$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40085d8b-95be-3734-bdc9-7d3b27597628.roa File: 40085d8b-95be-3734-bdc9-7d3b27597628.roa (raw, json) Hash identifier: Nq3jjr+Z/1DrtWo5Jz6ot5o3zjZCt4zv93+GY5vCjkQ= Subject key identifier: 4A:C8:2D:63:10:74:04:6A:18:E3:83:5B:C1:B7:F2:B8:29:CE:15:BB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA793358C7648FB1E2E54AEE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40085d8b-95be-3734-bdc9-7d3b27597628.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 173.29.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:35:8c:76:48:fb:1e:2e:54:ae:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1869b195-44d9-42bd-b437-2c3d2b429a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:eb:51:3e:2e:2b:79:47:eb:9c:f7:0b:95:9d: 62:46:65:13:a6:24:84:a4:7b:81:6d:8a:40:85:a5: b6:2f:4f:89:09:35:5c:b3:34:be:c0:54:8a:aa:87: b4:1a:76:65:c6:d7:9d:b2:3f:e6:49:42:69:6c:eb: f9:13:cf:3b:6a:f2:43:a9:45:83:50:1d:32:f5:b4: eb:f4:fc:12:4b:2b:fc:61:fe:f2:69:ae:93:54:e8: f0:53:8e:5e:b5:74:dd:4d:fa:b7:24:fe:f4:2e:81: 8b:2f:3e:01:f4:34:75:3c:8d:9e:58:a1:b4:41:9f: b3:38:35:e3:7a:a5:db:0e:c5:67:56:4d:93:04:46: 51:72:88:e1:a2:00:3d:7c:e8:cf:54:f4:f9:7a:3b: 98:df:99:bd:ad:24:09:8d:20:18:23:4f:ef:80:89: 86:91:39:24:c7:7b:e9:63:16:3d:1c:80:38:88:7d: 41:5e:77:87:43:79:c3:f2:a3:d6:a7:49:0d:93:a6: 81:57:de:7c:d1:8d:d4:c0:45:dd:c2:a5:b8:50:8b: b1:ea:f9:09:73:2f:74:25:da:d6:76:01:cd:8b:43: e6:d0:26:4a:1b:09:cd:17:b5:1a:1e:9e:9f:1e:87: 7d:0c:92:91:7f:e7:4f:79:6a:a4:a0:f2:b0:9d:54: 7d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C8:2D:63:10:74:04:6A:18:E3:83:5B:C1:B7:F2:B8:29:CE:15:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/40085d8b-95be-3734-bdc9-7d3b27597628.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:f2:16:81:10:b5:51:e3:df:50:30:0c:c7:87:f6:87:30:d1: f9:46:1a:a7:8f:70:d5:b5:f9:40:db:b2:7d:65:22:fa:8e:21: 30:74:58:d9:4b:3d:b8:f5:5c:e3:9e:1b:cd:a7:62:99:78:db: ee:61:83:de:f8:50:82:dc:da:d0:44:09:1e:66:d2:7a:99:76: 41:aa:75:21:2a:d3:2e:d9:1f:ad:51:f3:f1:81:7e:fe:62:3c: 26:4e:d6:bb:c3:d0:f1:15:d4:27:1b:06:82:3c:30:0b:4e:d6: 39:e3:ad:2d:d1:e1:93:24:ba:3c:1e:52:89:5f:88:1a:e7:99: 5c:ad:ea:dc:cc:b4:d8:ea:54:e6:7f:8f:90:39:b3:c1:c7:a8: 39:90:c0:d9:f6:0c:2a:ff:49:93:2f:ff:ea:2a:fc:b8:44:86: 02:03:6a:9a:bc:6e:6c:88:8a:35:fa:3f:5d:92:8a:3f:0d:e0: ab:0c:37:0b:78:2c:4a:d2:55:1a:43:34:ac:04:f5:6d:2c:00: 73:8c:3e:41:3e:d0:ad:d9:01:a4:8b:44:b6:5a:8a:b5:4f:a1: 4f:26:bd:2b:8e:03:40:40:87:fa:56:bf:88:11:79:34:a1:32: 03:ad:66:3f:c6:9d:6a:09:63:79:bb:ec:c9:f2:e0:2a:60:be: 9c:5c:8f:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkzWMdkj7Hi5UruAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTg2OWIxOTUtNDRkOS00MmJkLWI0MzctMmMzZDJiNDI5YTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+tRPi4reUfrnPcLlZ1iRmUTpiSEpHuBbYpA haW2L0+JCTVcszS+wFSKqoe0GnZlxtedsj/mSUJpbOv5E887avJDqUWDUB0y9bTr 9PwSSyv8Yf7yaa6TVOjwU45etXTdTfq3JP70LoGLLz4B9DR1PI2eWKG0QZ+zODXj eqXbDsVnVk2TBEZRcojhogA9fOjPVPT5ejuY35m9rSQJjSAYI0/vgImGkTkkx3vp YxY9HIA4iH1BXneHQ3nD8qPWp0kNk6aBV9580Y3UwEXdwqW4UIux6vkJcy90JdrW dgHNi0Pm0CZKGwnNF7UaHp6fHod9DJKRf+dPeWqkoPKwnVR9OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErILWMQdARqGOODW8G38rgpzhW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDAwODVkOGItOTViZS0z NzM0LWJkYzktN2QzYjI3NTk3NjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErR2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDyFoEQtVHj31AwDMeH9ocw0flGGqePcNW1+UDbsn1lIvqOITB0WNlL Pbj1XOOeG82nYpl42+5hg974UILc2tBECR5m0nqZdkGqdSEq0y7ZH61R8/GBfv5i PCZO1rvD0PEV1CcbBoI8MAtO1jnjrS3R4ZMkujweUolfiBrnmVyt6tzMtNjqVOZ/ j5A5s8HHqDmQwNn2DCr/SZMv/+oq/LhEhgIDapq8bmyIijX6P12Sij8N4KsMNwt4 LErSVRpDNKwE9W0sAHOMPkE+0K3ZAaSLRLZairVPoU8mvSuOA0BAh/pWv4gReTSh MgOtZj/GnWoJY3m77Mny4Cpgvpxcj+o= -----END CERTIFICATE-----Generated at Wed Jul 29 07:12:05 2026 by rpki-client