$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbe85aba-8774-3304-9126-dcff091f7a5e.roa File: cbe85aba-8774-3304-9126-dcff091f7a5e.roa (raw, json) Hash identifier: MjfXvaXXvP9WMLE7cLgqQdRwjbdovpEJgHUpACToAzU= Subject key identifier: 2E:3C:77:71:56:35:84:4D:EC:E7:48:B2:00:03:77:26:82:C6:64:AC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA7876537B357EB7AEC5ADE40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbe85aba-8774-3304-9126-dcff091f7a5e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 173.20.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:65:37:b3:57:eb:7a:ec:5a:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=81e85038-c472-45f9-92e6-3b3b2f3b2ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:44:bd:2e:96:35:b4:ad:a1:a2:dc:b2:82: 84:41:40:21:35:55:52:c6:84:e2:60:04:f8:84:76: 16:cd:12:5c:e2:27:df:5c:4c:0f:f4:46:e3:c1:44: 2e:3b:c3:5d:73:9d:15:4c:c0:20:0e:e6:d9:1b:f6: 06:62:9e:2b:89:d4:ca:74:6d:f8:6d:01:c5:eb:90: b7:15:a1:fb:79:8d:2b:28:75:f7:af:1e:4f:3a:40: 39:1b:0b:10:18:b4:b3:ac:db:93:c1:f6:79:43:c1: b6:1b:56:40:87:11:bc:e3:07:64:df:fb:4b:a8:64: ba:1e:2d:4e:00:9f:21:21:60:f5:ea:47:82:f2:ba: 0d:cf:55:12:8d:a5:9b:1d:99:a3:0c:38:a4:3b:01: 2f:b1:f4:32:69:a3:69:c5:ad:04:c3:5a:73:dc:9d: a6:31:85:ff:a4:7c:06:9a:c7:ea:a4:79:fb:2e:73: e8:9b:d8:55:0e:e9:38:25:08:26:0a:f1:ba:a7:46: bc:81:54:26:08:90:98:95:92:c4:fc:b3:b9:44:a1: 03:ce:61:82:6f:8a:c6:b7:09:e1:e1:5e:f2:e5:3e: 4d:08:9d:a2:05:cb:b6:c0:f5:4b:46:87:24:f0:90: af:7c:f0:9a:26:c1:54:d3:58:9f:29:47:c3:34:a1: a0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3C:77:71:56:35:84:4D:EC:E7:48:B2:00:03:77:26:82:C6:64:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cbe85aba-8774-3304-9126-dcff091f7a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:7f:2f:b8:f4:29:c6:3b:a1:6e:3d:2e:d8:22:ae:42:cd:ec: d9:fb:99:e9:ed:c3:42:78:83:62:86:1f:27:e4:14:91:e0:93: c9:f8:95:24:ec:1b:67:50:9e:5f:06:9f:f9:aa:06:8a:0d:26: 8f:9b:4b:b5:87:e9:89:23:25:b5:88:ea:15:2a:05:21:a6:da: 49:49:6b:46:4e:ea:4c:f1:b6:91:be:c1:ae:ec:c7:0d:87:f2: c4:dc:74:01:89:40:d1:f0:16:36:2a:3c:99:5c:29:2f:4c:37: 72:c8:73:df:6d:87:af:b6:e5:42:56:f6:f6:5c:43:c8:63:35: 62:67:62:1a:91:e8:de:fd:d6:0d:f3:e1:7f:7b:54:56:21:fa: 86:6f:bc:60:ec:99:fb:26:49:35:f3:53:7f:3d:91:93:57:93: 91:8c:85:1b:bb:25:a5:83:9d:31:35:9e:fb:11:1b:08:5b:55: 8a:62:8a:db:84:87:32:36:8b:36:8d:f6:13:30:c5:d4:cc:be: 54:e5:82:80:88:99:fe:b7:f5:a2:89:16:6d:f2:03:13:a1:72: fb:a6:c3:e6:1b:27:75:71:bf:fd:a5:ad:84:8c:4f:73:58:6a: 6d:35:d4:cd:a7:f5:ca:eb:e3:13:d6:b8:34:06:b3:92:eb:8b: c6:3d:5c:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh2U3s1freuxa3kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODFlODUwMzgtYzQ3Mi00NWY5LTkyZTYtM2IzYjJmM2IyZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLxEvS6WNbStoaLcsoKEQUAhNVVSxoTiYAT4 hHYWzRJc4iffXEwP9EbjwUQuO8Ndc50VTMAgDubZG/YGYp4ridTKdG34bQHF65C3 FaH7eY0rKHX3rx5POkA5GwsQGLSzrNuTwfZ5Q8G2G1ZAhxG84wdk3/tLqGS6Hi1O AJ8hIWD16keC8roNz1USjaWbHZmjDDikOwEvsfQyaaNpxa0Ew1pz3J2mMYX/pHwG msfqpHn7LnPom9hVDuk4JQgmCvG6p0a8gVQmCJCYlZLE/LO5RKEDzmGCb4rGtwnh 4V7y5T5NCJ2iBcu2wPVLRock8JCvfPCaJsFU01ifKUfDNKGguwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC48d3FWNYRN7OdIsgADdyaCxmSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2JlODVhYmEtODc3NC0z MzA0LTkxMjYtZGNmZjA5MWY3YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR/L7j0KcY7oW49LtgirkLN7Nn7mentw0J4g2KGHyfkFJHgk8n4lSTs G2dQnl8Gn/mqBooNJo+bS7WH6YkjJbWI6hUqBSGm2klJa0ZO6kzxtpG+wa7sxw2H 8sTcdAGJQNHwFjYqPJlcKS9MN3LIc99th6+25UJW9vZcQ8hjNWJnYhqR6N791g3z 4X97VFYh+oZvvGDsmfsmSTXzU389kZNXk5GMhRu7JaWDnTE1nvsRGwhbVYpiituE hzI2izaN9hMwxdTMvlTlgoCImf639aKJFm3yAxOhcvumw+YbJ3Vxv/2lrYSMT3NY am011M2n9crr4xPWuDQGs5Lri8Y9XOc= -----END CERTIFICATE-----Generated at Wed Jul 29 04:54:19 2026 by rpki-client