$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb241fe9-c44f-3a81-b662-e58168471a3a.roa File: eb241fe9-c44f-3a81-b662-e58168471a3a.roa (raw, json) Hash identifier: VtPfonh0Oc9QTabDgZgkBlitZGE62zZPEq21V0I9T2Q= Subject key identifier: DC:4C:02:DD:04:B4:4C:93:55:19:AC:5E:BE:3B:38:4C:9A:F0:C7:9B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D2379FB15F7D5135B3A793B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb241fe9-c44f-3a81-b662-e58168471a3a.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 30036 IP address blocks: 173.31.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:fb:15:f7:d5:13:5b:3a:79:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=473f3062-77fe-42dc-ade1-cc0d8dbf2069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c6:69:a8:5e:cb:ae:f9:f9:66:4e:50:c2:1f: af:5c:5a:ce:c1:8c:b4:cf:fe:31:59:59:f4:f3:21: f3:db:04:d1:f9:d7:98:ee:33:b7:ac:4b:6e:75:5a: 7f:12:7e:51:ba:5b:c4:c5:c7:08:38:bc:a8:f0:d9: d1:76:5e:ed:69:19:cc:4f:47:64:f5:5c:4c:34:31: 32:8a:16:5b:a8:91:70:59:cd:79:34:70:63:f1:67: 15:25:04:4c:2f:8a:b6:a4:7c:34:7d:1d:75:8e:4d: cc:a9:5b:bc:69:e7:3e:e7:51:93:b2:f0:08:3b:cf: 5c:e5:44:22:d9:ec:52:92:b8:d9:3f:40:71:1e:e1: 5d:72:01:05:0f:cd:ea:18:89:ea:20:53:ec:bf:bc: 39:93:74:1f:d0:59:29:82:cf:b9:be:5c:cf:e5:1f: 8c:af:b2:3f:c8:df:ed:fb:34:de:75:d6:84:82:64: a7:1d:75:40:7a:29:1c:59:dd:ee:37:fa:1c:67:ca: 15:f6:c4:1b:51:13:f7:3d:b0:60:13:27:8c:7e:b1: 84:ce:ad:ae:17:3a:59:c1:b2:88:9a:47:bf:75:c8: 48:15:db:c8:99:08:b4:84:f5:47:74:89:d2:62:c2: 31:7a:35:ae:65:cb:23:94:81:76:5a:ee:8c:39:cb: 2a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4C:02:DD:04:B4:4C:93:55:19:AC:5E:BE:3B:38:4C:9A:F0:C7:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb241fe9-c44f-3a81-b662-e58168471a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b5:25:23:d2:fc:f3:1a:25:a3:73:6b:e7:d5:04:e8:b7:b7: bb:bb:4d:6a:5b:d4:a8:01:25:63:99:23:6d:4a:1b:24:2e:a9: 7e:02:68:a9:09:56:57:5d:95:e4:f0:71:c8:be:38:91:82:15: 0a:41:48:b5:5c:f3:3c:53:3a:2a:d2:9e:39:6f:26:1c:14:58: 35:8c:30:a1:13:de:80:a7:57:0d:fc:25:c2:ee:e6:1d:0c:77: 0d:76:71:72:25:b8:ab:ed:61:6a:93:76:4e:a1:5d:f2:7f:8c: e9:32:b0:83:85:95:94:b0:ca:35:d1:91:19:b6:ed:f1:cc:67: fd:6e:02:db:30:ac:62:fd:fa:04:bc:63:36:81:7a:2c:e0:a1: a4:ad:96:ab:68:80:85:6b:6f:af:b1:9f:7f:28:21:e5:57:eb: 83:48:8e:6f:7e:1d:7f:da:e9:29:35:b6:a9:aa:de:c1:c6:8c: 70:37:64:35:22:e3:e1:b3:2e:9c:f5:04:be:e4:e8:cd:74:45: 89:62:26:18:27:84:da:76:c9:76:f3:53:5c:79:9b:ea:a3:1e: 55:35:2e:a3:f6:07:fc:4f:82:1b:04:d0:79:3a:15:b7:a9:de: 5a:d1:ba:46:ee:fb:56:9f:16:c6:58:6c:9a:44:26:d0:6d:73: 2b:13:72:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefsV99UTWzp5O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NDczZjMwNjItNzdmZS00MmRjLWFkZTEtY2MwZDhkYmYyMDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMZpqF7Lrvn5Zk5Qwh+vXFrOwYy0z/4xWVn0 8yHz2wTR+deY7jO3rEtudVp/En5RulvExccIOLyo8NnRdl7taRnMT0dk9VxMNDEy ihZbqJFwWc15NHBj8WcVJQRML4q2pHw0fR11jk3MqVu8aec+51GTsvAIO89c5UQi 2exSkrjZP0BxHuFdcgEFD83qGInqIFPsv7w5k3Qf0Fkpgs+5vlzP5R+Mr7I/yN/t +zTeddaEgmSnHXVAeikcWd3uN/ocZ8oV9sQbURP3PbBgEyeMfrGEzq2uFzpZwbKI mke/dchIFdvImQi0hPVHdInSYsIxejWuZcsjlIF2Wu6MOcsqJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxMAt0EtEyTVRmsXr47OEya8MebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWIyNDFmZTktYzQ0Zi0z YTgxLWI2NjItZTU4MTY4NDcxYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR87MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu1JSPS/PMaJaNza+fVBOi3t7u7TWpb1KgBJWOZI21KGyQuqX4CaKkJ VlddleTwcci+OJGCFQpBSLVc8zxTOirSnjlvJhwUWDWMMKET3oCnVw38JcLu5h0M dw12cXIluKvtYWqTdk6hXfJ/jOkysIOFlZSwyjXRkRm27fHMZ/1uAtswrGL9+gS8 YzaBeizgoaStlqtogIVrb6+xn38oIeVX64NIjm9+HX/a6Sk1tqmq3sHGjHA3ZDUi 4+GzLpz1BL7k6M10RYliJhgnhNp2yXbzU1x5m+qjHlU1LqP2B/xPghsE0Hk6Fbep 3lrRukbu+1afFsZYbJpEJtBtcysTcrE= -----END CERTIFICATE-----Generated at Thu Mar 12 05:07:46 2026 by rpki-client