$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2467d544-5963-35aa-9db9-e2efe3038423.roa File: 2467d544-5963-35aa-9db9-e2efe3038423.roa (raw, json) Hash identifier: B5Dt3Elf/kwSBJSf6AGF4xoV/6B+Va8U+1i4CCQPXf4= Subject key identifier: 1B:5E:EE:CE:06:91:CC:B7:7A:5E:D2:92:ED:B5:F5:D7:E7:3F:5F:96 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F2EED105DBD7D789AC1A8E5C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2467d544-5963-35aa-9db9-e2efe3038423.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.31.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:10:5d:bd:7d:78:9a:c1:a8:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=c236ea1b-61db-4130-871e-c3833aba7d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ba:1e:07:2e:2f:57:41:64:f1:d4:5b:e4:03: 0f:d6:92:e9:5e:33:3d:96:b6:4d:17:a9:52:77:c6: 46:a6:68:79:13:2d:e9:1d:e2:f0:e1:4e:63:47:50: f0:24:29:bf:69:7c:2b:9a:97:29:3e:c0:ce:91:38: 2d:53:cb:8d:6d:26:03:c6:9e:4a:c3:da:21:f9:75: 67:6d:b3:be:a1:97:55:99:bc:98:5a:a4:e0:ae:95: 55:07:9e:e5:3d:e1:82:56:6a:73:60:c0:c8:c6:1b: c8:c6:2e:f4:4e:c6:d1:54:63:46:71:dc:4f:85:90: 78:f5:09:8e:d1:b9:99:33:f6:c7:dc:04:e6:0a:77: 21:8f:f7:e8:ec:44:b7:2b:bd:ce:90:24:b8:ab:a5: da:fa:07:29:ae:5b:fd:df:2a:6f:79:8f:3d:17:45: 82:b5:75:4c:b9:8b:40:24:23:b8:67:81:c6:c2:15: ff:4a:a1:12:2d:67:a4:d8:b7:d6:84:d7:2c:f5:d6: 11:74:c7:32:f7:ba:37:0e:32:e7:e8:29:5d:16:44: d9:0f:f1:8e:2e:aa:41:ed:6d:2a:09:af:b5:ae:8b: b5:37:ff:90:ec:1b:d2:a1:47:c0:2a:ea:2d:bd:1c: bd:c6:78:a2:db:f3:8d:3e:76:2a:16:95:7e:77:70: b6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5E:EE:CE:06:91:CC:B7:7A:5E:D2:92:ED:B5:F5:D7:E7:3F:5F:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2467d544-5963-35aa-9db9-e2efe3038423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:bd:8b:77:28:40:73:f4:7d:25:b6:19:ad:6f:28:c0:fb:a9: 8b:9e:94:6f:50:22:02:45:f4:b1:6a:f4:6d:1c:19:e2:a1:cb: e4:60:59:32:9e:76:c9:6b:59:16:62:d5:67:09:1e:36:19:7b: b5:77:9a:c1:49:be:c8:9c:ea:22:7d:88:4f:85:17:7b:79:cd: 3a:4e:ec:f5:91:72:15:23:bc:45:44:c1:91:98:e3:82:df:d3: 43:4d:8a:a6:7f:ed:05:cd:b3:56:3f:63:51:47:d4:f4:61:d6: 93:ed:c7:bd:4c:04:16:0c:c0:a5:05:36:d1:50:e8:af:d4:41: e1:4f:11:00:1d:c5:54:63:01:fe:1b:5d:2f:d6:29:73:bf:1e: 50:a3:ce:4a:a6:31:97:72:d9:8d:ea:f2:54:21:7c:7f:61:7f: 42:79:03:66:ba:ec:99:27:33:06:d7:7c:54:18:8a:be:73:ce: 26:a8:2a:a3:89:a7:78:1d:dc:74:42:cf:b3:28:b4:ef:5f:a6: c3:49:02:b2:5b:68:a7:a3:20:b4:65:f7:89:ad:1d:68:ec:52: 9c:dd:06:90:b8:6c:5e:b5:76:c2:72:64:02:21:02:f9:de:12: 65:05:63:f2:6f:d3:1a:4d:71:4c:c8:cc:c3:89:28:ac:de:29: d0:03:3b:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RBdvX14msGo5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk YzIzNmVhMWItNjFkYi00MTMwLTg3MWUtYzM4MzNhYmE3ZDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7oeBy4vV0Fk8dRb5AMP1pLpXjM9lrZNF6lS d8ZGpmh5Ey3pHeLw4U5jR1DwJCm/aXwrmpcpPsDOkTgtU8uNbSYDxp5Kw9oh+XVn bbO+oZdVmbyYWqTgrpVVB57lPeGCVmpzYMDIxhvIxi70TsbRVGNGcdxPhZB49QmO 0bmZM/bH3ATmCnchj/fo7ES3K73OkCS4q6Xa+gcprlv93ypveY89F0WCtXVMuYtA JCO4Z4HGwhX/SqESLWek2LfWhNcs9dYRdMcy97o3DjLn6CldFkTZD/GOLqpB7W0q Ca+1rou1N/+Q7BvSoUfAKuotvRy9xnii2/ONPnYqFpV+d3C2LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBte7s4Gkcy3el7Sku219dfnP1+WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjQ2N2Q1NDQtNTk2My0z NWFhLTlkYjktZTJlZmUzMDM4NDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABe9i3coQHP0fSW2Ga1vKMD7qYuelG9QIgJF9LFq9G0cGeKhy+RgWTKe dslrWRZi1WcJHjYZe7V3msFJvsic6iJ9iE+FF3t5zTpO7PWRchUjvEVEwZGY44Lf 00NNiqZ/7QXNs1Y/Y1FH1PRh1pPtx71MBBYMwKUFNtFQ6K/UQeFPEQAdxVRjAf4b XS/WKXO/HlCjzkqmMZdy2Y3q8lQhfH9hf0J5A2a67JknMwbXfFQYir5zziaoKqOJ p3gd3HRCz7MotO9fpsNJArJbaKejILRl94mtHWjsUpzdBpC4bF61dsJyZAIhAvne EmUFY/Jv0xpNcUzIzMOJKKzeKdADO7Q= -----END CERTIFICATE-----Generated at Mon Sep 21 13:51:14 2026 by rpki-client