:8d:e2:b7:0e:a0:1e:64:02:cf: 6e:44:92:72:0c:9b:6b:50:4d:92:1b:82:48:ab:07: 2d:ae:06:2a:b2:a3:90:9f:fa:b8:87:2e:be:89:22: 1e:ad:d1:72:0c:3c:58:99:94:3d:2f:69:b6:00:e1: 04:14:20:02:4d:eb:f2:72:3b:b5:ed:b3:c9:ad:f2: b1:98:7e:84:e6:a5:99:fd:6b:05:c9:df:58:f2:bb: de:12:bc:fc:f7:2d:ca:a6:7e:91:c0:32:12:50:10: 68:73:12:42:fe:8d:60:15:3c:97:ee:1f:1c:5f:91: ef:84:61:2d:20:1b:ae:71:ab:df:fc:02:84:bf:6f: a4:d9:2c:77:31:be:d8:9c:0c:81:35:5d:11:cc:82: 04:ec:d9:10:f9:52:f6:da:f6:37:d5:d8:55:e3:0e: a3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7B:EA:3A:D0:0A:EC:C5:BA:73:6D:33:F4:38:82:29:D3:EF:5F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0882f959-9d32-324c-a10c-015dd9f9f77d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:88:c3:95:97:22:4f:73:d6:c1:e5:c1:3e:51:45:c5:b7:0d: f6:c1:68:43:53:86:45:1d:a3:3d:53:d2:a8:d8:24:07:35:90: be:5d:3d:49:01:54:dc:18:4e:67:5c:cd:ed:5a:37:ba:e5:9c: 0d:2d:9d:67:94:d5:d6:46:ea:b6:92:87:02:4e:1d:47:b5:05: ca:29:ce:e7:94:33:71:9a:2f:44:4c:f7:bc:d3:96:d9:82:96: e2:33:85:a9:b1:e7:cc:31:1d:52:5f:39:be:9f:fa:5a:36:25: 29:bb:f9:e5:1b:42:fe:b9:d7:87:a8:c4:d2:e2:7a:d4:24:de: 5f:e8:6d:87:41:09:50:f5:71:4f:db:90:e5:f9:49:fe:a0:5d: d2:42:f2:c8:f2:37:4e:59:4b:7b:97:6b:9c:15:94:dc:26:4b: e7:0a:1d:53:ef:4c:42:29:fa:3d:07:94:81:f2:90:9a:a6:24: 28:92:53:39:df:39:80:54:21:ef:2e:cd:4b:99:08:05:34:3b: 14:f5:21:aa:f5:8e:63:40:73:46:f7:bc:6a:23:58:ff:d3:a1: 93:99:97:ac:bf:ca:d5:46:45:78:b9:02:2c:ae:71:c9:fe:17: a1:e0:2f:18:92:4f:5b:8d:47:f6:de:41:5c:f6:9f:81:fe:73: 08:53:c6:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmILNcVGPgzIZ8iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OWNkNmJkMTctNDJmMy00YTdjLWIwNzQtNWRmMWM3ZDFjODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO/UIfv92yfzl5NzwyQTJtaro6xY0XFau8W4 J+khczM4tu78w4AbluVw97TAthNvkRDeGci8kUetpxyuNep2kCv8vbuTilKBx/Oh TD+oxHHCJ6iYPSSqJ6S/CuYlcXKN4rcOoB5kAs9uRJJyDJtrUE2SG4JIqwctrgYq sqOQn/q4hy6+iSIerdFyDDxYmZQ9L2m2AOEEFCACTevycju17bPJrfKxmH6E5qWZ /WsFyd9Y8rveErz89y3Kpn6RwDISUBBocxJC/o1gFTyX7h8cX5HvhGEtIBuucavf /AKEv2+k2Sx3Mb7YnAyBNV0RzIIE7NkQ+VL22vY31dhV4w6jsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK576jrQCuzFunNtM/Q4ginT71++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDg4MmY5NTktOWQzMi0z MjRjLWExMGMtMDE1ZGQ5ZjlmNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKIw5WXIk9z1sHlwT5RRcW3DfbBaENThkUdoz1T0qjYJAc1kL5dPUkB VNwYTmdcze1aN7rlnA0tnWeU1dZG6raShwJOHUe1BcopzueUM3GaL0RM97zTltmC luIzhamx58wxHVJfOb6f+lo2JSm7+eUbQv6514eoxNLietQk3l/obYdBCVD1cU/b kOX5Sf6gXdJC8sjyN05ZS3uXa5wVlNwmS+cKHVPvTEIp+j0HlIHykJqmJCiSUznf OYBUIe8uzUuZCAU0OxT1Iar1jmNAc0b3vGojWP/ToZOZl6y/ytVGRXi5Aiyuccn+ F6HgLxiST1uNR/beQVz2n4H+cwhTxgo= -----END CERTIFICATE-----Generated at Tue Sep 22 01:56:31 2026 by rpki-client