$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfef74fc-994c-3502-b355-4ccb17c00e10.roa File: bfef74fc-994c-3502-b355-4ccb17c00e10.roa (raw, json) Hash identifier: uEJhH+qTfDzpu+F4xYBffginxl16UKWAKJEr1RM3kmU= Subject key identifier: D9:4F:0C:4E:70:83:41:15:74:88:00:41:B9:4E:C8:66:C3:62:30:39 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DFBD6289A94E3CB14980B6040 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfef74fc-994c-3502-b355-4ccb17c00e10.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 19905 IP address blocks: 173.31.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d6:28:9a:94:e3:cb:14:98:0b:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=9b46bde4-1d7b-4f48-9478-51687586473a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:73:e1:bb:12:01:dc:22:ee:de:21:70:5d:78: c8:29:32:86:6d:dc:85:84:7b:e5:04:6e:b5:78:b8: 3c:b5:6e:94:ba:70:23:e6:25:99:93:d4:aa:25:9c: 76:e9:6b:39:13:b1:e7:29:6a:ab:29:cd:da:84:a9: 42:f3:78:7a:b9:1e:e0:c9:fe:26:fa:68:0e:f6:7c: 80:07:e4:80:42:c3:42:48:73:e8:14:8a:1f:15:17: 1f:bf:61:f9:85:da:45:3e:df:76:4a:26:a0:7d:5e: c5:7a:14:15:f4:62:77:ec:f9:ca:44:fa:0a:27:d8: 2a:8e:5f:62:e3:01:f0:b5:8c:17:f7:b1:34:84:cb: f6:29:57:75:6f:91:e5:ec:88:96:12:05:cb:60:3f: 90:64:59:ae:61:22:47:02:4e:fa:64:87:f1:f2:cf: 14:2b:13:db:35:c6:e0:c6:26:2b:8d:b3:22:74:d1: ba:03:5a:d2:cd:1a:13:3f:15:8e:96:f7:4d:0f:9f: 9a:32:85:db:4b:32:85:52:79:99:43:5c:2e:c4:75: b2:7c:de:16:f5:a2:ff:2d:4e:f0:d4:41:6d:c9:97: 39:8d:fb:ca:f5:62:33:06:f4:13:a7:90:80:8d:8b: b3:5f:05:50:9e:fd:88:06:e6:e6:e5:a1:e5:66:1f: 5a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4F:0C:4E:70:83:41:15:74:88:00:41:B9:4E:C8:66:C3:62:30:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfef74fc-994c-3502-b355-4ccb17c00e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:78:5c:65:cf:8f:27:46:44:9d:fd:b8:37:97:67:0c:12:31: 97:14:02:0d:11:df:bc:7c:25:17:c3:65:96:17:24:bd:eb:71: f8:6b:38:05:71:94:fa:b8:7b:22:66:79:c9:2f:68:50:58:29: 4f:de:25:f9:11:12:80:44:d5:2e:81:53:90:d4:21:72:13:9c: 3a:80:8a:ad:b1:3f:5e:46:5e:e8:a6:09:28:81:4a:77:32:ad: bd:5c:fe:52:78:74:69:6b:33:f5:37:83:9e:18:f1:d1:9f:a8: 10:01:58:65:05:e4:06:3a:4e:41:dd:b5:b5:4f:b2:63:08:47: 7b:dc:84:34:ae:75:ee:04:7c:62:b2:48:4a:19:33:29:0b:a4: 32:4b:49:41:e3:5b:4c:6e:c7:98:0d:a4:c8:28:1b:03:86:46: 14:06:23:d5:40:05:55:0e:a2:b3:59:8d:78:06:55:04:1c:99: 9d:fc:88:2a:3d:4c:95:3f:60:a8:9d:34:5b:77:6c:36:d9:0f: 5f:a8:c6:87:cb:71:50:36:fa:c9:70:32:9d:75:01:ce:2d:a9: a4:c2:cc:d7:3e:d5:36:5e:93:59:9d:ce:a2:a7:4f:21:c2:a9: 04:19:63:b6:be:97:81:fe:37:7e:6a:f6:d6:fe:09:21:b0:aa: 37:fa:a8:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371iialOPLFJgLYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk OWI0NmJkZTQtMWQ3Yi00ZjQ4LTk0NzgtNTE2ODc1ODY0NzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXPhuxIB3CLu3iFwXXjIKTKGbdyFhHvlBG61 eLg8tW6UunAj5iWZk9SqJZx26Ws5E7HnKWqrKc3ahKlC83h6uR7gyf4m+mgO9nyA B+SAQsNCSHPoFIofFRcfv2H5hdpFPt92SiagfV7FehQV9GJ37PnKRPoKJ9gqjl9i 4wHwtYwX97E0hMv2KVd1b5Hl7IiWEgXLYD+QZFmuYSJHAk76ZIfx8s8UKxPbNcbg xiYrjbMidNG6A1rSzRoTPxWOlvdND5+aMoXbSzKFUnmZQ1wuxHWyfN4W9aL/LU7w 1EFtyZc5jfvK9WIzBvQTp5CAjYuzXwVQnv2IBubm5aHlZh9aRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlPDE5wg0EVdIgAQblOyGbDYjA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZlZjc0ZmMtOTk0Yy0z NTAyLWIzNTUtNGNjYjE3YzAwZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABl4XGXPjydGRJ39uDeXZwwSMZcUAg0R37x8JRfDZZYXJL3rcfhrOAVx lPq4eyJmeckvaFBYKU/eJfkREoBE1S6BU5DUIXITnDqAiq2xP15GXuimCSiBSncy rb1c/lJ4dGlrM/U3g54Y8dGfqBABWGUF5AY6TkHdtbVPsmMIR3vchDSude4EfGKy SEoZMykLpDJLSUHjW0xux5gNpMgoGwOGRhQGI9VABVUOorNZjXgGVQQcmZ38iCo9 TJU/YKidNFt3bDbZD1+oxofLcVA2+slwMp11Ac4tqaTCzNc+1TZek1mdzqKnTyHC qQQZY7a+l4H+N35q9tb+CSGwqjf6qGE= -----END CERTIFICATE-----Generated at Sat Jun 13 10:10:45 2026 by rpki-client