$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2aec3910-9740-320c-8366-632ec405b339.roa File: 2aec3910-9740-320c-8366-632ec405b339.roa (raw, json) Hash identifier: G41lOhzIeNgIjkNjnkyZXRokWsI80J4RmSUX7GatKGE= Subject key identifier: 09:0D:26:73:F3:BE:26:81:87:B9:66:14:4E:AA:A9:65:CB:26:85:48 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA79C91612124DF76F10E3C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2aec3910-9740-320c-8366-632ec405b339.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30036 IP address blocks: 173.20.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9c:91:61:21:24:df:76:f1:0e:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=194ec725-dbae-44ac-b31d-b3b11da0aa67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8e:74:6e:d3:28:92:ca:f6:15:cf:83:08:d4: 08:34:0a:ca:cf:43:ae:83:bd:4b:c8:c6:8d:dd:51: 9f:a1:fd:54:26:66:8d:a8:24:99:a5:94:94:7d:99: 10:c1:a9:25:8c:d8:a0:0a:aa:43:08:a7:fc:78:ee: f3:bf:c1:9c:8d:2d:a1:da:35:ca:14:34:9f:90:49: b3:82:43:22:d9:8a:3c:fa:18:2e:50:da:88:f5:b1: 1c:a2:c5:46:49:48:c6:ee:c9:2b:a1:4c:f7:cc:2f: 5d:d4:a2:e4:8f:2e:14:0e:90:95:c1:8f:29:6f:e2: 69:a4:cc:64:77:79:c6:74:56:97:26:a6:56:11:94: 63:67:fc:3a:a5:28:90:4f:e0:2e:d3:1d:bd:38:4e: 41:55:6e:dc:e0:fd:02:01:58:8c:4e:7c:44:3c:ad: b0:ef:45:59:c2:67:69:16:c4:88:ea:a9:6d:50:d7: 21:9f:c8:99:d2:15:89:81:4f:2b:70:e1:2c:e7:e5: b9:5b:f5:3f:5b:b7:8d:1f:b9:3e:f4:c1:8d:e2:50: aa:63:a7:bc:9b:2e:1d:5d:fb:23:28:27:b3:ed:c9: 73:84:c1:db:f7:e1:10:47:a3:56:c1:4d:cf:fe:e6: ea:af:54:2b:fa:d6:8e:65:40:4c:2d:50:7d:95:c6: 56:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0D:26:73:F3:BE:26:81:87:B9:66:14:4E:AA:A9:65:CB:26:85:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2aec3910-9740-320c-8366-632ec405b339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:ec:85:2a:55:dc:bf:81:49:f8:02:a3:61:d7:e4:bc:bf:dc: 3e:7c:95:a3:35:b0:97:dd:ed:d6:c5:0b:b7:60:7e:3b:e1:18: dd:36:31:af:45:65:37:d8:78:f8:9f:d8:66:d1:7c:1b:04:dd: bc:dd:dc:65:30:08:68:86:58:80:a8:75:bd:bd:1c:4e:52:d3: bd:d8:ad:dd:86:93:9f:66:0c:70:df:b8:fa:78:ce:2a:ab:6e: 77:2a:1c:10:b0:ea:9b:59:dc:7b:cb:2f:0a:a0:8b:12:5a:b8: 23:c2:96:5b:8b:6b:da:78:ea:bb:8d:34:ac:07:be:b5:56:b3: e0:58:7e:0f:06:5a:ee:62:14:6a:64:e6:14:3a:7e:18:f7:4f: a6:ea:71:fe:a3:7b:c9:a8:54:d9:51:16:6f:3a:f6:7d:3f:ff: c1:a9:f2:c8:aa:72:e6:c5:45:16:38:37:4a:62:f5:a8:06:ed: 91:e8:a3:e0:be:7f:57:29:69:9d:41:fa:16:0d:3c:dc:df:f8: d7:58:cb:05:dc:18:db:88:99:30:d8:3d:55:f3:fc:3c:1e:0a: 4d:d2:5b:99:1f:e6:43:4d:eb:36:2d:3c:b7:28:cb:04:4e:59: a4:d9:b5:ee:cf:3d:d9:87:6b:e3:de:90:1e:4c:97:72:94:c3: c2:d7:12:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnJFhISTfdvEOPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTk0ZWM3MjUtZGJhZS00NGFjLWIzMWQtYjNiMTFkYTBhYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI50btMoksr2Fc+DCNQINArKz0Oug71LyMaN 3VGfof1UJmaNqCSZpZSUfZkQwakljNigCqpDCKf8eO7zv8GcjS2h2jXKFDSfkEmz gkMi2Yo8+hguUNqI9bEcosVGSUjG7skroUz3zC9d1KLkjy4UDpCVwY8pb+JppMxk d3nGdFaXJqZWEZRjZ/w6pSiQT+Au0x29OE5BVW7c4P0CAViMTnxEPK2w70VZwmdp FsSI6qltUNchn8iZ0hWJgU8rcOEs5+W5W/U/W7eNH7k+9MGN4lCqY6e8my4dXfsj KCez7clzhMHb9+EQR6NWwU3P/ubqr1Qr+taOZUBMLVB9lcZWSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkNJnPzviaBh7lmFE6qqWXLJoVIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmFlYzM5MTAtOTc0MC0z MjBjLTgzNjYtNjMyZWM0MDViMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArshSpV3L+BSfgCo2HX5Ly/3D58laM1sJfd7dbFC7dgfjvhGN02Ma9F ZTfYePif2GbRfBsE3bzd3GUwCGiGWICodb29HE5S073Yrd2Gk59mDHDfuPp4ziqr bncqHBCw6ptZ3HvLLwqgixJauCPClluLa9p46ruNNKwHvrVWs+BYfg8GWu5iFGpk 5hQ6fhj3T6bqcf6je8moVNlRFm869n0//8Gp8siqcubFRRY4N0pi9agG7ZHoo+C+ f1cpaZ1B+hYNPNzf+NdYywXcGNuImTDYPVXz/DweCk3SW5kf5kNN6zYtPLcoywRO WaTZte7PPdmHa+PekB5Ml3KUw8LXEss= -----END CERTIFICATE-----Generated at Wed Jul 29 07:14:52 2026 by rpki-client