$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39e7b422-995b-36c4-a8da-8611de8a7722.roa File: 39e7b422-995b-36c4-a8da-8611de8a7722.roa (raw, json) Hash identifier: uYBTT325RsmJHxrXHXOmzGg/JZQTvbxoZ3v9rNO0CVU= Subject key identifier: 63:74:4D:81:D4:C1:BD:33:3D:1B:53:57:1A:81:41:8F:B2:93:0F:9D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A2127482E28137924E1E0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39e7b422-995b-36c4-a8da-8611de8a7722.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.31.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:21:27:48:2e:28:13:79:24:e1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=1689bf2b-0bac-4868-9446-0ea801b6bd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:80:e9:ba:9e:66:c7:de:c0:9d:6f:c7:e3:76: de:e0:e8:07:62:bb:ad:8d:d5:93:80:7b:45:e9:33: e3:14:60:0f:6c:6b:8d:b4:69:de:b7:d8:72:13:6e: d6:7f:34:58:76:b1:aa:87:2f:38:39:79:c8:e9:18: d6:84:19:2c:94:00:f7:f0:8f:e5:c7:53:58:34:d1: bf:bc:69:80:02:62:35:92:00:fa:c0:10:a3:7a:47: 34:d2:46:a9:3f:23:25:21:f8:d4:1a:c9:c0:04:b9: 3b:cb:c3:65:7c:02:a1:a9:6f:b7:8b:95:4b:2e:77: 6c:b1:17:bd:4f:4a:9a:9e:b8:a0:13:06:50:b4:fe: 92:13:75:ed:a6:c5:6e:a3:37:10:3e:c7:17:fd:d7: fa:7b:6e:f7:ff:c0:6c:00:29:90:cd:6f:cf:d3:61: 7a:b0:b4:95:cb:1d:22:ef:ad:96:a8:9b:39:c6:1c: ea:e4:49:ad:6d:bc:bc:0d:0b:25:02:98:54:a6:b7: 96:62:4e:6a:1a:7d:67:98:ab:0e:71:b6:31:9d:f5: 34:55:ce:6f:a4:37:7d:16:7e:62:fb:97:cf:4c:ad: 1a:01:e7:6c:70:27:84:ce:f6:bb:3d:bc:7d:39:6b: 81:e5:37:92:83:2e:e4:e3:b3:4a:89:d4:fd:c4:8c: c2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:74:4D:81:D4:C1:BD:33:3D:1B:53:57:1A:81:41:8F:B2:93:0F:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/39e7b422-995b-36c4-a8da-8611de8a7722.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1a:c0:40:24:98:75:0f:6b:ee:e1:8d:4f:59:e5:15:81:b8: 2b:3a:5a:31:38:5d:d0:67:a4:05:38:a6:ff:92:3f:d1:aa:71: a8:e5:84:25:39:32:c6:d3:eb:6d:2c:c3:1f:45:82:aa:18:6c: 66:16:10:58:c8:46:8d:dc:6c:65:45:fb:bc:1a:34:ca:7f:c4: af:d2:63:49:73:6b:3d:d3:45:c2:46:c3:ec:00:63:74:04:10: 21:50:f6:65:5d:8a:17:31:d7:6e:ab:4f:75:71:27:1d:1f:c4: 73:b0:1d:7d:69:a5:13:93:7d:80:35:11:ec:ab:06:3a:95:8f: 74:51:75:83:af:65:a6:b9:66:27:15:75:a6:54:8e:70:a6:d4: dc:a9:70:50:63:04:e0:2b:8d:c3:c7:05:48:24:4f:b0:36:cd: 8d:1c:55:85:6e:cc:58:43:72:45:49:e8:2c:cc:c5:06:76:cd: 26:0e:ef:c6:ec:83:56:a9:71:7f:3e:f1:6e:fc:71:94:ef:e2: 2b:35:dd:ff:c9:9e:72:71:8a:9c:ac:92:86:5a:9e:b0:31:3a: b0:90:07:c0:bb:97:bb:cd:5e:f8:f4:85:74:60:19:6a:95:2b: b0:c4:41:c3:0e:10:06:92:4a:07:3d:13:fb:00:50:6f:c0:50: 13:9a:a0:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeiEnSC4oE3kk4eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MTY4OWJmMmItMGJhYy00ODY4LTk0NDYtMGVhODAxYjZiZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIDpup5mx97AnW/H43be4OgHYrutjdWTgHtF 6TPjFGAPbGuNtGnet9hyE27WfzRYdrGqhy84OXnI6RjWhBkslAD38I/lx1NYNNG/ vGmAAmI1kgD6wBCjekc00kapPyMlIfjUGsnABLk7y8NlfAKhqW+3i5VLLndssRe9 T0qanrigEwZQtP6SE3XtpsVuozcQPscX/df6e273/8BsACmQzW/P02F6sLSVyx0i 762WqJs5xhzq5Emtbby8DQslAphUpreWYk5qGn1nmKsOcbYxnfU0Vc5vpDd9Fn5i +5fPTK0aAedscCeEzva7Pbx9OWuB5TeSgy7k47NKidT9xIzCDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGN0TYHUwb0zPRtTVxqBQY+ykw+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzllN2I0MjItOTk1Yi0z NmM0LWE4ZGEtODYxMWRlOGE3NzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4awEAkmHUPa+7hjU9Z5RWBuCs6WjE4XdBnpAU4pv+SP9GqcajlhCU5 MsbT620swx9FgqoYbGYWEFjIRo3cbGVF+7waNMp/xK/SY0lzaz3TRcJGw+wAY3QE ECFQ9mVdihcx126rT3VxJx0fxHOwHX1ppROTfYA1EeyrBjqVj3RRdYOvZaa5ZicV daZUjnCm1NypcFBjBOArjcPHBUgkT7A2zY0cVYVuzFhDckVJ6CzMxQZ2zSYO78bs g1apcX8+8W78cZTv4is13f/JnnJxipyskoZanrAxOrCQB8C7l7vNXvj0hXRgGWqV K7DEQcMOEAaSSgc9E/sAUG/AUBOaoN0= -----END CERTIFICATE-----Generated at Thu Mar 12 03:46:13 2026 by rpki-client