$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f517e84b-69d0-3448-9570-af536e4d8faf.roa File: f517e84b-69d0-3448-9570-af536e4d8faf.roa (raw, json) Hash identifier: gXpc8QB5OpDE9xpq9MtIe6ATOBWWt0TzpNyZbhjbedo= Subject key identifier: AF:FA:E5:A9:0E:E7:1C:91:5A:FC:57:DB:10:93:0E:4F:36:F7:0E:E4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BABFCFB0F79F8EDF309AE5400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f517e84b-69d0-3448-9570-af536e4d8faf.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 173.31.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fc:fb:0f:79:f8:ed:f3:09:ae:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=c6a46dfb-4e8e-4559-9180-806aff7dcd7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:45:16:b9:f2:7d:a9:42:ef:9b:7b:1f:27:e3: 18:ee:4c:c6:4b:b0:2d:de:02:9f:a9:f8:bc:31:26: 55:38:74:84:30:1b:88:8f:ba:c9:7f:bc:68:6b:87: f3:e4:e9:9a:6e:bf:d7:ab:6b:d0:1e:32:55:85:10: bd:e3:e7:ab:6b:a0:f8:0c:2a:db:0e:7c:64:23:b1: 0b:c9:f2:34:06:29:b5:f9:79:89:10:61:53:fe:0d: 50:c2:11:e5:3d:4b:24:cd:79:2c:df:36:96:2c:97: e1:c6:3f:76:8d:0a:d0:d5:c1:25:9c:59:9c:bb:6e: b1:05:81:56:71:02:4f:4f:e0:3d:cf:f9:75:52:37: c3:7c:81:92:a0:c3:ee:2c:1a:03:b9:99:9c:2a:1f: 86:93:61:e0:09:c0:e6:9a:8b:0b:5d:c6:88:16:67: 16:0c:cc:d5:a3:3e:06:d0:5c:36:a9:36:57:7a:8e: ad:52:a3:5d:1f:e4:3c:88:9d:db:89:a4:5b:32:2f: 63:11:7c:d8:a7:24:dd:4a:49:86:8b:0a:2e:c2:38: 02:8e:6a:26:48:41:41:33:c4:d7:f4:8b:8a:71:af: d7:e0:c7:9c:aa:8e:19:7c:84:a7:23:a8:8e:c3:7c: 02:bc:a2:40:8f:1c:22:67:d0:b2:c0:44:26:d3:28: 08:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FA:E5:A9:0E:E7:1C:91:5A:FC:57:DB:10:93:0E:4F:36:F7:0E:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f517e84b-69d0-3448-9570-af536e4d8faf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e1:f2:0d:c9:7b:ff:89:be:87:73:2c:61:31:18:61:28:04: 41:45:98:21:c6:4f:dd:02:d4:eb:5b:f3:76:b8:11:02:3b:24: 4a:f0:29:b4:ca:8f:c7:0b:11:54:f0:e8:98:ea:e9:43:34:a1: 85:8d:d3:22:56:89:ce:39:39:15:b8:13:4a:0f:c6:cb:9a:5b: 8c:c8:c9:a4:a4:45:d1:67:12:71:96:33:51:57:29:37:56:57: 88:f1:c6:a4:71:fe:00:15:e6:40:55:c3:8b:e8:7a:4b:27:63: 11:a1:c7:b3:cf:c1:b1:64:c0:dd:b3:7c:16:fd:1f:78:a6:19: 17:16:60:f5:61:67:27:6d:86:98:ae:d5:fe:6e:65:ed:f6:72: 0d:75:88:3f:c1:ff:b4:a5:6c:43:17:e8:61:99:ba:24:a7:06: 7d:09:39:c0:9f:28:82:d0:01:2e:7e:91:46:70:77:99:33:aa: 30:69:2f:a9:6d:df:65:4e:7c:40:5a:f0:69:5e:e3:01:3a:3e: 11:a6:ec:5c:a2:9a:02:c7:55:07:d5:da:48:9b:00:a2:b3:de: 4c:d1:ec:1b:9e:c4:a0:9e:28:b7:11:fa:52:76:80:f2:47:60: 42:2f:03:9a:3f:29:12:31:59:01:33:98:f0:3e:45:38:92:95: 23:65:25:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/PsPefjt8wmuVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YzZhNDZkZmItNGU4ZS00NTU5LTkxODAtODA2YWZmN2RjZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kUWufJ9qULvm3sfJ+MY7kzGS7At3gKfqfi8 MSZVOHSEMBuIj7rJf7xoa4fz5Omabr/Xq2vQHjJVhRC94+era6D4DCrbDnxkI7EL yfI0Bim1+XmJEGFT/g1QwhHlPUskzXks3zaWLJfhxj92jQrQ1cElnFmcu26xBYFW cQJPT+A9z/l1UjfDfIGSoMPuLBoDuZmcKh+Gk2HgCcDmmosLXcaIFmcWDMzVoz4G 0Fw2qTZXeo6tUqNdH+Q8iJ3biaRbMi9jEXzYpyTdSkmGiwouwjgCjmomSEFBM8TX 9IuKca/X4Mecqo4ZfISnI6iOw3wCvKJAjxwiZ9CywEQm0ygIpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/65akO5xyRWvxX2xCTDk829w7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjUxN2U4NGItNjlkMC0z NDQ4LTk1NzAtYWY1MzZlNGQ4ZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPh8g3Je/+JvodzLGExGGEoBEFFmCHGT90C1Otb83a4EQI7JErwKbTK j8cLEVTw6Jjq6UM0oYWN0yJWic45ORW4E0oPxsuaW4zIyaSkRdFnEnGWM1FXKTdW V4jxxqRx/gAV5kBVw4voeksnYxGhx7PPwbFkwN2zfBb9H3imGRcWYPVhZydthpiu 1f5uZe32cg11iD/B/7SlbEMX6GGZuiSnBn0JOcCfKILQAS5+kUZwd5kzqjBpL6lt 32VOfEBa8Gle4wE6PhGm7FyimgLHVQfV2kibAKKz3kzR7BuexKCeKLcR+lJ2gPJH YEIvA5o/KRIxWQEzmPA+RTiSlSNlJRo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:36:15 2025 by rpki-client