$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ca604fe-0d73-341d-9e40-6e71e1efdf0c.roa File: 3ca604fe-0d73-341d-9e40-6e71e1efdf0c.roa (raw, json) Hash identifier: s2zulSUywZ2LZev5Hu1WHaoSLP4e+BcQs0bcz0H13Mc= Subject key identifier: 80:BF:AD:ED:06:01:12:08:4F:E3:AD:03:91:63:86:B2:68:AC:80:8B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EED51F4EF6254EE1661E4A500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ca604fe-0d73-341d-9e40-6e71e1efdf0c.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.31.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:f4:ef:62:54:ee:16:61:e4:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=616d9883-a74d-48f7-ad4d-6291d907bd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:af:b9:50:18:8c:1b:77:84:b5:23:d8:39:46: bb:5a:b4:0f:b1:6c:65:83:98:47:42:c0:18:f9:ce: f5:fa:d8:06:36:e7:cc:e4:2a:db:5a:58:66:cc:6b: 5a:e7:dc:ed:14:44:ba:85:2d:06:46:cc:9b:b6:89: 59:56:54:fc:7b:24:ac:24:6c:9a:3b:2b:85:06:5b: a1:84:58:20:66:8b:4b:5f:9d:4a:18:07:09:50:25: 4b:ac:06:bb:8a:d3:31:e8:4f:1f:10:c5:4c:ac:09: 27:57:f8:b1:79:30:99:80:61:1b:b9:f1:23:88:0e: a3:9b:0f:9b:a0:a8:02:b6:40:a9:dd:19:be:66:33: 5d:1e:a9:3a:fa:68:cf:6c:a1:b1:fe:d5:32:d3:b7: 82:a1:e7:e2:7e:f7:c7:55:f9:b8:4f:2a:78:dc:92: 15:3e:29:e3:55:c0:43:4d:b7:18:49:4f:58:d9:a5: 66:b6:0d:f4:68:a6:2b:c1:e1:41:5e:18:62:ac:15: c3:32:b1:8a:04:15:ef:d2:69:77:47:e8:f9:bf:33: 2e:e0:76:fa:25:41:02:73:df:1a:5c:c9:10:27:a1: 4a:a1:59:fa:a5:4d:1b:16:0e:e8:99:2c:a6:d3:85: fe:a6:6c:da:2a:4f:8e:74:96:46:b1:68:41:74:e3: ca:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BF:AD:ED:06:01:12:08:4F:E3:AD:03:91:63:86:B2:68:AC:80:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3ca604fe-0d73-341d-9e40-6e71e1efdf0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ba:bd:ce:3b:a1:81:4e:4b:c8:48:ab:a0:a3:e5:5e:bd:28: f5:ef:17:40:b0:42:b2:8a:dc:c1:97:8e:64:7b:ac:a3:d3:ea: 2c:3b:90:2c:0c:7d:3d:12:4b:49:24:75:c3:cf:3c:cd:18:fc: d6:90:92:26:2d:07:c2:df:46:27:9a:ff:17:77:4c:91:72:38: 42:91:02:fa:f9:31:2f:12:5f:a2:23:75:28:bc:b4:b7:08:09: 1e:d0:4b:e2:30:1a:4c:d7:fa:d7:d9:de:df:43:62:c2:73:5c: e0:92:13:f8:8e:e9:45:a0:a7:70:91:42:aa:1e:75:7e:45:d0: 74:1d:c9:49:74:92:03:6d:c8:47:cf:85:a4:9f:d5:1e:fe:c5: 09:34:58:a5:0c:e2:57:61:5e:e2:54:76:af:a1:e2:48:b3:89: 50:f0:ad:16:f1:eb:65:d9:4e:56:20:ad:ac:9e:0e:d1:8f:a4: 43:9e:59:18:69:ee:b2:de:da:22:49:40:fc:63:f9:ad:32:b7: d3:00:59:38:71:cb:13:95:a1:cb:5d:21:b1:d4:b1:d2:94:b5: a8:4c:0e:4b:65:e0:01:73:5a:62:11:13:7c:98:38:ba:57:8a: e7:89:2c:a1:a7:6a:53:5f:5e:5e:68:e1:d1:f2:6d:cf:46:1c: a8:c9:bb:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUfTvYlTuFmHkpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NjE2ZDk4ODMtYTc0ZC00OGY3LWFkNGQtNjI5MWQ5MDdiZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja+5UBiMG3eEtSPYOUa7WrQPsWxlg5hHQsAY +c71+tgGNufM5CrbWlhmzGta59ztFES6hS0GRsybtolZVlT8eySsJGyaOyuFBluh hFggZotLX51KGAcJUCVLrAa7itMx6E8fEMVMrAknV/ixeTCZgGEbufEjiA6jmw+b oKgCtkCp3Rm+ZjNdHqk6+mjPbKGx/tUy07eCoefifvfHVfm4Typ43JIVPinjVcBD TbcYSU9Y2aVmtg30aKYrweFBXhhirBXDMrGKBBXv0ml3R+j5vzMu4Hb6JUECc98a XMkQJ6FKoVn6pU0bFg7omSym04X+pmzaKk+OdJZGsWhBdOPKuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIC/re0GARIIT+OtA5FjhrJorICLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2NhNjA0ZmUtMGQ3My0z NDFkLTllNDAtNmU3MWUxZWZkZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR8YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGy6vc47oYFOS8hIq6Cj5V69KPXvF0CwQrKK3MGXjmR7rKPT6iw7kCwM fT0SS0kkdcPPPM0Y/NaQkiYtB8LfRiea/xd3TJFyOEKRAvr5MS8SX6IjdSi8tLcI CR7QS+IwGkzX+tfZ3t9DYsJzXOCSE/iO6UWgp3CRQqoedX5F0HQdyUl0kgNtyEfP haSf1R7+xQk0WKUM4ldhXuJUdq+h4kiziVDwrRbx62XZTlYgrayeDtGPpEOeWRhp 7rLe2iJJQPxj+a0yt9MAWThxyxOVoctdIbHUsdKUtahMDktl4AFzWmIRE3yYOLpX iueJLKGnalNfXl5o4dHybc9GHKjJu8Q= -----END CERTIFICATE-----Generated at Mon Sep 21 16:48:12 2026 by rpki-client