$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f698d1d-976e-3e05-aa03-1b79f46728fd.roa File: 7f698d1d-976e-3e05-aa03-1b79f46728fd.roa (raw, json) Hash identifier: vEZl/Tw+Gb8QjvMlzTFx3i2oWlU9MIwRRJlzIZaqpbY= Subject key identifier: BF:7B:DE:C8:69:73:F9:26:4E:F8:C5:91:49:F4:5F:48:14:06:52:73 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D20AF4D5BB6C6919D4B5084C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f698d1d-976e-3e05-aa03-1b79f46728fd.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.31.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:4d:5b:b6:c6:91:9d:4b:50:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=82534fc3-f881-4cf9-b382-8452fa0edb22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:09:6f:44:58:f2:d8:af:aa:8e:c6:a6:0c:89: 4e:44:58:f7:ab:66:ed:92:02:2e:d4:6d:3e:92:5f: 25:38:18:fb:f2:6a:36:e0:cc:31:6b:65:59:cc:7f: 9c:40:33:ef:45:7b:28:c8:e4:38:5f:60:6c:4f:8d: fc:67:b5:a1:6f:e2:e4:6a:d7:ac:a2:83:14:2b:3e: 44:47:66:ad:79:9b:0d:90:23:7e:f3:15:34:d7:3c: f9:97:b7:d9:ad:e6:75:34:d4:fc:93:29:0c:fc:0e: b2:67:23:d3:6c:8a:14:34:45:e3:3d:f9:dd:bb:e3: a8:f0:59:b5:22:02:71:20:f1:69:e0:d8:a8:28:a1: 56:84:6f:f1:a6:93:aa:2d:99:e8:52:47:0c:fe:56: 29:63:af:00:61:30:dc:0f:f3:01:f2:95:01:a2:66: 32:cf:cd:c1:6d:a8:90:7c:00:d0:f9:fc:c0:a3:71: 59:ba:8e:ac:1e:5c:68:5b:3c:93:85:9f:90:0f:1c: 57:71:e0:d5:04:3c:ff:50:2f:39:0d:83:56:12:be: 06:72:de:7c:ca:82:a4:68:49:78:7d:3e:5c:32:32: 94:b6:de:d3:39:c9:1c:a7:04:3e:e7:d0:a5:1e:cb: e5:c2:70:0b:20:47:06:72:f3:db:3b:46:54:5d:f2: d2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7B:DE:C8:69:73:F9:26:4E:F8:C5:91:49:F4:5F:48:14:06:52:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7f698d1d-976e-3e05-aa03-1b79f46728fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ea:41:04:f7:52:ce:50:98:46:46:41:20:64:63:85:fc:92: 4d:cd:a2:fb:af:f5:56:22:3b:f2:df:ad:1b:2c:51:3b:7b:a0: 51:76:60:6c:78:f8:6b:80:75:b4:98:97:26:f3:63:35:b3:04: b7:34:97:4a:b8:87:49:4a:d9:74:ce:79:b9:ae:d5:3a:14:20: 3e:67:b3:51:29:52:3c:87:4f:c5:0b:8a:d5:4e:db:a4:da:2e: 2d:5e:a9:c5:3a:f2:a5:cc:52:d4:2c:33:61:91:23:94:c7:49: dc:a2:2e:e8:09:b8:98:27:cf:88:9f:de:2e:cb:ab:22:27:17: ae:39:f4:81:36:c0:3b:0b:5d:69:76:f8:ab:9e:bb:51:e8:18: 9b:48:34:d4:a4:28:ce:c2:d9:d4:67:f9:ae:01:27:eb:a3:5b: 20:09:e9:cd:51:79:62:04:73:73:bb:e7:1d:f3:bd:31:73:a2: 61:8e:eb:9f:c1:2e:5d:cd:68:4f:ee:e6:bc:95:eb:04:55:6e: 1c:75:5c:48:ab:f9:af:20:de:08:9f:0b:50:d4:d1:3a:f3:6b: 46:1d:d8:91:db:23:76:b3:9a:8c:1b:fc:00:69:eb:e3:56:4b: 18:c8:3f:d3:0f:f8:04:eb:52:2a:8b:23:d7:f7:36:9d:75:52: 25:71:d8:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr01btsaRnUtQhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk ODI1MzRmYzMtZjg4MS00Y2Y5LWIzODItODQ1MmZhMGVkYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AlvRFjy2K+qjsamDIlORFj3q2btkgIu1G0+ kl8lOBj78mo24Mwxa2VZzH+cQDPvRXsoyOQ4X2BsT438Z7Whb+LkatesooMUKz5E R2ateZsNkCN+8xU01zz5l7fZreZ1NNT8kykM/A6yZyPTbIoUNEXjPfndu+Oo8Fm1 IgJxIPFp4NioKKFWhG/xppOqLZnoUkcM/lYpY68AYTDcD/MB8pUBomYyz83BbaiQ fADQ+fzAo3FZuo6sHlxoWzyThZ+QDxxXceDVBDz/UC85DYNWEr4Gct58yoKkaEl4 fT5cMjKUtt7TOckcpwQ+59ClHsvlwnALIEcGcvPbO0ZUXfLSjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL973shpc/kmTvjFkUn0X0gUBlJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2Y2OThkMWQtOTc2ZS0z ZTA1LWFhMDMtMWI3OWY0NjcyOGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTqQQT3Us5QmEZGQSBkY4X8kk3Novuv9VYiO/LfrRssUTt7oFF2YGx4 +GuAdbSYlybzYzWzBLc0l0q4h0lK2XTOebmu1ToUID5ns1EpUjyHT8ULitVO26Ta Li1eqcU68qXMUtQsM2GRI5THSdyiLugJuJgnz4if3i7LqyInF6459IE2wDsLXWl2 +Kueu1HoGJtINNSkKM7C2dRn+a4BJ+ujWyAJ6c1ReWIEc3O75x3zvTFzomGO65/B Ll3NaE/u5ryV6wRVbhx1XEir+a8g3gifC1DU0Trza0Yd2JHbI3azmowb/ABp6+NW SxjIP9MP+ATrUiqLI9f3Np11UiVx2CI= -----END CERTIFICATE-----Generated at Thu Mar 12 03:42:08 2026 by rpki-client