$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/708766bd-dad8-31a3-a3ad-c837a0328717.roa File: 708766bd-dad8-31a3-a3ad-c837a0328717.roa (raw, json) Hash identifier: hL7h9AI9FrkN3YGE755Qv7ijyWLcZjy3EZKqvCfe/u0= Subject key identifier: 08:76:4A:71:D1:37:6F:70:C7:79:CC:A9:F4:FE:FE:EE:27:82:13:58 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E0436240FF0D8EE164CF58480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/708766bd-dad8-31a3-a3ad-c837a0328717.roa Signing time: Sun 31 May 2026 13:00:10 +0000 ROA not before: Sun 31 May 2026 13:00:10 +0000 ROA not after: Sat 29 Aug 2026 13:00:10 +0000 asID: 19905 IP address blocks: 173.29.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:04:36:24:0f:f0:d8:ee:16:4c:f5:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 31 13:00:10 2026 GMT Not After : Aug 29 13:00:10 2026 GMT Subject: CN=10a9231c-2360-424c-8606-4f044f0162d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b9:8a:ff:4a:ab:8e:2f:b3:e9:fb:28:f6:4e: 06:d8:3b:82:6b:90:c8:94:81:93:ff:9b:a7:8b:ec: a2:90:e7:ab:b6:0d:1c:11:aa:7e:5f:52:14:2a:39: 25:cd:c3:16:29:5a:74:d4:55:4d:8c:94:0b:44:e7: a8:4e:48:95:3c:ed:3e:68:9a:77:b6:57:ad:85:a5: b8:6d:73:64:97:a0:9f:97:c3:26:0b:c1:1d:99:ed: 7d:9a:0d:6b:a1:73:d6:50:d6:f0:8c:ae:cb:d9:e9: 8d:26:93:16:25:ba:2b:76:dc:83:9f:fc:42:cd:29: 47:66:8a:25:40:7f:8b:a0:04:a0:16:f2:46:2b:28: 33:4e:c5:fe:92:07:4a:66:66:76:90:7f:7e:76:d7: ad:4b:1c:0e:ba:1e:ed:af:1d:5c:78:31:0f:89:9e: 7f:1e:8d:3d:89:41:94:d0:a1:37:8f:e3:a4:11:12: c0:9d:cd:d8:21:ae:c8:9e:27:28:16:7d:e8:02:af: ad:59:ad:42:7d:fc:e3:12:e2:9b:f7:a8:af:a8:00: 75:3f:30:aa:37:0e:6d:ce:1a:1b:b7:b8:37:ca:68: fa:5d:a7:93:47:1e:4c:fb:94:de:83:21:d5:7e:27: a1:de:5d:78:75:36:6b:75:4a:b3:c2:69:cf:62:07: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:76:4A:71:D1:37:6F:70:C7:79:CC:A9:F4:FE:FE:EE:27:82:13:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/708766bd-dad8-31a3-a3ad-c837a0328717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b4:85:bd:55:77:c1:53:21:91:d2:83:be:1a:07:12:2c:25: 34:8a:fa:99:77:78:c6:ad:38:37:ee:2a:2b:3c:77:5e:1a:ec: ad:94:2b:07:77:72:e0:41:06:6f:69:e3:df:38:82:33:bc:85: 26:28:11:a2:04:d8:f7:6c:4d:9a:32:2a:9c:da:8a:df:f9:4d: b8:ea:9c:57:e3:a4:77:12:0c:16:2f:8a:3c:40:49:39:39:a6: 6d:98:7b:6e:65:cf:50:ce:e7:3c:75:e1:65:b7:fe:2b:a1:f5: 0d:9b:30:f3:e0:99:2e:64:26:e3:0c:50:69:a8:14:05:1c:ca: 4f:e0:61:c7:ea:b7:f5:52:fd:47:72:08:72:1f:00:00:ec:11: 06:37:d4:c2:0b:b3:38:cf:80:93:16:7d:f7:ee:e1:58:82:3c: 33:87:bc:01:cf:13:3c:e4:b5:b2:fc:c9:5e:b2:51:fa:81:b6: 12:87:1c:65:13:12:f7:39:54:8d:71:b0:4e:bd:94:58:ba:8c: 5b:5e:06:07:42:e0:54:83:b5:bc:42:3f:9f:0d:ea:6f:0d:4b: 2c:54:09:38:2e:8a:61:6d:9b:55:c1:04:62:8d:f7:7d:6b:6b: c2:ff:b3:ed:cd:10:40:c4:00:2b:42:a3:27:cf:57:3a:52:7d: 49:08:b8:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ENiQP8NjuFkz1hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUzMTEzMDAxMFoXDTI2MDgyOTEzMDAxMFowLzEtMCsGA1UEAxMk MTBhOTIzMWMtMjM2MC00MjRjLTg2MDYtNGYwNDRmMDE2MmQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bmK/0qrji+z6fso9k4G2DuCa5DIlIGT/5un i+yikOertg0cEap+X1IUKjklzcMWKVp01FVNjJQLROeoTkiVPO0+aJp3tlethaW4 bXNkl6Cfl8MmC8Edme19mg1roXPWUNbwjK7L2emNJpMWJbordtyDn/xCzSlHZool QH+LoASgFvJGKygzTsX+kgdKZmZ2kH9+dtetSxwOuh7trx1ceDEPiZ5/Ho09iUGU 0KE3j+OkERLAnc3YIa7InicoFn3oAq+tWa1CffzjEuKb96ivqAB1PzCqNw5tzhob t7g3ymj6XaeTRx5M+5TegyHVfieh3l14dTZrdUqzwmnPYgeCewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAh2SnHRN29wx3nMqfT+/u4nghNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzA4NzY2YmQtZGFkOC0z MWEzLWEzYWQtYzgzN2EwMzI4NzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFu0hb1Vd8FTIZHSg74aBxIsJTSK+pl3eMatODfuKis8d14a7K2UKwd3 cuBBBm9p4984gjO8hSYoEaIE2PdsTZoyKpzait/5TbjqnFfjpHcSDBYvijxASTk5 pm2Ye25lz1DO5zx14WW3/iuh9Q2bMPPgmS5kJuMMUGmoFAUcyk/gYcfqt/VS/Udy CHIfAADsEQY31MILszjPgJMWfffu4ViCPDOHvAHPEzzktbL8yV6yUfqBthKHHGUT Evc5VI1xsE69lFi6jFteBgdC4FSDtbxCP58N6m8NSyxUCTguimFtm1XBBGKN931r a8L/s+3NEEDEACtCoyfPVzpSfUkIuPw= -----END CERTIFICATE-----Generated at Sat Jun 13 19:51:18 2026 by rpki-client