$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa File: 2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa (raw, json) Hash identifier: iQFs2wa4ZpVnkp6SwxoCEcsVELCPNHpoDex6LTGWrV8= Subject key identifier: 84:0D:64:6F:E2:D2:42:B3:7D:BE:7D:FD:07:CB:19:2E:BC:24:84:39 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E043623308E3E0778320A0A10 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 30036 IP address blocks: 173.31.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:23:30:8e:3e:07:78:32:0a:0a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=ed778f4b-7293-4daa-bff7-8a3f1c06a189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:f7:2a:64:90:44:03:77:31:e9:f9:5a:c1: 54:e4:8d:2c:46:e1:fe:4e:20:64:42:44:e6:3e:0a: 83:3b:1e:02:d9:be:fd:49:ea:c3:3b:bd:da:bb:5e: a6:1e:59:2d:42:77:8f:fe:c8:1c:25:0e:87:f7:d4: e3:87:7f:38:b6:d8:8d:ca:a1:80:72:06:30:57:f9: 78:8d:a1:d8:db:f5:9a:31:09:a3:84:77:87:b1:87: 6a:7e:98:d9:21:8e:24:44:34:af:32:48:91:3b:e6: 05:f6:74:5b:b3:24:62:ff:70:9d:ba:c7:79:a6:d9: 33:ab:82:8f:08:f2:53:63:8b:44:4d:84:3e:00:68: f1:22:19:47:25:52:f7:35:41:04:bf:54:77:73:40: c3:df:8b:3e:50:a0:8a:0c:1a:97:07:6d:e5:6c:5e: d8:65:9c:8a:94:41:ab:d6:78:7c:7b:18:b8:8f:88: 3e:93:85:8b:a2:96:2a:7d:39:ac:84:13:34:4f:7e: 37:bd:9d:92:cb:4c:58:02:3f:6d:3b:87:23:79:5e: a0:af:7c:cd:a3:77:33:fb:4c:dc:92:0d:dd:d9:30: 71:ff:91:fb:ac:8f:91:de:69:9e:42:72:b6:97:9c: d1:56:1b:45:5b:73:0b:10:e4:7a:36:94:79:b6:2e: 27:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0D:64:6F:E2:D2:42:B3:7D:BE:7D:FD:07:CB:19:2E:BC:24:84:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:2a:76:ec:1f:13:88:94:29:c1:09:35:6a:90:f5:ae:da:06: d6:60:e3:71:9e:27:9b:be:a5:db:14:f7:ac:a2:ca:2b:63:a1: d3:e5:a6:23:30:94:66:51:38:c7:c7:2c:20:00:de:1c:c2:b9: 5a:9e:6c:24:81:42:bf:21:57:b9:c8:f6:4d:36:8f:73:65:2c: 98:8a:f6:42:18:c0:8c:9b:3c:79:42:22:ae:57:f8:db:18:00: 83:48:37:20:95:b3:d7:ef:44:86:74:b0:a7:3b:ca:de:97:26: 45:97:65:c7:83:b0:dc:35:8e:aa:de:7b:bd:f9:8a:62:ba:b8: 6e:7e:de:f1:7b:b0:46:e4:1c:18:25:1f:a1:71:61:35:47:82: b4:8b:42:f6:af:f1:22:56:33:0f:85:49:cc:95:23:35:f6:e6: e2:4a:af:71:ff:70:d9:80:0a:9e:87:40:6a:19:3f:4e:d1:0c: a0:c5:ed:43:c3:09:c3:a8:eb:8e:6d:a9:9a:6e:57:09:a2:f8: fd:18:e0:04:61:97:0a:0b:60:dc:4a:f2:51:4b:2a:82:88:30: 5c:e8:74:ea:cd:1c:1d:57:67:cd:f3:28:1c:cb:d0:db:94:c4: e7:89:46:7e:e3:19:d2:3a:67:9b:c9:03:ce:90:33:64:aa:9a: c6:1d:d8:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENiMwjj4HeDIKChAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk ZWQ3NzhmNGItNzI5My00ZGFhLWJmZjctOGEzZjFjMDZhMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgj3KmSQRAN3Men5WsFU5I0sRuH+TiBkQkTm PgqDOx4C2b79SerDO73au16mHlktQneP/sgcJQ6H99Tjh384ttiNyqGAcgYwV/l4 jaHY2/WaMQmjhHeHsYdqfpjZIY4kRDSvMkiRO+YF9nRbsyRi/3Cdusd5ptkzq4KP CPJTY4tETYQ+AGjxIhlHJVL3NUEEv1R3c0DD34s+UKCKDBqXB23lbF7YZZyKlEGr 1nh8exi4j4g+k4WLopYqfTmshBM0T343vZ2Sy0xYAj9tO4cjeV6gr3zNo3cz+0zc kg3d2TBx/5H7rI+R3mmeQnK2l5zRVhtFW3MLEOR6NpR5ti4n/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQNZG/i0kKzfb59/QfLGS68JIQ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmFmMzU3MmQtZTdkNC0z ZWQ3LWE5ODQtODljZDJhNWUxNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4qduwfE4iUKcEJNWqQ9a7aBtZg43GeJ5u+pdsU96yiyitjodPlpiMw lGZROMfHLCAA3hzCuVqebCSBQr8hV7nI9k02j3NlLJiK9kIYwIybPHlCIq5X+NsY AININyCVs9fvRIZ0sKc7yt6XJkWXZceDsNw1jqree735imK6uG5+3vF7sEbkHBgl H6FxYTVHgrSLQvav8SJWMw+FScyVIzX25uJKr3H/cNmACp6HQGoZP07RDKDF7UPD CcOo645tqZpuVwmi+P0Y4ARhlwoLYNxK8lFLKoKIMFzodOrNHB1XZ83zKBzL0NuU xOeJRn7jGdI6Z5vJA86QM2SqmsYd2F0= -----END CERTIFICATE-----Generated at Sat Jun 13 15:59:11 2026 by rpki-client