$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdaa0aba-b515-360a-8168-d64f29315153.roa File: bdaa0aba-b515-360a-8168-d64f29315153.roa (raw, json) Hash identifier: HxcgRlomMRSAV1FLLhNXs3ysXlBS9/age+rr2g9PFaM= Subject key identifier: 2B:63:F9:88:03:49:E7:92:90:16:9E:8E:74:DC:69:52:BF:0D:2D:27 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D75D52DCEA416AA41A067EE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdaa0aba-b515-360a-8168-d64f29315153.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 19905 IP address blocks: 173.29.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:2d:ce:a4:16:aa:41:a0:67:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=c8497a75-5af3-4e10-8330-b15566b16f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:22:cf:0a:0d:ff:1a:96:96:31:95:e7:63:4d: 9a:74:8f:fa:62:b2:3e:9e:9b:e6:cb:d5:d8:b5:9e: b9:10:c1:32:5d:b4:f9:cf:8a:00:ce:db:65:a8:20: 4d:40:37:b1:f0:e5:0d:5e:d4:b4:0c:23:3c:a6:12: c0:55:e3:11:ec:a8:aa:85:a0:dc:4d:c9:ce:a8:34: 8f:e1:be:3a:4a:55:b5:e0:25:72:15:7c:e0:7e:74: c7:82:2b:b2:1e:dc:11:1d:f7:d7:5b:da:10:98:cb: 26:4b:52:1e:80:74:d8:87:39:c8:29:a3:1b:f7:7d: c4:4f:25:16:39:53:38:03:77:5f:f9:df:30:31:fa: d7:ff:b2:7b:77:a0:13:bc:04:c4:13:d0:8c:60:20: 39:4f:a1:b2:fc:d8:6c:52:31:25:95:2b:7c:9b:09: 87:b5:6f:22:b6:0b:c0:ef:d5:09:16:a7:39:b1:f8: 49:b4:1b:a9:2b:3b:af:5c:f5:bf:dd:a7:af:3b:5a: 18:09:5a:96:d6:92:70:5c:e3:09:5e:f7:c5:9a:21: aa:53:e7:64:a9:d9:17:c0:94:e8:49:75:c5:f6:cc: f0:b8:61:d0:69:8c:55:7e:09:db:94:68:ce:ec:ad: 05:b4:27:c5:15:b1:c1:6f:37:32:84:7f:2b:f2:95: 51:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:63:F9:88:03:49:E7:92:90:16:9E:8E:74:DC:69:52:BF:0D:2D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdaa0aba-b515-360a-8168-d64f29315153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:cf:98:c3:e3:84:f0:40:19:f1:c3:a1:06:11:cd:68:b8:38: d5:89:22:49:f3:e9:68:76:67:14:f7:c9:7f:7f:04:79:8a:c2: 80:4c:c1:f5:fb:b3:b5:f1:8e:90:9e:a5:fe:18:93:50:5c:ad: 5f:64:86:8b:77:7b:cd:55:f0:b8:00:cf:70:67:a0:d4:ae:72: 28:46:a2:63:d7:ce:80:5a:85:67:69:7c:52:bd:c9:1e:d0:22: f6:de:6a:d7:3a:49:5c:1e:9e:61:81:75:ec:34:f4:a0:d0:8d: fd:16:ca:12:40:9c:b1:ce:64:10:69:bf:b5:b8:b6:59:88:3c: 0b:06:f3:a6:ae:a2:f8:7d:9c:3b:6d:8b:1b:71:f1:79:f9:39: e1:c4:ae:c2:eb:4a:01:6c:87:6a:31:3a:94:d9:85:9c:23:4e: f1:c2:99:54:40:b2:66:c9:81:1f:7a:b8:71:72:e5:d7:39:9e: 07:cd:98:80:04:33:9c:a8:3d:2f:b2:37:4f:64:6c:1d:43:2d: ae:55:d0:4e:56:0c:62:46:bb:01:eb:72:3e:17:84:1b:84:02: 65:dc:e5:0a:77:01:7b:c4:74:fd:f4:f8:fe:87:18:5c:2a:85: b1:2e:6f:d5:a4:d2:bf:aa:1f:34:07:9c:15:a0:16:28:12:8d: 44:2c:6e:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111S3OpBaqQaBn7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk Yzg0OTdhNzUtNWFmMy00ZTEwLTgzMzAtYjE1NTY2YjE2ZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCLPCg3/GpaWMZXnY02adI/6YrI+npvmy9XY tZ65EMEyXbT5z4oAzttlqCBNQDex8OUNXtS0DCM8phLAVeMR7KiqhaDcTcnOqDSP 4b46SlW14CVyFXzgfnTHgiuyHtwRHffXW9oQmMsmS1IegHTYhznIKaMb933ETyUW OVM4A3df+d8wMfrX/7J7d6ATvATEE9CMYCA5T6Gy/NhsUjEllSt8mwmHtW8itgvA 79UJFqc5sfhJtBupKzuvXPW/3aevO1oYCVqW1pJwXOMJXvfFmiGqU+dkqdkXwJTo SXXF9szwuGHQaYxVfgnblGjO7K0FtCfFFbHBbzcyhH8r8pVRNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtj+YgDSeeSkBaejnTcaVK/DS0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmRhYTBhYmEtYjUxNS0z NjBhLTgxNjgtZDY0ZjI5MzE1MTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvPmMPjhPBAGfHDoQYRzWi4ONWJIknz6Wh2ZxT3yX9/BHmKwoBMwfX7 s7XxjpCepf4Yk1BcrV9khot3e81V8LgAz3BnoNSucihGomPXzoBahWdpfFK9yR7Q Ivbeatc6SVwenmGBdew09KDQjf0WyhJAnLHOZBBpv7W4tlmIPAsG86auovh9nDtt ixtx8Xn5OeHErsLrSgFsh2oxOpTZhZwjTvHCmVRAsmbJgR96uHFy5dc5ngfNmIAE M5yoPS+yN09kbB1DLa5V0E5WDGJGuwHrcj4XhBuEAmXc5Qp3AXvEdP30+P6HGFwq hbEub9Wk0r+qHzQHnBWgFigSjUQsblE= -----END CERTIFICATE-----Generated at Fri Apr 17 04:03:20 2026 by rpki-client