$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ebd5f5c-561d-3121-8d5d-7c637b48af70.roa File: 5ebd5f5c-561d-3121-8d5d-7c637b48af70.roa (raw, json) Hash identifier: hacTnYowNXdY/pRcqtaj9rbqD7cClTEdcv5DCt2vMio= Subject key identifier: 43:60:03:A8:C5:86:CE:E6:7E:BE:5F:B4:61:47:03:96:9B:36:E3:A8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F2C225D2F09C7F12F1D5AD410 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ebd5f5c-561d-3121-8d5d-7c637b48af70.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.31.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:5d:2f:09:c7:f1:2f:1d:5a:d4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=1ad90f8f-dd89-494c-8ea7-9ca99de1b95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1e:79:f9:de:81:5c:e2:23:b5:2f:11:9b:c5: fe:bc:80:70:43:6c:9b:cf:8f:ee:ec:c7:6c:82:45: 69:b2:be:02:a1:ff:19:56:e2:9a:6d:a9:70:3d:02: f6:67:2d:80:4d:e5:6a:06:18:7e:0b:5f:05:da:37: c4:c4:49:aa:0d:23:e2:eb:77:c9:ea:2e:a9:64:f3: f3:26:31:f4:da:1e:54:f9:3f:6f:13:b4:19:c7:09: e2:dc:19:c3:97:af:0f:37:36:3c:72:4b:29:13:ea: 3d:46:10:05:a3:b9:b7:58:8b:cf:c8:7f:62:ba:f0: aa:44:58:fe:42:d7:3b:ea:61:22:6c:58:09:8d:6f: 01:7f:98:c0:f9:66:d7:79:e2:09:89:74:ad:3f:d0: 77:5e:ca:54:a5:c1:96:87:08:46:6e:38:55:24:e7: fe:20:be:e2:e6:c4:9b:9a:25:19:ca:a8:10:5b:77: 08:a1:e9:67:25:c6:16:b9:4f:61:49:b8:c8:e4:ea: 74:05:e0:96:1c:ef:77:a8:70:14:20:b9:2f:82:78: bb:61:ec:bf:82:f7:40:2c:26:73:83:df:d2:21:5a: b8:8b:98:02:04:5d:0a:1e:87:40:69:b9:ad:7a:78: 7b:27:cb:44:1d:33:44:be:80:09:b3:2e:8c:76:d5: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:60:03:A8:C5:86:CE:E6:7E:BE:5F:B4:61:47:03:96:9B:36:E3:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5ebd5f5c-561d-3121-8d5d-7c637b48af70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:79:40:d5:7d:35:71:45:63:e8:32:02:4e:0e:54:0f:72:7e: 86:b5:4d:9c:55:1f:80:1d:47:49:39:b6:b5:66:1e:03:9c:8e: b1:a7:1d:ea:95:0a:89:8d:b7:9a:ad:a1:ea:2c:f0:1a:53:e2: c9:2c:2c:73:c5:37:43:f5:75:ba:b9:67:df:ee:fa:87:43:25: 0b:02:b3:c9:08:ae:6c:dd:86:2b:13:9e:8c:8d:83:5b:21:4a: 9d:15:4d:36:68:1d:68:e9:ce:f9:f9:cd:42:37:1b:bb:9d:be: 40:88:92:c2:b2:ba:fb:33:d7:09:10:bf:68:8c:fc:3d:ee:75: b2:49:f3:2e:e1:41:59:cf:e6:ce:1d:35:ec:d8:b0:9f:2a:97: 3f:c7:4f:2a:bd:5a:ba:96:76:24:ba:73:a9:64:e7:f0:8a:27: ce:d0:c3:a9:07:f4:a2:82:7b:63:c6:78:1b:f1:84:3f:51:e1: d0:a6:d0:b1:80:3f:9f:45:e1:f2:78:f3:43:61:0b:70:c4:c7: 7b:ad:be:25:f9:7a:5a:fa:10:3b:cc:7c:2f:8e:0f:f4:85:4e: 9c:16:57:a4:76:cf:21:52:86:d2:aa:5e:4e:8f:c2:f1:56:a6: 81:be:89:70:29:63:5c:ca:b1:cd:e1:89:f3:df:17:4c:50:83: fd:ff:70:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sIl0vCcfxLx1a1BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk MWFkOTBmOGYtZGQ4OS00OTRjLThlYTctOWNhOTlkZTFiOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx55+d6BXOIjtS8Rm8X+vIBwQ2ybz4/u7Mds gkVpsr4Cof8ZVuKabalwPQL2Zy2ATeVqBhh+C18F2jfExEmqDSPi63fJ6i6pZPPz JjH02h5U+T9vE7QZxwni3BnDl68PNzY8ckspE+o9RhAFo7m3WIvPyH9iuvCqRFj+ Qtc76mEibFgJjW8Bf5jA+WbXeeIJiXStP9B3XspUpcGWhwhGbjhVJOf+IL7i5sSb miUZyqgQW3cIoelnJcYWuU9hSbjI5Op0BeCWHO93qHAUILkvgni7Yey/gvdALCZz g9/SIVq4i5gCBF0KHodAabmtenh7J8tEHTNEvoAJsy6MdtWflwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENgA6jFhs7mfr5ftGFHA5abNuOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWViZDVmNWMtNTYxZC0z MTIxLThkNWQtN2M2MzdiNDhhZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFh5QNV9NXFFY+gyAk4OVA9yfoa1TZxVH4AdR0k5trVmHgOcjrGnHeqV ComNt5qtoeos8BpT4sksLHPFN0P1dbq5Z9/u+odDJQsCs8kIrmzdhisTnoyNg1sh Sp0VTTZoHWjpzvn5zUI3G7udvkCIksKyuvsz1wkQv2iM/D3udbJJ8y7hQVnP5s4d NezYsJ8qlz/HTyq9WrqWdiS6c6lk5/CKJ87Qw6kH9KKCe2PGeBvxhD9R4dCm0LGA P59F4fJ480NhC3DEx3utviX5elr6EDvMfC+OD/SFTpwWV6R2zyFShtKqXk6PwvFW poG+iXApY1zKsc3hifPfF0xQg/3/cG0= -----END CERTIFICATE-----Generated at Thu Sep 24 11:58:13 2026 by rpki-client