$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be170823-1607-31e2-ae50-fd110376686b.roa File: be170823-1607-31e2-ae50-fd110376686b.roa (raw, json) Hash identifier: k/49Qws+S3UnZ1x564OErH9ZJtAJcKHUkxZasNEkRYg= Subject key identifier: 1A:81:99:53:2B:18:3A:52:0E:EB:00:75:BD:D4:87:A3:5B:42:3E:92 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA787EBEAC9118C5B33FF8400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be170823-1607-31e2-ae50-fd110376686b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 173.29.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:eb:ea:c9:11:8c:5b:33:ff:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f7d5233c-5a74-4181-907f-99ff0b167d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:21:e8:7c:f6:a7:d6:d0:e4:43:5a:b3:fe:03: e9:b9:5a:70:7c:86:81:25:17:32:7c:d5:94:cc:d5: 14:a1:ef:2d:f8:25:0a:f0:d7:4f:99:51:30:82:2d: b0:84:bc:33:8b:07:e1:b8:fd:72:ca:a7:ab:4b:e6: 03:26:a7:d5:30:40:62:f1:69:2a:d6:e5:24:91:8d: 8d:f8:17:7c:02:5e:36:b2:b8:88:45:37:48:31:6f: 61:00:65:dc:06:97:e7:f2:08:55:bd:e1:af:eb:cf: 3d:ce:43:94:3b:03:9d:cf:cd:b0:61:a3:0d:e2:86: a7:d7:7e:0e:fe:18:6c:42:4e:03:63:df:e0:39:10: 7a:41:6e:3b:5d:52:0a:5c:13:71:11:b0:16:cc:73: f2:11:e1:7b:24:3e:99:e1:64:70:51:17:ed:62:bf: f9:31:9b:10:cc:97:23:68:cf:63:86:bb:a2:31:84: 9b:19:68:5a:37:e7:9a:68:e7:dc:ad:cd:40:3f:a1: 45:42:5a:69:d2:1e:7c:1b:03:da:ad:74:e2:95:98: 3b:7a:f8:84:e2:f6:2d:07:8e:45:57:ef:ea:ca:fd: 78:1f:61:d0:59:4e:1c:18:60:0c:a3:a4:d0:a9:f5: cb:ec:9b:dc:41:58:09:a1:e1:ab:09:a4:19:a4:a6: ab:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:81:99:53:2B:18:3A:52:0E:EB:00:75:BD:D4:87:A3:5B:42:3E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be170823-1607-31e2-ae50-fd110376686b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:44:49:dd:8d:c3:82:10:43:92:db:4e:56:87:f1:5e:02:66: fe:55:74:9d:e7:d3:81:50:24:2a:c4:51:30:c9:db:a8:71:e7: 3d:e8:bf:fc:1b:ef:cb:ba:fc:fa:c2:93:61:e5:b8:6c:73:8c: b1:b9:35:4e:4c:db:21:e5:91:32:7c:d5:fa:90:28:b0:0c:f3: b9:76:33:e1:91:4f:9d:c9:06:be:a2:ac:ac:81:2f:55:21:4b: ec:32:06:33:81:12:36:49:c6:9a:eb:bd:cb:32:46:c7:48:77: 90:71:6e:39:f2:00:e5:c1:1f:78:7f:b8:7b:c7:8a:9e:60:32: 32:59:d0:c3:9b:90:e3:34:6c:be:45:21:30:d8:35:21:4c:3d: be:40:0e:be:8c:5e:bb:7e:82:41:70:c2:c9:2a:84:77:aa:65: 9e:94:80:42:7c:16:4e:d5:55:19:62:74:e0:2e:63:ed:79:fb: a6:5e:1f:3b:e5:a5:59:5d:c7:2f:3c:1d:39:92:d0:03:90:8c: 9f:3d:99:b6:5f:b7:c9:90:77:b7:48:2f:86:02:da:13:35:fc: 73:da:e8:fe:ed:e8:bb:fc:ac:f2:6f:d2:ea:d3:ed:d9:ad:41: ae:77:03:6a:42:db:10:b9:a7:78:1d:59:92:03:dd:85:e0:bb: 68:b2:ab:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh+vqyRGMWzP/hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjdkNTIzM2MtNWE3NC00MTgxLTkwN2YtOTlmZjBiMTY3ZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiHofPan1tDkQ1qz/gPpuVpwfIaBJRcyfNWU zNUUoe8t+CUK8NdPmVEwgi2whLwziwfhuP1yyqerS+YDJqfVMEBi8Wkq1uUkkY2N +Bd8Al42sriIRTdIMW9hAGXcBpfn8ghVveGv6889zkOUOwOdz82wYaMN4oan134O /hhsQk4DY9/gORB6QW47XVIKXBNxEbAWzHPyEeF7JD6Z4WRwURftYr/5MZsQzJcj aM9jhruiMYSbGWhaN+eaaOfcrc1AP6FFQlpp0h58GwParXTilZg7eviE4vYtB45F V+/qyv14H2HQWU4cGGAMo6TQqfXL7JvcQVgJoeGrCaQZpKar0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqBmVMrGDpSDusAdb3Uh6NbQj6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmUxNzA4MjMtMTYwNy0z MWUyLWFlNTAtZmQxMTAzNzY2ODZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR2mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlESd2Nw4IQQ5LbTlaH8V4CZv5VdJ3n04FQJCrEUTDJ26hx5z3ov/wb 78u6/PrCk2HluGxzjLG5NU5M2yHlkTJ81fqQKLAM87l2M+GRT53JBr6irKyBL1Uh S+wyBjOBEjZJxprrvcsyRsdId5BxbjnyAOXBH3h/uHvHip5gMjJZ0MObkOM0bL5F ITDYNSFMPb5ADr6MXrt+gkFwwskqhHeqZZ6UgEJ8Fk7VVRlidOAuY+15+6ZeHzvl pVldxy88HTmS0AOQjJ89mbZft8mQd7dIL4YC2hM1/HPa6P7t6Lv8rPJv0urT7dmt Qa53A2pC2xC5p3gdWZID3YXgu2iyqwA= -----END CERTIFICATE-----Generated at Wed Jul 29 04:58:14 2026 by rpki-client