$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/823787c9-4c7c-389b-ba8a-83e6f50e1293.roa File: 823787c9-4c7c-389b-ba8a-83e6f50e1293.roa (raw, json) Hash identifier: nL0HttoqVqNRY/8pO9bVtVCuHiu2j7IUjRhn4pUAke8= Subject key identifier: 8F:4D:17:D0:57:FD:58:73:AC:78:EB:01:9A:FF:DB:A9:70:08:24:81 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D1707F105F29A035D1EF13800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/823787c9-4c7c-389b-ba8a-83e6f50e1293.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 30036 IP address blocks: 173.31.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:f1:05:f2:9a:03:5d:1e:f1:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=d7bd3bcb-63a2-45dc-b5b6-4d6b6ba30f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:4d:42:62:a2:19:bb:59:75:37:08:34:18: 82:7b:cc:d2:d1:c3:8b:cb:58:51:e1:f5:e9:b6:2f: ea:44:d8:70:9d:11:29:68:c6:63:74:a7:67:0d:03: dd:16:ec:6b:87:ab:7f:1c:92:09:49:68:4b:bc:92: bc:9c:e1:c8:34:49:df:13:c8:34:8f:94:41:49:eb: 9c:a3:1a:36:5e:97:96:fa:dc:66:be:da:c7:25:49: c7:b5:ce:63:ab:cf:fd:3b:44:48:24:2b:49:18:d4: 1a:43:49:6b:aa:e6:2c:e0:0b:78:e2:66:aa:a7:b9: d7:10:ca:a6:5c:34:5c:8b:99:74:ad:1c:1e:bb:f7: e2:47:8b:df:09:09:1c:f3:03:0e:fc:79:a4:1c:c2: 3a:52:8d:8d:f8:b1:4d:ec:c3:07:cb:6a:24:61:41: 1a:b0:8e:55:4b:74:c2:57:5f:84:fa:6f:d8:b6:93: 9b:9a:93:16:a5:3d:6c:9a:de:ed:12:84:4e:12:b9: 76:33:7d:8b:96:94:2d:b4:b3:8f:f8:e8:03:d5:c2: 35:17:11:88:69:88:48:28:3e:73:90:0b:89:c6:fb: 88:ce:53:3f:1e:e0:72:29:c8:23:9d:2e:f9:5f:1c: fb:7a:67:ae:d3:f1:46:bf:d7:cf:b4:80:5e:0b:64: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4D:17:D0:57:FD:58:73:AC:78:EB:01:9A:FF:DB:A9:70:08:24:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/823787c9-4c7c-389b-ba8a-83e6f50e1293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:da:08:56:46:e9:d1:e4:a8:09:f5:fa:59:fc:69:31:8e:82: 3f:8e:aa:7b:ea:c4:60:b1:47:91:d8:2e:28:9c:37:ed:a9:5a: b1:7f:34:1e:73:ee:f1:b1:b9:65:68:04:8e:be:11:30:75:86: ae:ff:14:f6:52:2a:c6:47:e8:cb:d7:d6:56:c7:ec:67:f9:92: 70:d8:f1:82:da:3e:74:3e:60:de:d3:4c:08:e0:53:8e:d1:fd: 8b:a6:df:d4:77:3c:c3:5b:08:92:4f:31:73:0d:45:b4:38:56: cf:16:ef:59:0b:bb:14:7d:93:19:0b:7d:83:2b:94:1b:6b:fa: 70:ab:a0:03:64:bf:49:61:e0:d6:01:12:a3:f9:e4:ad:75:0b: a4:00:49:fe:09:9f:12:ac:83:90:81:f9:76:b6:a0:db:47:ec: 02:ba:77:12:02:b7:47:2d:85:0a:26:8f:b2:0b:40:94:31:71: 40:26:e1:ea:c8:e3:c7:41:7a:8b:17:c4:2a:c1:93:46:fd:87: a0:58:8f:d0:c6:2a:77:ce:91:da:2e:66:a5:19:f4:05:cf:99: 86:b0:9e:00:4e:4c:78:db:fe:44:de:9a:47:53:7c:6f:cc:27: 13:f1:69:8e:d6:7a:74:8f:35:d2:7c:e3:be:7a:d8:bf:a5:e9: d9:d5:5e:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB/EF8poDXR7xOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk ZDdiZDNiY2ItNjNhMi00NWRjLWI1YjYtNGQ2YjZiYTMwZjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMFNQmKiGbtZdTcINBiCe8zS0cOLy1hR4fXp ti/qRNhwnREpaMZjdKdnDQPdFuxrh6t/HJIJSWhLvJK8nOHINEnfE8g0j5RBSeuc oxo2XpeW+txmvtrHJUnHtc5jq8/9O0RIJCtJGNQaQ0lrquYs4At44maqp7nXEMqm XDRci5l0rRweu/fiR4vfCQkc8wMO/HmkHMI6Uo2N+LFN7MMHy2okYUEasI5VS3TC V1+E+m/YtpObmpMWpT1smt7tEoROErl2M32LlpQttLOP+OgD1cI1FxGIaYhIKD5z kAuJxvuIzlM/HuByKcgjnS75Xxz7emeu0/FGv9fPtIBeC2QniQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9NF9BX/VhzrHjrAZr/26lwCCSBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODIzNzg3YzktNGM3Yy0z ODliLWJhOGEtODNlNmY1MGUxMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITaCFZG6dHkqAn1+ln8aTGOgj+OqnvqxGCxR5HYLiicN+2pWrF/NB5z 7vGxuWVoBI6+ETB1hq7/FPZSKsZH6MvX1lbH7Gf5knDY8YLaPnQ+YN7TTAjgU47R /Yum39R3PMNbCJJPMXMNRbQ4Vs8W71kLuxR9kxkLfYMrlBtr+nCroANkv0lh4NYB EqP55K11C6QASf4JnxKsg5CB+Xa2oNtH7AK6dxICt0cthQomj7ILQJQxcUAm4erI 48dBeosXxCrBk0b9h6BYj9DGKnfOkdouZqUZ9AXPmYawngBOTHjb/kTemkdTfG/M JxPxaY7WenSPNdJ847562L+l6dnVXgI= -----END CERTIFICATE-----Generated at Thu Mar 12 03:44:19 2026 by rpki-client