$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcd5e6c1-2635-3d4e-b4f7-98331713f290.roa File: fcd5e6c1-2635-3d4e-b4f7-98331713f290.roa (raw, json) Hash identifier: cLfESEDtBLkZDxSA8VOLgqQ2+/rKHiLleVtM4mkeQ+I= Subject key identifier: 2D:61:97:69:0D:D3:43:2A:9E:DF:CB:0C:A1:12:A9:B6:78:72:46:E1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A022329F022DC332B3380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcd5e6c1-2635-3d4e-b4f7-98331713f290.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 173.31.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:02:23:29:f0:22:dc:33:2b:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=4e942f19-1ebe-485b-9d0e-ec1aad0430c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:20:c2:99:24:00:ce:54:0c:4c:2b:b7:03:7c: 7c:22:7e:1e:0e:62:39:ef:95:e8:64:a1:98:ce:6e: 1d:52:54:a3:49:86:4f:ab:e5:1b:c8:20:82:3b:41: 02:e9:25:a1:1b:20:bc:34:c8:2b:14:c8:07:fa:22: 85:16:2f:ab:8e:5c:2e:64:c6:49:ad:30:52:82:ec: 62:0c:8f:9c:5b:ed:38:0a:0c:dc:f5:56:a7:dd:bc: 42:dc:65:40:04:d5:f9:53:27:71:34:03:18:b1:24: 83:e9:c9:8b:c4:67:8a:46:fa:16:29:c7:0c:b4:49: 94:aa:c4:cf:1b:1e:a7:05:ce:82:6f:dc:41:54:ef: 69:84:2c:e9:77:fa:52:8e:1e:8f:15:41:f6:90:c3: b8:84:8c:c6:c7:ab:17:d1:b1:74:d2:75:31:89:2f: 28:9e:11:6c:d9:76:ed:b8:ec:6d:44:eb:1a:99:c2: dc:b8:cd:6f:04:e2:e9:b4:1d:62:ee:01:18:96:a4: c3:02:ca:e7:b9:d8:02:02:75:c5:ae:17:59:a2:32: bb:77:f1:41:f9:cf:b0:8b:16:bd:c1:9e:52:41:d5: b1:c2:0d:a2:55:68:82:de:9f:e2:68:26:a9:6f:43: ca:72:cb:f5:9b:41:e2:bc:00:71:83:2f:e0:62:38: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:61:97:69:0D:D3:43:2A:9E:DF:CB:0C:A1:12:A9:B6:78:72:46:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fcd5e6c1-2635-3d4e-b4f7-98331713f290.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.31.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:27:1a:12:a9:13:39:de:8c:2c:cf:47:2b:eb:84:56:a2:76: e8:e5:be:a1:ca:7d:84:de:eb:a2:65:19:4d:c2:23:55:c6:85: 25:1c:ae:b8:da:a3:5c:9c:17:13:63:4f:4f:73:b4:bb:2d:54: 9b:92:65:4f:37:98:09:f2:2b:77:c0:e2:8e:89:9f:70:c0:b8: 3b:59:bb:e9:2b:2d:dc:d4:7f:96:4d:93:17:f9:f8:2b:5c:da: 58:fc:df:57:6e:18:70:fb:bd:32:60:32:cc:85:28:a6:5e:d5: d6:a1:5e:d2:20:a8:0b:bf:7f:d6:17:01:3a:ac:11:b3:f3:89: e6:49:12:8f:fb:70:ba:b2:c9:d4:23:dc:4b:e3:ca:84:f0:93: a1:81:ca:1d:cd:4f:51:69:31:e9:0a:b2:72:e5:5d:e7:06:1f: 6f:f7:22:d1:c9:bc:dc:ae:60:c9:16:f3:e6:fc:67:25:17:b0: d9:64:57:5e:f9:c5:27:01:45:ee:8f:d7:32:7c:b4:20:55:aa: fc:ab:91:dc:30:9a:c9:08:85:39:9a:1c:97:79:d7:29:3d:f6: eb:6b:f6:ef:93:5a:3b:8b:38:06:b6:22:bb:14:7b:96:41:aa: 0c:99:a1:bf:42:61:ca:dc:43:ac:d0:b3:73:9f:a8:1d:00:97: 6c:2d:f7:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jegIjKfAi3DMrM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NGU5NDJmMTktMWViZS00ODViLTlkMGUtZWMxYWFkMDQzMGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCDCmSQAzlQMTCu3A3x8In4eDmI575XoZKGY zm4dUlSjSYZPq+UbyCCCO0EC6SWhGyC8NMgrFMgH+iKFFi+rjlwuZMZJrTBSguxi DI+cW+04Cgzc9Van3bxC3GVABNX5UydxNAMYsSSD6cmLxGeKRvoWKccMtEmUqsTP Gx6nBc6Cb9xBVO9phCzpd/pSjh6PFUH2kMO4hIzGx6sX0bF00nUxiS8onhFs2Xbt uOxtROsamcLcuM1vBOLptB1i7gEYlqTDAsrnudgCAnXFrhdZojK7d/FB+c+wixa9 wZ5SQdWxwg2iVWiC3p/iaCapb0PKcsv1m0HivABxgy/gYjjbWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1hl2kN00Mqnt/LDKESqbZ4ckbhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmNkNWU2YzEtMjYzNS0z ZDRlLWI0ZjctOTgzMzE3MTNmMjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrR+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUnGhKpEznejCzPRyvrhFaidujlvqHKfYTe66JlGU3CI1XGhSUcrrja o1ycFxNjT09ztLstVJuSZU83mAnyK3fA4o6Jn3DAuDtZu+krLdzUf5ZNkxf5+Ctc 2lj831duGHD7vTJgMsyFKKZe1dahXtIgqAu/f9YXATqsEbPzieZJEo/7cLqyydQj 3EvjyoTwk6GByh3NT1FpMekKsnLlXecGH2/3ItHJvNyuYMkW8+b8ZyUXsNlkV175 xScBRe6P1zJ8tCBVqvyrkdwwmskIhTmaHJd51yk99utr9u+TWjuLOAa2IrsUe5ZB qgyZob9CYcrcQ6zQs3OfqB0Al2wt9x4= -----END CERTIFICATE-----Generated at Thu Mar 12 03:41:38 2026 by rpki-client