$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa File: bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa (raw, json) Hash identifier: eebNd0cLoCYqJmJHDnV4KGRsRVyevzPd12xyZEaXl18= Subject key identifier: A5:E1:6E:A1:17:DB:4D:E6:58:EE:03:FD:60:34:A2:48:14:BF:4C:77 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A843923A064ED953D40E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.31.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:43:92:3a:06:4e:d9:53:d4:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=060e735a-a1f6-4088-abda-6c34df42fac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:df:01:8b:0b:d6:a7:4b:63:bb:48:2c:c8:c9: ba:9d:54:0c:17:48:66:6a:3a:e4:c7:8b:45:ed:bf: 4d:7a:3a:12:ff:3f:4a:b1:94:3a:82:31:b4:7c:eb: 51:44:20:0f:9d:94:c7:3a:73:80:87:10:0a:48:fc: 80:8e:75:cb:a2:1c:7a:ab:3b:09:d1:85:44:55:ff: ad:2c:bd:bf:04:19:90:62:94:d1:4b:f8:40:2c:8a: da:ff:ed:f7:85:fd:df:c3:97:4c:dc:8e:48:f0:53: a8:34:6c:51:2d:07:27:a1:ba:66:7f:ba:6e:2c:f6: 95:6e:ee:f9:7a:0b:85:eb:84:a1:ea:2a:6f:6c:60: 4a:ea:38:bb:be:48:d3:cc:93:89:da:76:60:6b:76: 5c:9f:48:75:d0:b6:00:8e:5d:9e:06:ac:99:71:67: 34:bd:e6:04:48:c2:ce:6d:34:cf:15:e2:18:8c:21: e7:20:92:a2:47:d6:60:2b:4b:e1:0d:f4:a7:69:33: 75:4e:a5:14:56:7f:dd:ce:2b:64:0e:01:50:37:6b: 7a:e6:22:65:90:68:fb:ce:7e:e6:23:43:ee:2f:31: bf:44:d6:00:8a:65:ac:a4:f7:e7:cf:ba:af:4b:cc: fc:7c:1d:64:99:0c:12:fb:4d:a5:1e:3a:63:96:5c: 41:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E1:6E:A1:17:DB:4D:E6:58:EE:03:FD:60:34:A2:48:14:BF:4C:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bff7c25d-0e38-39db-abf6-d0f4c6aeeb51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:da:52:c4:b1:62:92:d6:38:87:64:74:7d:81:44:5a:19:63: df:4f:36:16:59:fe:f5:06:13:f6:90:3c:28:13:7d:f2:45:16: 09:eb:10:e1:3c:c3:46:1b:0f:8f:e1:ac:f4:e5:ec:bf:64:96: ed:55:a3:81:07:aa:9a:cd:92:12:76:ee:ce:83:31:b2:e7:fc: c4:1e:97:3b:7c:ec:02:04:a9:b9:96:b6:a3:97:1b:2d:c6:ae: 22:8c:6c:70:03:ab:ad:64:73:76:69:ec:8a:68:d9:90:76:78: e1:c8:48:5c:b2:70:60:a9:4d:de:12:14:05:2b:eb:7f:41:51: a4:e3:49:cf:28:c3:a2:b7:21:33:b8:2e:50:4f:1d:32:54:98: 89:6a:c2:25:59:23:1e:77:0d:05:db:42:93:bb:24:c5:6f:1c: 25:7b:b5:ee:ea:fa:7c:7a:51:4b:c1:bc:7c:af:e0:19:55:0d: 34:e0:e3:7d:68:a2:74:db:d2:52:38:50:c0:3a:2b:fd:51:50: 3e:c8:a4:da:dc:76:d0:54:bb:39:ff:69:5d:d9:51:5f:9a:ab: 8b:cb:36:f0:c9:5a:97:a5:1e:af:13:5c:4d:11:62:dc:ba:78: f9:19:99:57:b9:d7:e0:d9:ce:0a:66:0a:c0:23:07:23:c9:39: dd:1e:10:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqEOSOgZO2VPUDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MDYwZTczNWEtYTFmNi00MDg4LWFiZGEtNmMzNGRmNDJmYWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN8BiwvWp0tju0gsyMm6nVQMF0hmajrkx4tF 7b9NejoS/z9KsZQ6gjG0fOtRRCAPnZTHOnOAhxAKSPyAjnXLohx6qzsJ0YVEVf+t LL2/BBmQYpTRS/hALIra/+33hf3fw5dM3I5I8FOoNGxRLQcnobpmf7puLPaVbu75 eguF64Sh6ipvbGBK6ji7vkjTzJOJ2nZga3Zcn0h10LYAjl2eBqyZcWc0veYESMLO bTTPFeIYjCHnIJKiR9ZgK0vhDfSnaTN1TqUUVn/dzitkDgFQN2t65iJlkGj7zn7m I0PuLzG/RNYAimWspPfnz7qvS8z8fB1kmQwS+02lHjpjllxBAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXhbqEX203mWO4D/WA0okgUv0x3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZmN2MyNWQtMGUzOC0z OWRiLWFiZjYtZDBmNGM2YWVlYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR86MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPaUsSxYpLWOIdkdH2BRFoZY99PNhZZ/vUGE/aQPCgTffJFFgnrEOE8 w0YbD4/hrPTl7L9klu1Vo4EHqprNkhJ27s6DMbLn/MQelzt87AIEqbmWtqOXGy3G riKMbHADq61kc3Zp7Ipo2ZB2eOHISFyycGCpTd4SFAUr639BUaTjSc8ow6K3ITO4 LlBPHTJUmIlqwiVZIx53DQXbQpO7JMVvHCV7te7q+nx6UUvBvHyv4BlVDTTg431o onTb0lI4UMA6K/1RUD7IpNrcdtBUuzn/aV3ZUV+aq4vLNvDJWpelHq8TXE0RYty6 ePkZmVe51+DZzgpmCsAjByPJOd0eEFg= -----END CERTIFICATE-----Generated at Sun Mar 1 23:04:35 2026 by rpki-client