$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43017d0f-fbef-3f20-a495-1465a5666ee2.roa File: 43017d0f-fbef-3f20-a495-1465a5666ee2.roa (raw, json) Hash identifier: eW+05/GB/T2yiPEEnVkCUFeO4NtzpRoywyANb4D0F28= Subject key identifier: E6:13:28:F2:EC:56:83:80:71:E9:85:96:77:45:7E:2F:C4:C0:AA:75 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E593A0530333942DB0251D780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43017d0f-fbef-3f20-a495-1465a5666ee2.roa Signing time: Tue 30 Jun 2026 23:52:22 +0000 ROA not before: Tue 30 Jun 2026 23:52:22 +0000 ROA not after: Mon 28 Sep 2026 23:52:22 +0000 asID: 19905 IP address blocks: 173.31.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:59:3a:05:30:33:39:42:db:02:51:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 30 23:52:22 2026 GMT Not After : Sep 28 23:52:22 2026 GMT Subject: CN=efa89b67-146a-40a8-a7fc-fea087900633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b6:27:9e:3d:73:78:15:81:b0:c0:6b:c9:dd: 93:6b:71:7a:b2:2f:49:3b:e9:53:5a:f8:e8:1c:a2: 80:5b:bd:b1:b6:f5:3f:06:29:fe:d8:74:4c:b8:ef: 7c:1a:ea:be:64:10:f1:90:e2:02:0f:b1:0a:dc:c9: 4c:35:a9:3e:e8:5c:00:96:02:58:16:34:45:61:3a: d6:b4:dd:e6:69:fb:6e:35:dd:15:85:9a:b8:fe:4f: 42:64:bb:f2:a7:a3:54:bc:c0:23:f6:2a:cf:40:68: 59:51:07:a4:f4:06:ae:b2:88:af:ea:a1:9c:e6:a0: e3:59:99:f2:2e:a5:cb:d0:6e:b6:68:38:1b:17:00: 1f:20:80:f3:86:3d:d8:4a:c2:2e:2c:b1:5a:f6:12: 8a:64:68:48:3e:1a:54:a2:4c:5c:78:0f:ff:74:d1: 2b:0a:7d:f4:ba:d2:01:02:19:99:43:ab:fb:a4:23: 70:08:2c:7e:fa:76:4a:49:f2:83:eb:f9:88:19:b8: 3f:8f:f0:31:fe:9b:6c:24:90:cf:b6:9c:8f:3c:b6: 16:00:49:79:47:68:3e:ee:ae:66:28:01:92:5a:61: 85:df:7d:4c:23:c1:02:bb:04:7a:46:a9:62:d0:1b: e9:3b:de:1e:2f:87:37:3a:0c:6e:c4:39:7e:a3:68: c2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:13:28:F2:EC:56:83:80:71:E9:85:96:77:45:7E:2F:C4:C0:AA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43017d0f-fbef-3f20-a495-1465a5666ee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:df:41:a0:d1:22:bc:a4:a2:ca:94:ed:94:f0:50:8a:09:e3: aa:7b:21:8a:a6:aa:88:a6:c8:89:ee:6f:09:69:1c:18:b0:c9: af:cc:b6:a3:0f:43:d4:37:2e:97:12:1d:71:21:0e:1d:0b:4b: 82:33:18:dc:9f:d0:3e:64:86:61:6f:06:4c:40:1b:39:23:de: a1:01:55:e5:a1:6a:f8:73:89:b2:0d:3e:bf:7c:ff:91:b3:46: 70:21:ff:29:b6:e7:9c:e9:39:fa:42:26:a2:73:f8:13:a7:b8: 13:5d:52:91:dd:4e:41:48:e2:c3:23:36:3c:4a:ce:cb:e3:13: c8:a6:77:58:6c:4b:35:2f:79:8d:b9:04:56:89:34:2b:e6:dc: 69:13:e5:90:ce:08:55:de:4c:14:1b:97:61:eb:b3:e9:41:98: 04:c9:35:88:f2:17:77:d1:b2:76:e7:9e:2a:0f:8b:f2:d4:16: 2a:6b:cf:70:47:67:7f:b8:aa:23:29:74:5e:c1:e1:4b:c2:ea: 1d:0c:d4:f6:62:6b:b9:3e:ed:c6:62:58:3c:72:e6:06:ee:ca: 37:b5:4a:59:53:1c:b3:e8:b1:3a:c0:bf:ee:21:2f:d1:8d:01: 64:90:b4:04:96:0d:c7:6e:00:c1:0c:f2:33:a0:62:cd:ab:4a: 6e:2b:d8:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5ZOgUwMzlC2wJR14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYzMDIzNTIyMloXDTI2MDkyODIzNTIyMlowLzEtMCsGA1UEAxMk ZWZhODliNjctMTQ2YS00MGE4LWE3ZmMtZmVhMDg3OTAwNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7Ynnj1zeBWBsMBryd2Ta3F6si9JO+lTWvjo HKKAW72xtvU/Bin+2HRMuO98Guq+ZBDxkOICD7EK3MlMNak+6FwAlgJYFjRFYTrW tN3maftuNd0VhZq4/k9CZLvyp6NUvMAj9irPQGhZUQek9Aausoiv6qGc5qDjWZny LqXL0G62aDgbFwAfIIDzhj3YSsIuLLFa9hKKZGhIPhpUokxceA//dNErCn30utIB AhmZQ6v7pCNwCCx++nZKSfKD6/mIGbg/j/Ax/ptsJJDPtpyPPLYWAEl5R2g+7q5m KAGSWmGF331MI8ECuwR6Rqli0BvpO94eL4c3OgxuxDl+o2jCEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYTKPLsVoOAcemFlndFfi/EwKp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDMwMTdkMGYtZmJlZi0z ZjIwLWE0OTUtMTQ2NWE1NjY2ZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrfQaDRIrykosqU7ZTwUIoJ46p7IYqmqoimyInubwlpHBiwya/MtqMP Q9Q3LpcSHXEhDh0LS4IzGNyf0D5khmFvBkxAGzkj3qEBVeWhavhzibINPr98/5Gz RnAh/ym255zpOfpCJqJz+BOnuBNdUpHdTkFI4sMjNjxKzsvjE8imd1hsSzUveY25 BFaJNCvm3GkT5ZDOCFXeTBQbl2Hrs+lBmATJNYjyF3fRsnbnnioPi/LUFiprz3BH Z3+4qiMpdF7B4UvC6h0M1PZia7k+7cZiWDxy5gbuyje1SllTHLPosTrAv+4hL9GN AWSQtASWDcduAMEM8jOgYs2rSm4r2ME= -----END CERTIFICATE-----Generated at Mon Jul 20 19:31:46 2026 by rpki-client