$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3af5eab2-e7ca-301c-a971-b473e8a3577f.roa File: 3af5eab2-e7ca-301c-a971-b473e8a3577f.roa (raw, json) Hash identifier: WiW1SJaWYBd3IZill1U6uyWTL928lZXxpsZkPckegxk= Subject key identifier: 61:0F:D0:60:85:20:DC:42:D5:59:FC:D8:9B:8F:FF:35:EF:9E:A1:EC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5A243AF18981C0B4C3BB22AA Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3af5eab2-e7ca-301c-a971-b473e8a3577f.roa Signing time: Tue 31 Mar 2026 14:57:20 +0000 ROA not before: Tue 31 Mar 2026 14:57:20 +0000 ROA not after: Mon 29 Jun 2026 14:57:20 +0000 asID: 40647 IP address blocks: 192.31.80.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5a:24:3a:f1:89:81:c0:b4:c3:bb:22:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 14:57:20 2026 GMT Not After : Jun 29 14:57:20 2026 GMT Subject: CN=232b030c-cedb-4c47-82a5-28570b42b1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:24:74:e3:de:2e:7b:a0:b9:10:81:3c:49:c2: e5:d0:85:3f:f2:af:b1:15:7d:8b:51:18:9c:b4:d1: 1d:87:48:96:6f:35:8a:d8:5f:8c:9e:fc:d6:36:4e: aa:83:16:c4:14:c0:b4:88:f0:05:4c:d4:9b:76:be: 09:c9:a5:3d:f4:60:40:8b:68:f0:86:8e:1b:db:4d: 02:d3:3f:8b:57:77:38:15:d6:94:3a:48:88:84:c2: 16:24:f8:94:7a:38:58:12:23:c9:6b:b3:3b:56:98: 03:ca:60:37:80:3a:ee:e0:04:8d:d6:b4:37:d1:d2: f9:5f:26:83:06:37:e3:d3:6f:e6:6b:06:19:4d:54: fb:0e:30:ba:95:3c:d9:af:13:71:5f:7d:0d:cf:80: 98:f9:60:36:c9:01:c2:a3:4c:03:e8:d8:6c:06:c9: 68:1f:de:00:8b:f6:f0:f5:e4:93:91:ab:d7:f5:8e: 2e:c4:2d:99:12:dc:3d:6b:36:25:9b:99:03:1c:41: 35:e0:ed:d7:f1:d7:be:cf:ed:cd:f9:43:27:b6:75: 2d:7d:54:12:70:40:eb:2a:dd:8d:41:c6:ef:9a:78: 36:2f:7e:d5:23:85:e6:4b:90:0a:74:46:98:b0:92: 7b:c6:d8:1a:c0:79:f6:57:de:2f:74:b7:05:cd:ae: 62:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0F:D0:60:85:20:DC:42:D5:59:FC:D8:9B:8F:FF:35:EF:9E:A1:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3af5eab2-e7ca-301c-a971-b473e8a3577f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.31.80.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:df:dd:4b:b9:14:b3:38:31:5b:2e:bc:f9:1d:e8:31:a2:5b: 2d:01:8c:db:5f:30:f4:87:06:98:a6:f2:76:b7:87:fc:a0:16: 07:e9:5b:4b:e4:52:68:b4:a9:6f:89:72:64:24:a9:ad:6e:7d: 1c:a4:6b:8e:50:da:67:64:76:c8:4a:d9:3e:00:0c:58:7f:92: 12:46:f5:90:a5:66:59:69:95:c6:25:80:b4:7b:9a:cb:d9:f5: 95:5c:38:89:01:79:1d:41:b2:ae:0e:a0:eb:65:01:2e:38:3c: cf:21:e9:65:29:e4:9a:c2:44:10:7b:7c:3a:12:8d:ab:c1:cc: c3:7e:00:1b:5e:2c:16:f4:6b:d1:aa:85:db:9e:00:a6:91:b3: c7:72:2d:c0:c5:0d:bc:0d:a4:51:5a:d2:67:6f:47:70:23:fa: fb:5c:fb:bc:08:43:dd:ff:64:7a:46:c6:ab:2f:6c:15:28:a1: b6:31:ba:4c:9a:11:97:07:02:73:98:2a:b7:e6:c8:ff:ab:01: 3c:2e:69:6e:f4:60:81:43:d1:08:ed:99:22:35:ca:1e:f8:7c: cf:57:d4:ab:3f:39:2b:b2:84:b0:0d:ba:cf:9c:da:ba:5c:3a: ea:e3:b9:33:85:41:9d:18:39:4a:c6:c0:60:cd:b3:6c:00:9b: 61:35:10:91 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1aJDrxiYHAtMO7IqowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTE0NTcyMFoXDTI2MDYyOTE0NTcyMFowLzEtMCsGA1UEAxMk MjMyYjAzMGMtY2VkYi00YzQ3LTgyYTUtMjg1NzBiNDJiMWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCR0494ue6C5EIE8ScLl0IU/8q+xFX2LURic tNEdh0iWbzWK2F+MnvzWNk6qgxbEFMC0iPAFTNSbdr4JyaU99GBAi2jwho4b200C 0z+LV3c4FdaUOkiIhMIWJPiUejhYEiPJa7M7VpgDymA3gDru4ASN1rQ30dL5XyaD Bjfj02/mawYZTVT7DjC6lTzZrxNxX30Nz4CY+WA2yQHCo0wD6NhsBsloH94Ai/bw 9eSTkavX9Y4uxC2ZEtw9azYlm5kDHEE14O3X8de+z+3N+UMntnUtfVQScEDrKt2N Qcbvmng2L37VI4XmS5AKdEaYsJJ7xtgawHn2V94vdLcFza5i1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGEP0GCFINxC1Vn82JuP/zXvnqHsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2FmNWVhYjItZTdjYS0z MDFjLWE5NzEtYjQ3M2U4YTM1NzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB9QHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZ391LuRSzODFbLrz5HegxolstAYzbXzD0hwaYpvJ2t4f8oBYH6VtL 5FJotKlviXJkJKmtbn0cpGuOUNpnZHbIStk+AAxYf5ISRvWQpWZZaZXGJYC0e5rL 2fWVXDiJAXkdQbKuDqDrZQEuODzPIellKeSawkQQe3w6Eo2rwczDfgAbXiwW9GvR qoXbngCmkbPHci3AxQ28DaRRWtJnb0dwI/r7XPu8CEPd/2R6RsarL2wVKKG2MbpM mhGXBwJzmCq35sj/qwE8Lmlu9GCBQ9EI7ZkiNcoe+HzPV9SrPzkrsoSwDbrPnNq6 XDrq47kzhUGdGDlKxsBgzbNsAJthNRCR -----END CERTIFICATE-----Generated at Fri Apr 17 01:19:48 2026 by rpki-client