$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db192c87-71b8-3a46-a574-845bd837a8f4.roa File: db192c87-71b8-3a46-a574-845bd837a8f4.roa (raw, json) Hash identifier: ez0z4e43UTrcUDb820oeuC/61BxJEZBDkf96ClOgM74= Subject key identifier: 34:25:80:E0:1B:BF:62:C4:90:05:E9:C5:B2:EC:59:3C:05:A1:65:AA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E059B390F8C63B82100B59E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db192c87-71b8-3a46-a574-845bd837a8f4.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.31.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9b:39:0f:8c:63:b8:21:00:b5:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=d9820f4d-b7a2-416f-960c-d1a6feda2fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:52:c6:cb:ae:fe:f3:68:d3:59:26:aa:e9:27: 94:16:9c:8e:ab:e3:6a:d8:b1:f8:9d:88:18:3d:f7: 9a:32:d5:6d:fb:b7:bf:0e:a3:2d:75:a7:08:1e:f7: c1:44:30:45:81:13:6a:bf:52:5a:05:c7:bf:88:68: 6f:c9:3f:8b:d2:f0:5d:ac:67:6e:3a:98:25:8c:12: b4:91:db:ab:5c:81:ef:1a:c7:94:70:b9:64:de:7b: b9:6d:95:b8:d7:a6:46:d1:a7:83:6a:39:4a:98:65: d3:41:78:45:db:45:5f:49:be:26:92:c3:d1:46:22: 9f:7b:0e:6d:de:61:9c:97:68:dd:e2:7e:07:ce:c5: eb:78:6e:6e:11:bd:28:3a:a9:01:eb:1e:64:6f:ef: c0:57:c0:d5:fa:4e:76:d7:cc:29:20:6a:8b:84:da: 88:78:39:6b:b7:e7:2d:cf:61:d4:43:b4:b6:45:5b: 17:2a:4a:b9:9a:39:10:b4:ee:4d:5a:4a:ae:8c:a5: 9f:45:d8:10:4d:dc:e5:95:b8:98:b6:83:f5:d7:e2: be:3f:b3:52:d5:8e:32:38:46:f8:9e:28:05:d2:ab: 6c:26:26:86:01:62:73:a3:a7:23:ed:59:8c:6c:be: 16:81:cd:ef:70:e3:37:a6:05:03:58:38:26:e4:0d: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:25:80:E0:1B:BF:62:C4:90:05:E9:C5:B2:EC:59:3C:05:A1:65:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db192c87-71b8-3a46-a574-845bd837a8f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:49:43:fa:c9:db:30:3d:be:a1:c7:34:a5:df:e0:08:9f:63: a3:a9:40:e4:6b:99:47:43:cb:31:1d:6d:ff:ec:00:bd:59:c7: 97:76:e3:8b:00:6b:a9:d5:4c:49:8d:6e:8e:3b:9c:27:70:bd: 5a:a2:10:02:0d:7c:12:80:e6:fe:22:e0:38:81:19:fd:c0:6a: 34:3a:35:4a:ec:bc:1b:6f:28:78:f2:52:37:0f:4d:e4:f8:23: da:84:9a:c8:04:b2:b7:c4:14:f0:4e:cf:51:ab:f3:01:72:22: c0:f5:27:2d:37:bf:4e:8d:12:23:a7:3b:b8:76:be:08:54:79: 21:b0:b9:6f:6b:79:78:66:26:f3:04:5d:6a:f2:45:1a:02:d7: 5c:e2:0b:ba:ea:0d:ec:b1:ae:61:19:d0:cf:22:e7:2b:44:82: 1c:34:43:68:f0:0d:44:72:e8:b1:35:68:29:88:6f:e8:5c:94: b2:4f:4f:7e:ab:c6:17:8c:32:fc:77:0d:19:2a:d2:ca:15:ba: db:f8:71:14:85:d1:f4:01:3c:4c:66:08:93:95:19:1a:97:e5: c7:5a:e7:52:c2:9e:81:6c:cc:e8:19:66:d9:c2:1f:99:a1:d6: b3:2e:fb:0c:2c:69:46:d3:09:e5:d2:14:ac:69:cb:c8:63:b0: 16:b0:39:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FmzkPjGO4IQC1noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZDk4MjBmNGQtYjdhMi00MTZmLTk2MGMtZDFhNmZlZGEyZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVLGy67+82jTWSaq6SeUFpyOq+Nq2LH4nYgY PfeaMtVt+7e/DqMtdacIHvfBRDBFgRNqv1JaBce/iGhvyT+L0vBdrGduOpgljBK0 kdurXIHvGseUcLlk3nu5bZW416ZG0aeDajlKmGXTQXhF20VfSb4mksPRRiKfew5t 3mGcl2jd4n4HzsXreG5uEb0oOqkB6x5kb+/AV8DV+k5218wpIGqLhNqIeDlrt+ct z2HUQ7S2RVsXKkq5mjkQtO5NWkqujKWfRdgQTdzllbiYtoP11+K+P7NS1Y4yOEb4 nigF0qtsJiaGAWJzo6cj7VmMbL4Wgc3vcOM3pgUDWDgm5A0e1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQlgOAbv2LEkAXpxbLsWTwFoWWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGIxOTJjODctNzFiOC0z YTQ2LWE1NzQtODQ1YmQ4MzdhOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxJQ/rJ2zA9vqHHNKXf4AifY6OpQORrmUdDyzEdbf/sAL1Zx5d244sA a6nVTEmNbo47nCdwvVqiEAINfBKA5v4i4DiBGf3AajQ6NUrsvBtvKHjyUjcPTeT4 I9qEmsgEsrfEFPBOz1Gr8wFyIsD1Jy03v06NEiOnO7h2vghUeSGwuW9reXhmJvME XWryRRoC11ziC7rqDeyxrmEZ0M8i5ytEghw0Q2jwDURy6LE1aCmIb+hclLJPT36r xheMMvx3DRkq0soVutv4cRSF0fQBPExmCJOVGRqX5cda51LCnoFszOgZZtnCH5mh 1rMu+wwsaUbTCeXSFKxpy8hjsBawOXM= -----END CERTIFICATE-----Generated at Sat Jun 13 16:28:58 2026 by rpki-client