$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/3a43fc79-e84c-3622-94a8-309df3d0397d.roa File: 3a43fc79-e84c-3622-94a8-309df3d0397d.roa (raw, json) Hash identifier: vgaxMRJm9ZRfGQB8KRNSIfD8Sh5JH3xYguqBNUs1FUw= Subject key identifier: 33:73:51:D6:E3:4B:81:8C:2E:6A:11:7B:29:15:EF:E6:09:C7:6E:71 Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Certificate serial: 010D0C9F4328584DF640A73207F9F821A42E9D00 Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/3a43fc79-e84c-3622-94a8-309df3d0397d.roa Signing time: Tue 26 May 2026 13:00:31 +0000 ROA not before: Tue 26 May 2026 13:00:31 +0000 ROA not after: Mon 24 Aug 2026 13:00:31 +0000 asID: 397325 IP address blocks: 192.31.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:40:a7:32:07:f9:f8:21:a4:2e:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d Validity Not Before: May 26 13:00:31 2026 GMT Not After : Aug 24 13:00:31 2026 GMT Subject: CN=e304ecdf-270e-4812-a9f1-c44d93244871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7d:7e:c0:1f:6f:7d:aa:76:2c:c4:78:58:36: 51:16:31:35:2f:d3:3b:b8:d7:2a:f2:c8:2a:2d:bb: a0:6c:9d:b8:01:57:2d:3c:0d:23:e9:20:f0:70:4b: 27:1f:55:3a:77:82:f1:c1:ba:32:98:da:7e:58:1f: 66:83:55:95:e1:a7:d3:fa:af:ce:a2:13:2d:1d:9c: 3a:21:53:79:50:03:bd:a2:f8:83:77:74:c9:66:60: 3d:8f:13:5c:8f:4c:1b:a8:e5:89:8c:73:38:df:2f: a1:0f:d9:b5:56:10:d1:0f:f3:45:25:55:bd:1f:77: 2c:16:1a:86:a6:85:53:3a:de:76:f2:2f:cc:66:ae: fe:48:2f:b4:b6:77:1a:34:e2:88:af:e1:3c:19:54: 63:0d:b7:ae:47:b6:ee:ce:07:39:ac:a6:cd:2e:15: 4a:16:3e:22:94:17:c7:26:bf:7f:78:2d:af:3c:fb: a1:4a:9c:e9:f8:50:f2:8c:60:cb:80:58:a5:9a:e2: 77:dc:ef:94:7f:94:e7:d5:47:1c:ca:dd:b0:a7:d9: 1e:48:fa:76:28:f9:0c:46:45:56:d2:70:b9:73:fc: 87:36:53:7e:d7:f4:46:6e:65:58:5b:d7:f7:49:15: 15:64:30:94:9d:ec:dc:70:e8:e7:ab:11:f6:51:7b: 42:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:73:51:D6:E3:4B:81:8C:2E:6A:11:7B:29:15:EF:E6:09:C7:6E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/3a43fc79-e84c-3622-94a8-309df3d0397d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl X509v3 Authority Key Identifier: keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer sbgp-ipAddrBlock: critical IPv4: 192.31.