$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd77d831-d6d5-3833-b55c-0448667f6a8f.roa File: bd77d831-d6d5-3833-b55c-0448667f6a8f.roa (raw, json) Hash identifier: 7B3PcxPuA3cfjjf8nzXaoa4zt86r058l3OHi26pWmu8= Subject key identifier: 99:9F:21:D9:DB:BE:F3:1C:17:44:32:B9:11:C7:76:64:18:22:68:5A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584ECE9C6DBB309B68D0886A5E68 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd77d831-d6d5-3833-b55c-0448667f6a8f.roa Signing time: Wed 12 Aug 2026 01:00:11 +0000 ROA not before: Wed 12 Aug 2026 01:00:11 +0000 ROA not after: Tue 10 Nov 2026 02:00:11 +0000 asID: 19905 IP address blocks: 173.19.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ce:9c:6d:bb:30:9b:68:d0:88:6a:5e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 12 01:00:11 2026 GMT Not After : Nov 10 02:00:11 2026 GMT Subject: CN=5cf3c47e-48c0-4455-a552-bf853effe0ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:86:56:a0:c5:20:5c:85:2f:9a:85:a7:b4:7a: 18:4b:6c:9f:c3:d8:f8:66:b8:74:11:23:86:20:6d: a2:4b:4d:a1:e1:92:3f:fa:f7:07:71:22:9e:b1:48: 2f:1d:14:f4:5c:40:f4:dc:60:b1:0d:c1:40:cb:3a: 43:8b:e9:92:9b:6a:58:0a:34:a5:39:29:1d:d6:0f: a5:b2:ad:cd:e9:e3:34:43:19:ed:32:a8:64:b4:96: 29:fa:be:91:4f:bf:a1:06:fb:2e:df:24:42:de:ae: ac:57:74:11:72:cd:59:12:0a:28:fe:92:2f:41:48: 28:04:0d:44:1e:53:87:28:7c:8b:97:48:bc:31:e2: 8c:44:37:de:40:6b:80:0b:36:e3:48:ea:f8:e9:a2: 69:56:9a:d9:56:bf:f8:7a:c0:15:cc:25:67:8b:f1: 71:7a:ef:44:15:e2:f0:1c:b5:31:31:b4:7a:93:06: a1:dc:46:2e:73:86:16:ac:61:87:fe:95:71:01:cc: 82:cd:44:ef:b5:08:38:c5:fb:c1:7f:c1:d9:76:a8: c1:a1:45:76:67:ec:7f:9e:0f:33:46:93:c9:85:a6: 9b:9f:87:b8:99:4c:46:db:41:87:af:97:98:59:b0: 26:e4:87:41:63:21:5f:e2:d0:d8:ab:69:a2:f0:95: f0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9F:21:D9:DB:BE:F3:1C:17:44:32:B9:11:C7:76:64:18:22:68:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bd77d831-d6d5-3833-b55c-0448667f6a8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:46:cc:a8:a9:5e:1d:72:73:b1:6b:8e:db:4e:4c:7d:6a:07: 6f:fa:47:76:d9:36:00:0f:8f:84:8c:d5:69:bc:37:04:8b:86: 12:19:a2:11:82:d2:db:43:8c:d0:d6:62:2c:30:ed:cc:de:c6: 49:50:2f:26:a9:d7:5b:03:fa:cd:8a:7c:8b:4a:63:ca:4e:de: cf:da:2f:9c:66:7b:4a:9e:bd:de:39:27:8c:17:39:95:69:43: 12:ee:94:a7:f5:6c:8d:6c:14:e5:e0:ec:ec:76:d1:f8:26:14: 6b:de:c0:f1:01:b8:25:5e:0f:93:15:de:3a:61:b8:12:84:98: ae:fb:51:f7:69:69:3d:0c:69:99:da:f3:b1:2d:80:98:1c:9d: d6:47:e7:99:92:4d:33:80:d1:31:49:04:b6:83:a2:37:50:f5: d4:6b:1f:e6:52:5e:05:cf:69:58:70:9b:ce:6e:fa:14:ca:ac: ab:d9:ce:a6:9d:ff:31:5d:99:de:a5:ea:85:f5:41:3c:b2:84: ea:14:38:b4:83:78:dd:a1:d0:d6:48:48:57:ba:40:32:c5:12: a2:a3:c8:9b:84:26:1c:a5:ed:1a:55:97:70:4c:6b:b4:c0:8d: ef:d0:22:5d:5e:6c:f8:f6:46:54:c1:1a:d6:36:8d:cb:f9:0d: 12:8f:e5:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7OnG27MJto0IhqXmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgxMjAxMDAxMVoXDTI2MTExMDAyMDAxMVowLzEtMCsGA1UEAxMk NWNmM2M0N2UtNDhjMC00NDU1LWE1NTItYmY4NTNlZmZlMGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIZWoMUgXIUvmoWntHoYS2yfw9j4Zrh0ESOG IG2iS02h4ZI/+vcHcSKesUgvHRT0XED03GCxDcFAyzpDi+mSm2pYCjSlOSkd1g+l sq3N6eM0QxntMqhktJYp+r6RT7+hBvsu3yRC3q6sV3QRcs1ZEgoo/pIvQUgoBA1E HlOHKHyLl0i8MeKMRDfeQGuACzbjSOr46aJpVprZVr/4esAVzCVni/Fxeu9EFeLw HLUxMbR6kwah3EYuc4YWrGGH/pVxAcyCzUTvtQg4xfvBf8HZdqjBoUV2Z+x/ng8z RpPJhaabn4e4mUxG20GHr5eYWbAm5IdBYyFf4tDYq2mi8JXwXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmfIdnbvvMcF0QyuRHHdmQYImhaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmQ3N2Q4MzEtZDZkNS0z ODMzLWI1NWMtMDQ0ODY2N2Y2YThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRMIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9GzKipXh1yc7FrjttOTH1qB2/6R3bZNgAPj4SM1Wm8NwSLhhIZohGC 0ttDjNDWYiww7czexklQLyap11sD+s2KfItKY8pO3s/aL5xme0qevd45J4wXOZVp QxLulKf1bI1sFOXg7Ox20fgmFGvewPEBuCVeD5MV3jphuBKEmK77UfdpaT0MaZna 87EtgJgcndZH55mSTTOA0TFJBLaDojdQ9dRrH+ZSXgXPaVhwm85u+hTKrKvZzqad /zFdmd6l6oX1QTyyhOoUOLSDeN2h0NZISFe6QDLFEqKjyJuEJhyl7RpVl3BMa7TA je/QIl1ebPj2RlTBGtY2jcv5DRKP5dI= -----END CERTIFICATE-----Generated at Tue Sep 22 00:40:31 2026 by rpki-client