$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f85c0a7f-c5b9-3787-8857-f631c0f43879.roa File: f85c0a7f-c5b9-3787-8857-f631c0f43879.roa (raw, json) Hash identifier: UekbO5d/gvM1DCVdQi3B9KAunmhWYu8TAz+KWC9Cem0= Subject key identifier: F1:BC:74:FF:3E:45:2E:E1:DD:83:0D:DF:28:F7:BC:BF:5E:17:DE:92 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A69D85A6AC4B4CB952DC40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f85c0a7f-c5b9-3787-8857-f631c0f43879.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 173.31.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:9d:85:a6:ac:4b:4c:b9:52:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=0cc5941a-8d31-43ad-bc0a-2fe21f8a64e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4b:1e:e9:b4:7f:14:06:30:63:8b:bc:bc:ba: fa:52:06:63:61:80:31:d3:c6:99:55:02:c7:20:34: 8c:08:59:a2:e5:d6:3f:41:98:6a:7a:5a:69:fe:f7: 1a:ca:ae:9d:7f:85:d3:98:c5:91:04:49:9a:27:f6: 18:53:0f:ae:50:4a:59:1c:6d:f7:9a:02:1b:5a:8f: df:24:0a:07:ce:02:cf:14:69:08:4c:7d:d2:52:5d: 6e:72:4b:9a:b5:93:f6:ec:9a:61:ce:28:36:f9:86: 17:79:b7:ba:de:3c:e4:6e:e0:71:2c:de:d8:4f:92: 7a:5a:9a:18:f2:4e:84:16:40:43:70:97:48:59:3a: 20:d3:e9:15:6e:ac:d2:4b:b9:e7:50:f5:af:6f:85: 39:c8:67:ec:af:ab:80:3c:2f:8f:95:73:4f:24:3b: a4:dc:e4:47:e1:d1:de:1f:da:91:97:49:9a:cd:37: a5:19:a0:cc:84:0b:dd:b5:bd:e0:52:43:ae:82:8c: df:bc:46:42:2e:75:f3:a8:6e:d2:95:f8:60:76:08: da:68:86:77:75:76:5c:ce:6a:cb:78:fa:13:d7:2d: cb:ed:4d:6f:93:8b:c5:cd:1b:73:63:2b:dd:52:b1: d1:f9:dd:e7:89:99:90:33:49:f1:7c:b7:86:91:97: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BC:74:FF:3E:45:2E:E1:DD:83:0D:DF:28:F7:BC:BF:5E:17:DE:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f85c0a7f-c5b9-3787-8857-f631c0f43879.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2d:ed:5f:d5:c0:a1:ab:cb:9e:4e:a2:2b:54:b3:81:a0:e0: 32:ed:12:c7:65:d3:fe:c1:ee:6e:ac:54:e4:42:c6:95:0b:f8: 4c:b7:fd:3c:76:72:8e:32:ac:7b:d6:97:52:2d:4c:15:2a:fb: 81:52:c8:b3:34:db:b8:b4:9e:c9:54:b3:fb:59:63:01:d3:e6: 62:2f:ca:5c:af:4a:d3:1e:94:25:f2:e2:1a:dc:81:2c:a5:23: bf:ad:a0:f1:2f:a3:bc:0e:5b:45:94:19:0b:8a:1e:71:69:f4: d3:22:5e:34:2a:3d:a4:b1:18:0c:12:16:bb:bb:49:e6:b5:b5: f7:a4:59:3d:85:f7:e6:e6:8c:bd:0d:86:cb:81:17:be:d4:3b: b4:68:29:9d:17:20:ff:de:7a:c3:6a:4e:eb:41:2f:e3:af:e1: 57:1b:ed:c7:e4:fd:ac:ef:01:52:2d:ff:33:48:3d:6f:9f:35: 12:a5:32:43:7c:5d:68:c4:7f:79:2e:a0:4b:d5:9f:45:03:0e: eb:2f:3a:61:8d:7e:f7:9b:86:09:a2:6c:7c:33:d4:94:1a:c7: 3f:5c:a1:ad:96:2a:c5:16:55:ba:9b:bf:0f:9b:7c:2e:3d:c3: 31:5b:62:9b:7f:1d:ad:d7:e7:cb:28:c5:0a:71:be:70:00:78: 98:c2:d7:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpp2FpqxLTLlS3EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MGNjNTk0MWEtOGQzMS00M2FkLWJjMGEtMmZlMjFmOGE2NGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUse6bR/FAYwY4u8vLr6UgZjYYAx08aZVQLH IDSMCFmi5dY/QZhqelpp/vcayq6df4XTmMWRBEmaJ/YYUw+uUEpZHG33mgIbWo/f JAoHzgLPFGkITH3SUl1uckuatZP27Jphzig2+YYXebe63jzkbuBxLN7YT5J6WpoY 8k6EFkBDcJdIWTog0+kVbqzSS7nnUPWvb4U5yGfsr6uAPC+PlXNPJDuk3ORH4dHe H9qRl0mazTelGaDMhAvdtb3gUkOugozfvEZCLnXzqG7SlfhgdgjaaIZ3dXZczmrL ePoT1y3L7U1vk4vFzRtzYyvdUrHR+d3niZmQM0nxfLeGkZfWNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPG8dP8+RS7h3YMN3yj3vL9eF96SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjg1YzBhN2YtYzViOS0z Nzg3LTg4NTctZjYzMWMwZjQzODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0t7V/VwKGry55OoitUs4Gg4DLtEsdl0/7B7m6sVORCxpUL+Ey3/Tx2 co4yrHvWl1ItTBUq+4FSyLM027i0nslUs/tZYwHT5mIvylyvStMelCXy4hrcgSyl I7+toPEvo7wOW0WUGQuKHnFp9NMiXjQqPaSxGAwSFru7Sea1tfekWT2F9+bmjL0N hsuBF77UO7RoKZ0XIP/eesNqTutBL+Ov4Vcb7cfk/azvAVIt/zNIPW+fNRKlMkN8 XWjEf3kuoEvVn0UDDusvOmGNfvebhgmibHwz1JQaxz9coa2WKsUWVbqbvw+bfC49 wzFbYpt/Ha3X58soxQpxvnAAeJjC1zk= -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:34 2026 by rpki-client