$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae2fa224-0f4e-386b-ab37-992904895e5f.roa File: ae2fa224-0f4e-386b-ab37-992904895e5f.roa (raw, json) Hash identifier: K3dQgbjsPfFwWsY+dZhhlG3xPO+AxSjzI8lzQJySofw= Subject key identifier: 47:CF:30:96:CA:8B:27:1B:26:11:C1:2E:8B:1F:8F:CC:4E:C2:0E:A2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DAC4573129C31DCEDA78FE35E Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae2fa224-0f4e-386b-ab37-992904895e5f.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 19905 IP address blocks: 173.31.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:73:12:9c:31:dc:ed:a7:8f:e3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=53878333-45b2-4813-953c-ad0316eb2de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:14:2c:13:52:f3:41:ee:42:0c:4a:9a:aa:3f: fc:17:78:92:e8:b8:7a:09:f1:51:05:6f:66:62:29: 7b:d5:fb:05:dc:9a:eb:b1:e4:5f:03:bc:a1:4e:6e: 24:c8:b3:b9:a5:4a:d5:49:26:30:eb:64:0b:26:52: 8d:c6:da:23:1a:0b:40:10:bc:73:1c:2c:85:a8:2d: 04:47:c8:37:ff:75:01:9c:32:02:b2:43:6f:3e:82: cf:b6:8f:b2:67:ec:c8:ad:42:e3:77:7c:35:c3:61: fd:e2:2f:db:d2:68:9d:e4:ff:77:a7:f7:0a:c4:3f: 02:c5:3d:ac:4a:9d:99:ff:a5:d2:50:1c:77:1d:aa: a6:fd:2f:55:32:00:8b:dd:ad:65:7c:32:72:16:ab: 9d:38:31:82:66:a0:99:29:90:5a:bb:b5:da:98:06: 97:39:bd:25:b4:75:d8:45:e2:98:a6:4c:aa:0d:a9: 23:e1:39:e1:e8:53:c0:c8:8a:93:51:95:86:f8:47: c6:82:e7:11:a8:32:0a:30:33:84:7f:34:24:94:12: e8:fe:d1:bb:72:d8:52:3d:fc:93:74:17:23:03:30: ba:62:6c:5b:b5:a2:38:fe:4e:10:55:b5:36:81:ed: 57:b1:ba:a5:85:26:27:32:27:4a:5b:6f:5f:0d:c8: 31:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CF:30:96:CA:8B:27:1B:26:11:C1:2E:8B:1F:8F:CC:4E:C2:0E:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ae2fa224-0f4e-386b-ab37-992904895e5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:11:d0:de:18:1c:71:d3:28:21:ce:51:54:94:fc:b6:25:19: b2:5c:27:32:35:48:a4:f0:01:f6:0f:38:e7:d7:f6:81:86:6f: eb:46:0e:0b:9e:e8:82:3a:b7:a8:5f:1a:dc:d8:cd:12:e7:28: 2e:fa:09:2c:f9:02:01:e2:ef:a7:69:f3:06:7d:ee:c9:53:be: fa:23:5b:62:94:aa:41:c8:06:c7:c2:5c:7e:d7:31:b9:e0:ca: a1:98:e2:45:c3:08:94:6e:c8:44:31:07:d8:37:5e:a1:5d:4f: 21:d9:a8:98:f6:d3:1a:2e:e6:32:39:2f:ee:8b:f5:d9:07:ef: 23:93:f9:8c:02:15:4c:66:68:3a:c7:12:93:22:3f:f3:62:7b: d2:4d:f1:a0:6a:f1:88:fb:a9:48:be:a3:a2:cc:bd:c3:94:6d: 3d:57:3d:98:fb:b7:19:5c:68:ee:9c:4c:20:f8:28:f6:10:c1: 69:3c:eb:d6:08:8a:c6:08:cb:97:4c:55:26:38:71:84:12:97: 7c:3f:6a:68:15:c7:46:e0:4b:d0:8c:a9:49:4e:ba:fb:0a:0b: 90:e8:a8:42:f7:55:86:9a:dd:be:a7:79:1f:0e:64:71:53:ce: 65:c7:0b:85:9e:87:6b:22:cd:f2:2b:fb:d3:a6:09:d5:24:5c: 26:c2:d8:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRXMSnDHc7aeP414wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk NTM4NzgzMzMtNDViMi00ODEzLTk1M2MtYWQwMzE2ZWIyZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRQsE1LzQe5CDEqaqj/8F3iS6Lh6CfFRBW9m Yil71fsF3JrrseRfA7yhTm4kyLO5pUrVSSYw62QLJlKNxtojGgtAELxzHCyFqC0E R8g3/3UBnDICskNvPoLPto+yZ+zIrULjd3w1w2H94i/b0mid5P93p/cKxD8CxT2s Sp2Z/6XSUBx3Haqm/S9VMgCL3a1lfDJyFqudODGCZqCZKZBau7XamAaXOb0ltHXY ReKYpkyqDakj4Tnh6FPAyIqTUZWG+EfGgucRqDIKMDOEfzQklBLo/tG7cthSPfyT dBcjAzC6YmxbtaI4/k4QVbU2ge1XsbqlhSYnMidKW29fDcgxlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfPMJbKiycbJhHBLosfj8xOwg6iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWUyZmEyMjQtMGY0ZS0z ODZiLWFiMzctOTkyOTA0ODk1ZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR9VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwR0N4YHHHTKCHOUVSU/LYlGbJcJzI1SKTwAfYPOOfX9oGGb+tGDgue 6II6t6hfGtzYzRLnKC76CSz5AgHi76dp8wZ97slTvvojW2KUqkHIBsfCXH7XMbng yqGY4kXDCJRuyEQxB9g3XqFdTyHZqJj20xou5jI5L+6L9dkH7yOT+YwCFUxmaDrH EpMiP/Nie9JN8aBq8Yj7qUi+o6LMvcOUbT1XPZj7txlcaO6cTCD4KPYQwWk869YI isYIy5dMVSY4cYQSl3w/amgVx0bgS9CMqUlOuvsKC5DoqEL3VYaa3b6neR8OZHFT zmXHC4Weh2sizfIr+9OmCdUkXCbC2Ok= -----END CERTIFICATE-----Generated at Fri May 8 21:29:20 2026 by rpki-client