$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d8d4815-ec48-3baf-b760-7fe106a740b0.roa File: 3d8d4815-ec48-3baf-b760-7fe106a740b0.roa (raw, json) Hash identifier: mmUnuQ7kX0HHyyec5X3oX40PUkncLiWnj4DJZ/apKH8= Subject key identifier: 7D:F4:89:0A:35:92:1A:98:8E:E6:63:45:A7:D1:32:FD:E7:79:48:25 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974D467CB986E9F97A96980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d8d4815-ec48-3baf-b760-7fe106a740b0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.31.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:d4:67:cb:98:6e:9f:97:a9:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1d1623ca-0788-4569-818a-cf467b783902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:01:71:20:80:93:05:cc:c4:dc:9a:47:fc:50: e7:33:6a:6a:29:2b:d9:ca:d3:ce:f3:5d:ea:c3:5c: dc:83:00:d5:17:e8:64:05:08:80:c6:4b:66:31:09: 96:0a:17:c4:9e:4e:81:07:b7:51:1f:2b:50:51:f5: 3d:8b:f0:6a:64:1c:39:1f:5b:b2:c3:4d:94:9b:1c: 31:f8:78:5b:7b:f4:68:74:2b:87:c4:76:69:53:7c: ad:26:b2:4c:af:92:91:bb:bf:3b:23:94:3b:ea:80: f3:81:4d:17:44:3c:f8:9f:a0:6d:8a:f2:36:bf:4b: ca:25:2c:ad:43:11:1b:50:87:ad:ba:99:fb:01:06: a9:a6:f8:d6:94:5a:21:5c:99:f7:16:90:d7:53:be: 3f:e8:fd:2a:22:24:2e:d0:24:68:62:70:b2:e9:ef: 82:3f:17:f9:6c:f5:d5:fb:a9:50:c5:5a:b7:7e:26: c4:57:41:91:e1:61:48:12:42:97:1e:92:f9:21:97: 70:b7:77:cd:05:76:fe:dc:f4:5f:01:f8:d4:07:76: a2:5e:50:ff:c1:f8:6d:bc:5a:9f:30:d8:80:78:a4: 42:0f:7b:b3:cb:c9:95:ed:f2:40:f1:f2:dc:d7:cd: aa:67:39:cd:78:fa:20:83:c9:25:1d:22:02:ee:a4: 52:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F4:89:0A:35:92:1A:98:8E:E6:63:45:A7:D1:32:FD:E7:79:48:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d8d4815-ec48-3baf-b760-7fe106a740b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:77:26:03:3d:71:61:4f:5b:61:ba:b8:a1:8a:0d:89:66:e3: 4f:ff:5d:eb:89:65:d2:19:54:0b:00:19:27:84:23:4b:9d:20: ea:22:38:e5:eb:ac:7c:3c:fe:16:06:44:fc:f9:00:7d:4a:ba: 38:62:e1:d5:9b:af:c0:ee:09:44:c7:18:c0:fe:ca:e0:0f:ac: fa:f0:62:ec:c6:74:30:c5:d9:8e:63:b8:d1:94:8c:19:98:17: 8f:4b:82:24:88:37:34:0a:e7:0c:be:26:1c:e1:06:88:04:f7: 6d:d9:50:97:a3:cd:5d:24:00:1d:6c:d5:53:89:29:cf:05:ce: c5:3c:af:77:76:44:ca:6a:64:8f:35:e1:73:c0:c6:9e:7f:38: b5:77:18:69:8b:b8:6e:3e:8b:98:e5:79:6d:90:c9:5b:16:b4: bb:c2:ef:7d:bd:32:fc:ff:7d:8d:49:1c:ce:09:1d:86:cb:3f: da:e4:15:9f:a7:eb:8e:49:37:42:dc:5d:07:e0:0b:db:b0:a7: 49:72:68:2a:7a:5d:02:d2:27:a6:c1:c4:5a:a7:6a:50:6d:80: e8:86:61:48:e2:c6:41:99:2a:57:99:40:c3:4b:02:0f:e6:84: 33:13:29:f9:e1:85:89:c4:72:7a:0c:0e:26:94:61:aa:f0:e0: 18:85:0c:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdNRny5hun5epaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWQxNjIzY2EtMDc4OC00NTY5LTgxOGEtY2Y0NjdiNzgzOTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgFxIICTBczE3JpH/FDnM2pqKSvZytPO813q w1zcgwDVF+hkBQiAxktmMQmWChfEnk6BB7dRHytQUfU9i/BqZBw5H1uyw02Umxwx +Hhbe/RodCuHxHZpU3ytJrJMr5KRu787I5Q76oDzgU0XRDz4n6BtivI2v0vKJSyt QxEbUIetupn7AQappvjWlFohXJn3FpDXU74/6P0qIiQu0CRoYnCy6e+CPxf5bPXV +6lQxVq3fibEV0GR4WFIEkKXHpL5IZdwt3fNBXb+3PRfAfjUB3aiXlD/wfhtvFqf MNiAeKRCD3uzy8mV7fJA8fLc182qZznNePogg8klHSIC7qRSwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH30iQo1khqYjuZjRafRMv3neUglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Q4ZDQ4MTUtZWM0OC0z YmFmLWI3NjAtN2ZlMTA2YTc0MGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAl3JgM9cWFPW2G6uKGKDYlm40//XeuJZdIZVAsAGSeEI0udIOoiOOXr rHw8/hYGRPz5AH1Kujhi4dWbr8DuCUTHGMD+yuAPrPrwYuzGdDDF2Y5juNGUjBmY F49LgiSINzQK5wy+JhzhBogE923ZUJejzV0kAB1s1VOJKc8FzsU8r3d2RMpqZI81 4XPAxp5/OLV3GGmLuG4+i5jleW2QyVsWtLvC7329Mvz/fY1JHM4JHYbLP9rkFZ+n 645JN0LcXQfgC9uwp0lyaCp6XQLSJ6bBxFqnalBtgOiGYUjixkGZKleZQMNLAg/m hDMTKfnhhYnEcnoMDiaUYarw4BiFDBQ= -----END CERTIFICATE-----Generated at Sat Sep 26 17:25:24 2026 by rpki-client