$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04c4d247-3b8b-398c-a406-60af116f7247.roa File: 04c4d247-3b8b-398c-a406-60af116f7247.roa (raw, json) Hash identifier: W/hOPcaORcWp4c5MhqWyuJOBdRRe4JdzaABdvPdI9Cc= Subject key identifier: 4D:72:1D:D9:69:40:B9:D3:D6:34:F4:F6:74:7E:61:85:72:56:FF:26 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A26E45F88E318B5FF9200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04c4d247-3b8b-398c-a406-60af116f7247.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.31.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:26:e4:5f:88:e3:18:b5:ff:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=ea3d865a-1dac-4c86-9217-7d3311a2e638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:92:0c:f5:ce:0e:b6:26:d7:22:ce:24:87:51: 53:c8:8e:92:80:93:6a:d3:42:9b:c8:d6:ae:30:02: 52:59:8e:a3:d8:4f:23:2d:2d:3e:36:bf:2a:ac:b8: e5:47:8d:7e:6c:7c:b9:07:63:3d:a9:98:e0:5c:56: 48:a5:4b:0c:2e:b0:6b:f6:b8:81:2e:e6:db:34:fe: 21:25:58:85:81:2d:6a:70:b4:1c:3e:1f:1f:bf:79: 67:43:02:b9:6c:11:d8:40:7a:49:16:b1:f8:e5:10: 92:96:c8:8a:16:7b:a9:b2:ef:81:6c:99:ef:25:8f: 34:72:55:12:e8:54:45:4d:be:1a:4c:36:34:bb:89: 52:d5:7a:58:72:55:78:69:e4:ec:6f:2d:2e:ca:7f: 62:01:d4:7c:ee:6b:d2:63:b8:c3:d7:b7:5d:f3:d0: aa:33:fc:68:02:51:bc:19:1c:68:95:fc:fa:e9:36: cc:52:00:c6:d4:93:e5:12:f3:31:22:f5:ca:87:75: 13:33:34:d7:32:cb:40:c6:a7:78:5f:42:bd:54:9c: 8d:71:02:6e:08:cf:b8:eb:8e:2e:4b:8a:81:f8:12: 9d:9f:06:8b:b9:8d:12:43:34:06:fb:8d:a4:06:5e: 7f:43:7e:74:9d:65:d3:af:8e:ac:7b:77:41:33:70: 59:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:72:1D:D9:69:40:B9:D3:D6:34:F4:F6:74:7E:61:85:72:56:FF:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/04c4d247-3b8b-398c-a406-60af116f7247.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d5:83:f2:2f:7c:58:e8:e2:e3:93:99:1a:76:bb:73:16:21: 1f:0a:83:50:db:69:4b:ef:83:b0:a4:e4:2c:11:80:0a:b3:c4: 09:0a:46:a7:00:ea:b3:96:9c:5f:cb:81:1b:b0:9a:d6:f1:f7: b7:45:72:a3:37:94:07:15:4b:11:f0:3f:d4:77:97:33:78:bd: f5:47:b5:2e:75:8b:8a:2e:a1:17:d1:59:23:c0:35:f8:46:85: 0f:97:1b:3f:76:92:f6:44:a7:d8:60:06:a5:8e:35:12:ad:93: c4:cb:49:77:e1:23:f1:9d:b1:c1:e4:fa:7a:b6:78:87:26:60: 60:ed:19:50:9d:56:71:be:f6:3d:c0:a0:20:47:5c:f8:f0:7e: 03:0d:ee:3e:7b:60:4d:94:89:39:64:bb:87:1d:2a:1c:dc:fe: b7:47:11:02:24:9a:82:b4:7d:e7:11:e0:f5:99:81:3e:af:da: a6:36:47:4e:a9:d7:34:61:00:4f:75:fa:b2:39:a4:45:a7:dd: f7:5a:9c:fe:9f:18:73:d1:f7:6b:6d:74:c8:b2:78:b2:b9:ff: b2:3c:96:f7:ac:17:b8:48:36:b0:c5:26:ad:c4:95:37:67:20: fc:a2:28:60:9e:5f:4c:38:57:cd:19:2b:6a:3c:aa:bc:60:bc: 34:d1:e8:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeibkX4jjGLX/kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZWEzZDg2NWEtMWRhYy00Yzg2LTkyMTctN2QzMzExYTJlNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+JIM9c4OtibXIs4kh1FTyI6SgJNq00KbyNau MAJSWY6j2E8jLS0+Nr8qrLjlR41+bHy5B2M9qZjgXFZIpUsMLrBr9riBLubbNP4h JViFgS1qcLQcPh8fv3lnQwK5bBHYQHpJFrH45RCSlsiKFnupsu+BbJnvJY80clUS 6FRFTb4aTDY0u4lS1XpYclV4aeTsby0uyn9iAdR87mvSY7jD17dd89CqM/xoAlG8 GRxolfz66TbMUgDG1JPlEvMxIvXKh3UTMzTXMstAxqd4X0K9VJyNcQJuCM+4644u S4qB+BKdnwaLuY0SQzQG+42kBl5/Q350nWXTr46se3dBM3BZ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1yHdlpQLnT1jT09nR+YYVyVv8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDRjNGQyNDctM2I4Yi0z OThjLWE0MDYtNjBhZjExNmY3MjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnVg/IvfFjo4uOTmRp2u3MWIR8Kg1DbaUvvg7Ck5CwRgAqzxAkKRqcA 6rOWnF/LgRuwmtbx97dFcqM3lAcVSxHwP9R3lzN4vfVHtS51i4ouoRfRWSPANfhG hQ+XGz92kvZEp9hgBqWONRKtk8TLSXfhI/GdscHk+nq2eIcmYGDtGVCdVnG+9j3A oCBHXPjwfgMN7j57YE2UiTlku4cdKhzc/rdHEQIkmoK0fecR4PWZgT6v2qY2R06p 1zRhAE91+rI5pEWn3fdanP6fGHPR92ttdMiyeLK5/7I8lvesF7hINrDFJq3ElTdn IPyiKGCeX0w4V80ZK2o8qrxgvDTR6PQ= -----END CERTIFICATE-----Generated at Thu Mar 12 03:44:17 2026 by rpki-client