$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f517e84b-69d0-3448-9570-af536e4d8faf.roa File: f517e84b-69d0-3448-9570-af536e4d8faf.roa (raw, json) Hash identifier: bJDD8it+4Cs65mZsH5kLu00TjLI2KYNXLhFKpRrBvSQ= Subject key identifier: 9A:C9:36:80:C9:99:A7:33:5F:15:AE:45:23:C5:1B:8B:A7:8C:12:FB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EEEB74DE8705834EC017B0FC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f517e84b-69d0-3448-9570-af536e4d8faf.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 30036 IP address blocks: 173.31.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:4d:e8:70:58:34:ec:01:7b:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=12eac8a1-51b2-4056-8996-4418926cfda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cf:70:93:ee:a9:0a:1c:8f:9e:7d:d1:32:bd: d4:74:e9:0e:38:11:e3:27:14:39:4e:0e:af:4d:ef: 72:47:15:3a:01:a1:25:09:8e:a5:42:37:96:a9:a8: 6e:66:51:a9:13:90:56:e9:f7:38:33:3f:15:36:47: 31:a8:6a:f9:73:90:f2:7e:b0:87:18:2b:24:0d:87: 41:f1:d2:b3:5c:f8:18:20:c7:84:44:a3:29:3a:c8: e8:15:72:f5:dd:c9:58:ce:0a:66:b0:ad:70:b5:da: 38:57:58:08:61:19:d7:f8:78:c8:68:40:b0:49:98: 7b:6c:07:44:01:db:34:cf:3f:03:aa:26:f6:f2:27: 06:67:b2:33:ff:18:d4:5e:bb:cf:5c:34:9e:fc:86: e5:6b:b4:9c:b4:f8:99:fa:6c:11:34:a8:2d:79:8c: 6a:51:24:c6:15:20:27:8e:14:d0:e7:f1:32:a7:04: 0a:40:16:2a:17:b0:94:ab:f2:07:c6:e0:b5:16:f2: 49:f8:0b:0c:8e:ad:32:24:f7:1a:17:ca:31:f1:7a: b8:e8:b3:49:a8:38:3a:0b:1a:dd:c7:13:af:02:73: ae:e4:d3:4a:84:e1:53:e9:c2:49:f9:80:38:a0:59: 4e:30:8a:8a:39:0b:27:8b:3e:ce:5c:4c:59:31:a8: 7d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C9:36:80:C9:99:A7:33:5F:15:AE:45:23:C5:1B:8B:A7:8C:12:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f517e84b-69d0-3448-9570-af536e4d8faf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:18:8c:df:d8:84:a4:75:3b:df:15:ae:10:3a:6b:63:8f:56: e6:9e:d3:a4:26:0a:b0:db:8f:03:ae:98:d9:e4:1a:04:2c:a4: d2:39:40:be:57:08:06:26:19:4f:c7:aa:b5:1a:9c:86:dc:c0: 12:6d:1c:d1:02:ec:16:26:46:8f:3e:c8:a7:4d:56:e6:9d:51: 8b:28:9c:40:de:04:eb:0a:b0:7b:f2:f4:f3:9e:16:9e:52:eb: 68:2a:af:de:ae:7e:c6:40:97:49:f5:a6:c7:72:45:c9:7e:6d: 90:2d:3c:4e:51:11:d0:b4:01:80:11:f5:5f:cf:1a:0a:fc:48: 40:d0:fd:c8:b2:2f:fa:e8:48:c9:ce:b2:cd:22:bc:da:1b:16: 08:6f:c1:1f:df:98:4e:b1:43:d2:8d:b7:ed:a7:45:11:3d:9e: 3d:a7:7d:a9:85:0d:47:11:e2:af:2b:08:51:82:c2:3a:e1:48: 01:2a:e9:bd:5f:88:e8:1f:9c:b5:42:06:c6:8e:86:36:c8:b7: ce:8d:14:bb:ae:d3:c3:10:19:f0:9a:fe:ea:c8:d9:44:54:2f: e1:1c:40:d8:6a:c3:db:82:e8:48:10:51:44:46:17:f2:a8:2e: fe:22:a9:ef:5f:9a:79:26:33:61:0f:b1:c1:1f:50:4f:d9:13: 54:eb:37:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut03ocFg07AF7D8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MTJlYWM4YTEtNTFiMi00MDU2LTg5OTYtNDQxODkyNmNmZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis9wk+6pChyPnn3RMr3UdOkOOBHjJxQ5Tg6v Te9yRxU6AaElCY6lQjeWqahuZlGpE5BW6fc4Mz8VNkcxqGr5c5DyfrCHGCskDYdB 8dKzXPgYIMeERKMpOsjoFXL13clYzgpmsK1wtdo4V1gIYRnX+HjIaECwSZh7bAdE Ads0zz8Dqib28icGZ7Iz/xjUXrvPXDSe/Ibla7SctPiZ+mwRNKgteYxqUSTGFSAn jhTQ5/EypwQKQBYqF7CUq/IHxuC1FvJJ+AsMjq0yJPcaF8ox8Xq46LNJqDg6Cxrd xxOvAnOu5NNKhOFT6cJJ+YA4oFlOMIqKOQsniz7OXExZMah9VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrJNoDJmaczXxWuRSPFG4unjBL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjUxN2U4NGItNjlkMC0z NDQ4LTk1NzAtYWY1MzZlNGQ4ZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUYjN/YhKR1O98VrhA6a2OPVuae06QmCrDbjwOumNnkGgQspNI5QL5X CAYmGU/HqrUanIbcwBJtHNEC7BYmRo8+yKdNVuadUYsonEDeBOsKsHvy9POeFp5S 62gqr96ufsZAl0n1psdyRcl+bZAtPE5REdC0AYAR9V/PGgr8SEDQ/ciyL/roSMnO ss0ivNobFghvwR/fmE6xQ9KNt+2nRRE9nj2nfamFDUcR4q8rCFGCwjrhSAEq6b1f iOgfnLVCBsaOhjbIt86NFLuu08MQGfCa/urI2URUL+EcQNhqw9uC6EgQUURGF/Ko Lv4iqe9fmnkmM2EPscEfUE/ZE1TrN+0= -----END CERTIFICATE-----Generated at Tue Sep 29 01:26:08 2026 by rpki-client