$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa File: 2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa (raw, json) Hash identifier: on9D6C5cpGxmcuNynEXg+Rs9m5gujNNnOhPf+81sI04= Subject key identifier: 2E:95:EF:54:7F:52:4C:CD:04:10:09:D0:53:1B:9C:F0:9C:F0:81:89 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A4BA51509EFAD382534C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.31.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:4b:a5:15:09:ef:ad:38:25:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=a838a268-ff5b-41b2-b9df-8b982309e61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9c:a6:5d:01:27:f9:f7:74:06:fc:90:a2:58: 24:e6:fd:07:e9:58:cb:36:61:b7:7e:24:f0:be:d1: 47:ee:d2:ac:4a:e4:21:f5:a1:49:37:b1:c9:81:82: 70:a9:1a:77:a3:16:b9:0e:db:af:a5:db:97:0d:34: 4d:3d:79:50:1d:01:5b:0a:b6:e5:1f:d7:a0:17:53: 13:a5:bf:b8:54:2e:9e:4b:08:98:ee:c8:d7:c0:24: 2d:57:de:d3:15:0c:db:7c:20:2c:31:5c:2a:f6:87: 61:aa:30:70:13:bb:31:ae:99:8c:f8:ad:40:85:23: e4:23:69:b7:2b:c2:3b:99:3f:70:64:74:10:2b:2a: 99:e0:35:a0:5f:f3:d6:99:6b:18:84:c3:93:71:6b: 6c:72:5a:b6:6b:77:d5:f7:00:29:4d:ce:5c:2d:f4: 84:36:e4:bb:de:c4:ca:3a:68:3b:d2:26:8b:1b:fb: e6:67:fd:3c:99:df:1d:6b:d3:54:90:a6:7b:c2:ed: b0:4f:7b:b3:83:c4:5c:3b:ed:f4:a3:71:de:7d:a5: 0a:bf:ea:7e:e3:f0:e9:53:06:69:70:28:f9:b0:0f: 5f:c6:52:46:c2:3c:67:eb:83:f5:41:17:07:ab:b3: 40:fc:88:34:a6:21:85:33:aa:3c:76:01:66:d3:e4: 32:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:95:EF:54:7F:52:4C:CD:04:10:09:D0:53:1B:9C:F0:9C:F0:81:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2af3572d-e7d4-3ed7-a984-89cd2a5e16d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ad:d6:de:93:fd:52:e8:97:c0:de:ad:79:9e:ab:8b:ca:ce: e5:bf:86:47:5c:8d:9c:9b:06:77:88:7e:f1:56:df:ee:9f:1c: 03:6c:6b:52:8d:c5:8e:ab:43:18:29:c5:d0:60:1a:5a:94:25: 12:2f:bb:e1:b3:e9:4b:d5:2f:d2:2a:ec:1d:36:7e:9a:2c:6d: 90:5a:cf:75:84:fc:c7:98:23:2c:36:38:66:44:9a:94:c2:be: 6b:47:1e:7b:bb:dc:d5:0c:00:cc:60:c5:ce:d6:35:4a:f9:03: 2f:e0:76:10:13:ae:15:1e:20:6a:27:99:47:3c:16:e2:82:d9: 05:df:5e:5a:bd:63:bb:79:55:73:8d:2d:33:b6:51:f1:40:c3: e5:17:4e:c9:cf:b3:eb:1c:1c:50:3e:18:1f:0a:42:16:de:45: ab:53:2d:27:75:29:19:bf:2c:5a:89:e0:54:86:8b:bc:00:34: 03:54:f4:58:48:ea:fc:5a:31:dc:8d:b1:b2:c0:53:fd:68:67: bf:8a:a0:a1:01:48:04:3f:b5:e7:61:59:61:32:6a:53:38:3c: a7:65:1f:32:09:6b:cb:b0:0b:be:b6:b7:4d:ff:a8:f9:30:df: 7a:ef:7a:4c:b2:b2:e6:55:8a:84:1a:ab:58:02:52:ed:dd:4c: 66:24:9c:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jekulFQnvrTglNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YTgzOGEyNjgtZmY1Yi00MWIyLWI5ZGYtOGI5ODIzMDllNjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZymXQEn+fd0BvyQolgk5v0H6VjLNmG3fiTw vtFH7tKsSuQh9aFJN7HJgYJwqRp3oxa5DtuvpduXDTRNPXlQHQFbCrblH9egF1MT pb+4VC6eSwiY7sjXwCQtV97TFQzbfCAsMVwq9odhqjBwE7sxrpmM+K1AhSPkI2m3 K8I7mT9wZHQQKyqZ4DWgX/PWmWsYhMOTcWtsclq2a3fV9wApTc5cLfSENuS73sTK Omg70iaLG/vmZ/08md8da9NUkKZ7wu2wT3uzg8RcO+30o3HefaUKv+p+4/DpUwZp cCj5sA9fxlJGwjxn64P1QRcHq7NA/Ig0piGFM6o8dgFm0+Qy6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6V71R/UkzNBBAJ0FMbnPCc8IGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmFmMzU3MmQtZTdkNC0z ZWQ3LWE5ODQtODljZDJhNWUxNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCt1t6T/VLol8DerXmeq4vKzuW/hkdcjZybBneIfvFW3+6fHANsa1KN xY6rQxgpxdBgGlqUJRIvu+Gz6UvVL9Iq7B02fposbZBaz3WE/MeYIyw2OGZEmpTC vmtHHnu73NUMAMxgxc7WNUr5Ay/gdhATrhUeIGonmUc8FuKC2QXfXlq9Y7t5VXON LTO2UfFAw+UXTsnPs+scHFA+GB8KQhbeRatTLSd1KRm/LFqJ4FSGi7wANANU9FhI 6vxaMdyNsbLAU/1oZ7+KoKEBSAQ/tedhWWEyalM4PKdlHzIJa8uwC762t03/qPkw 33rvekyysuZVioQaq1gCUu3dTGYknA0= -----END CERTIFICATE-----Generated at Thu Mar 12 03:40:34 2026 by rpki-client