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:1f:15:7c:31:7b:a0:c5:7a:f5:ba:5a:a6:e4:4b:1e:e4:c3: 2b:25:b7:26:a2:b5:96:15:2b:d9:fa:94:74:bd:63:e1:1d:44: 71:ab:f3:99:67:06:e2:88:c3:5a:f0:6e:e1:d8:63:c3:6d:91: b9:7b:54:12:90:f3:c3:02:4c:ef:8f:9b:8a:b2:24:d8:dc:fa: a3:a0:47:b4:5e:b8:6c:d9:48:19:0b:26:02:6b:80:74:58:cc: d8:a4:ca:e9:78:1f:41:2a:7c:88:ab:f3:c7:3e:8c:4b:d1:bc: b5:10:53:68:13:a0:b8:a9:9b:48:5c:78:f3:22:31:f8:74:34: ab:9b:eb:c6:15:21:8e:f0:36:9a:53:4e:94:89:58:82:7f:fd: 7f:bd:3f:b9:4c:c1:0f:88:4b:c2:b5:04:ba:8d:2c:77:8d:09: a8:94:25:ee:d5:de:bb:bb:bc:18:08:14:72:79:ce:23:96:90: ce:f2:56:cf:a6:52:d9:b1:1b:67:11:97:f6:40:44:38:73:30: 44:fd:71:6e:78:c1:6e:01:17:be:56:b6:97:d0:be:53:70:5f: 81:e6:da:a0:3f:d1:42:e2:88:1c:43:3a:8d:af:4f:ad:a3:e2: f2:4b:68:f7:63:c2:45:67:41:0f:50:97:22:0d:0e:a6:6c:ab: 41:43:b7:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE32QKcyB/n4IaQunQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzZjBjM2UtNGU0Zi00NGQ0LWFiZTgtYzYxOTVmNmRl NDBkMB4XDTI2MDUyNjEzMDAzMVoXDTI2MDgyNDEzMDAzMVowLzEtMCsGA1UEAxMk ZTMwNGVjZGYtMjcwZS00ODEyLWE5ZjEtYzQ0ZDkzMjQ0ODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX1+wB9vfap2LMR4WDZRFjE1L9M7uNcq8sgq LbugbJ24AVctPA0j6SDwcEsnH1U6d4LxwboymNp+WB9mg1WV4afT+q/OohMtHZw6 IVN5UAO9oviDd3TJZmA9jxNcj0wbqOWJjHM43y+hD9m1VhDRD/NFJVW9H3csFhqG poVTOt528i/MZq7+SC+0tncaNOKIr+E8GVRjDbeuR7buzgc5rKbNLhVKFj4ilBfH Jr9/eC2vPPuhSpzp+FDyjGDLgFilmuJ33O+Uf5Tn1Uccyt2wp9keSPp2KPkMRkVW 0nC5c/yHNlN+1/RGbmVYW9f3SRUVZDCUnezccOjnqxH2UXtCXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNzUdbjS4GMLmoReykV7+YJx25xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNm MGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5NWY2ZGU0MGQvM2E0M2ZjNzktZTg0Yy0z NjIyLTk0YTgtMzA5ZGYzZDAzOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWMzZjBjM2UtNGU0Zi00NGQ0LWFi ZTgtYzYxOTVmNmRlNDBkLzljM2YwYzNlLTRlNGYtNDRkNC1hYmU4LWM2MTk1ZjZk ZTQwZC5jcmwwHwYDVR0jBBgwFoAUZrwQ1kmEfgnM0VC1lOYfW2D8i8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85YzNmMGMzZS00ZTRmLTQ0ZDQtYWJlOC1jNjE5 NWY2ZGU0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAfFXwxe6DFevW6WqbkSx7kwysltyaitZYVK9n6lHS9Y+EdRHGr85ln BuKIw1rwbuHYY8Ntkbl7VBKQ88MCTO+Pm4qyJNjc+qOgR7ReuGzZSBkLJgJrgHRY zNikyul4H0EqfIir88c+jEvRvLUQU2gToLipm0hcePMiMfh0NKub68YVIY7wNppT TpSJWIJ//X+9P7lMwQ+IS8K1BLqNLHeNCaiUJe7V3ru7vBgIFHJ5ziOWkM7yVs+m UtmxG2cRl/ZARDhzMET9cW54wW4BF75WtpfQvlNwX4Hm2qA/0ULiiBxDOo2vT62j 4vJLaPdjwkVnQQ9QlyINDqZsq0FDt1o= -----END CERTIFICATE-----Generated at Sat Jun 13 13:33:01 2026 by rpki-client