$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a1630f5-d8b0-37eb-998f-d981a7eda96b.roa File: 1a1630f5-d8b0-37eb-998f-d981a7eda96b.roa (raw, json) Hash identifier: SWIcAW26q9lHVVptX/XvmR9S0QSLFKOTtdnFCfMbpa8= Subject key identifier: CA:85:AB:99:49:A8:A0:A2:4E:74:90:7E:01:5F:E4:03:59:A9:17:B1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4987D596C9C4C4177A0B2F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a1630f5-d8b0-37eb-998f-d981a7eda96b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.31.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:d5:96:c9:c4:c4:17:7a:0b:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=098d3623-4d7c-468a-bffb-0a543e013011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:81:5e:50:82:37:3c:5a:66:95:95:bf:51:71: 90:3f:93:95:d1:b6:51:98:74:d9:06:de:57:e1:7f: 47:ba:2a:89:85:41:f4:64:01:77:2b:2d:b6:77:df: 88:a7:38:db:66:c1:36:97:9e:8a:22:46:13:5a:1a: 05:c7:aa:1c:a1:00:b5:7f:dc:e0:55:09:a2:ff:47: 08:15:dd:a6:41:fd:9c:38:47:f2:5e:91:d3:a9:7c: 80:f1:86:73:15:a2:18:5a:b6:21:2f:05:0e:0f:f7: 61:d3:7f:9c:23:04:19:2b:f8:22:2d:43:90:fe:1d: 21:13:34:d3:34:22:38:94:c9:7c:1a:d8:52:c9:39: b8:f9:95:7a:ee:83:ca:c5:13:78:6b:5a:86:fc:2e: f4:53:4f:6d:60:28:01:99:95:c2:1a:8e:8a:2a:be: 74:0f:86:c2:5f:d7:c1:9f:aa:cc:0f:79:06:bd:27: 7e:00:36:52:ed:ad:2c:79:15:7e:12:56:9d:d1:d7: 88:f8:39:7c:bf:f9:9e:a2:94:0f:9b:95:4f:2b:ee: a6:12:c5:14:a4:ed:7a:1d:d1:a6:07:4e:86:f9:80: 45:52:e6:8c:f8:81:3f:e9:3e:3c:47:21:29:cc:2d: e1:4d:60:cd:fe:80:b7:af:1f:4e:2b:72:86:53:23: 6e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:85:AB:99:49:A8:A0:A2:4E:74:90:7E:01:5F:E4:03:59:A9:17:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a1630f5-d8b0-37eb-998f-d981a7eda96b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:bc:dc:cf:a0:e8:ea:57:38:ce:75:1d:57:85:6a:64:14:f5: f3:3e:2f:8e:aa:3a:fc:03:fc:ef:0b:ac:58:d0:f7:92:5f:ab: 33:be:66:4d:5b:e5:a8:d0:0b:f4:62:27:d6:9c:fd:58:52:5e: f0:81:8d:33:c8:41:7a:32:cf:06:ea:ff:8e:e4:a5:9b:b5:a0: 8a:00:5a:de:08:08:02:84:b2:59:40:fd:96:43:5e:4e:4f:c3: 31:fa:cd:d9:9b:4e:d5:24:d0:79:d4:16:02:20:86:e5:90:8c: ca:67:0f:af:10:ac:62:32:98:06:e0:64:4c:f7:76:16:9f:af: b1:f7:91:6c:10:ad:a7:a5:9b:64:f8:f8:7c:8e:77:4a:9d:9c: bf:71:17:93:01:cb:d9:40:65:b7:2a:26:6e:cd:47:fb:cc:e1: 95:ef:c4:b7:a5:2c:64:3a:ed:72:f3:51:b6:11:d6:85:0c:94: db:2f:51:02:18:0a:e5:44:d4:3f:2e:18:6e:ab:ed:c8:3c:dd: 04:fe:bf:26:15:59:26:a6:6d:79:48:42:b6:48:f6:45:60:44: e1:04:8c:ea:4c:f4:3a:1d:1d:e0:be:d9:7c:43:9c:19:00:6c: 48:e5:5c:8c:da:fc:75:a0:65:52:63:74:72:b1:65:aa:59:8e: c9:75:bd:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh9WWycTEF3oLL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDk4ZDM2MjMtNGQ3Yy00NjhhLWJmZmItMGE1NDNlMDEzMDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34FeUII3PFpmlZW/UXGQP5OV0bZRmHTZBt5X 4X9HuiqJhUH0ZAF3Ky22d9+IpzjbZsE2l56KIkYTWhoFx6ocoQC1f9zgVQmi/0cI Fd2mQf2cOEfyXpHTqXyA8YZzFaIYWrYhLwUOD/dh03+cIwQZK/giLUOQ/h0hEzTT NCI4lMl8GthSyTm4+ZV67oPKxRN4a1qG/C70U09tYCgBmZXCGo6KKr50D4bCX9fB n6rMD3kGvSd+ADZS7a0seRV+Elad0deI+Dl8v/meopQPm5VPK+6mEsUUpO16HdGm B06G+YBFUuaM+IE/6T48RyEpzC3hTWDN/oC3rx9OK3KGUyNuXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqFq5lJqKCiTnSQfgFf5ANZqRexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWExNjMwZjUtZDhiMC0z N2ViLTk5OGYtZDk4MWE3ZWRhOTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR8KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAW83M+g6OpXOM51HVeFamQU9fM+L46qOvwD/O8LrFjQ95JfqzO+Zk1b 5ajQC/RiJ9ac/VhSXvCBjTPIQXoyzwbq/47kpZu1oIoAWt4ICAKEsllA/ZZDXk5P wzH6zdmbTtUk0HnUFgIghuWQjMpnD68QrGIymAbgZEz3dhafr7H3kWwQraelm2T4 +HyOd0qdnL9xF5MBy9lAZbcqJm7NR/vM4ZXvxLelLGQ67XLzUbYR1oUMlNsvUQIY CuVE1D8uGG6r7cg83QT+vyYVWSambXlIQrZI9kVgROEEjOpM9DodHeC+2XxDnBkA bEjlXIza/HWgZVJjdHKxZapZjsl1vcs= -----END CERTIFICATE-----Generated at Fri Sep 25 18:06:33 2026 by rpki-client