$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf83d148-34e4-3e7e-bbac-94a24746a60f.roa File: cf83d148-34e4-3e7e-bbac-94a24746a60f.roa (raw, json) Hash identifier: H9UGq8ZBes+I3k7bL5zqvOYrB9VJzn3WRZVDPFXhAns= Subject key identifier: 24:E9:E6:B4:D7:14:D2:51:AC:8F:3D:66:CE:EF:85:BB:C2:A2:B1:B7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA78861C339AC16133B7D2680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf83d148-34e4-3e7e-bbac-94a24746a60f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 173.22.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:61:c3:39:ac:16:13:3b:7d:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e84da88a-3bc9-4e32-9590-6726f2d3bbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:cb:75:0d:2a:af:67:75:99:eb:d5:d0:22: e4:cf:01:fe:da:f2:3e:b4:ac:83:80:1a:ea:46:5d: fb:c6:13:3c:0d:9b:49:b8:04:2b:f7:e1:4c:c4:a5: d5:66:b3:40:ae:b5:a5:4b:16:15:30:09:b0:e7:7a: b1:12:e4:15:13:f9:cb:03:df:7c:64:92:ac:82:5a: 4b:a4:15:d5:6b:91:18:49:e4:13:eb:78:58:80:a4: c2:4f:b5:5b:6f:5c:a0:93:ea:00:9c:bc:79:ca:c9: 2d:9d:d8:93:23:2c:ce:bb:f7:0c:a9:86:30:a0:d2: ab:30:49:71:90:2f:70:ea:61:93:b1:0e:bc:c7:92: cf:43:0c:0f:8e:83:07:13:be:94:49:9f:12:10:88: d1:44:aa:57:b1:f3:89:6b:eb:91:62:a7:70:3e:93: 72:c2:2d:d7:51:b1:9b:3c:59:3f:9f:02:ad:e6:8e: 24:74:93:73:b2:3e:c2:07:92:4e:40:99:3b:a7:73: 28:91:88:a2:f9:8d:1f:93:26:0f:94:4a:2a:45:ca: 29:69:8a:83:ba:0f:f8:43:bb:9d:d7:7c:11:b0:b9: 5b:89:09:e0:33:1c:46:ca:e7:05:12:c1:37:85:64: 89:b8:23:02:5d:ed:0a:10:ac:08:41:df:db:ee:d7: 81:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E9:E6:B4:D7:14:D2:51:AC:8F:3D:66:CE:EF:85:BB:C2:A2:B1:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cf83d148-34e4-3e7e-bbac-94a24746a60f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:dd:71:ab:f1:8e:f8:1c:c9:04:9d:37:b4:a2:58:44:04:ae: a1:cf:68:1c:5d:9a:df:75:8a:6d:5e:da:13:54:2f:a7:23:52: d0:74:32:57:e2:63:3c:45:9a:ac:c6:24:97:cb:73:c3:8c:30: ed:a0:35:e9:89:d0:dd:f6:42:15:d5:84:2e:cb:5a:6f:2c:34: ec:d2:44:9c:22:60:7e:9e:d3:a5:b0:5c:a8:ff:50:29:8a:e3: fc:db:f2:98:37:d8:7a:f6:b4:50:e4:ce:53:8b:3e:05:91:11: 99:59:64:2e:89:0d:6b:33:4c:76:85:9e:6d:c6:24:fc:be:1f: f3:7b:29:1b:e9:5f:ac:fa:17:90:a9:bb:b0:6b:1f:38:29:2b: a9:9a:ed:05:d7:b0:ad:91:40:d6:83:57:48:91:80:14:17:ab: bd:b5:27:d0:ee:b7:bc:15:37:b2:f3:30:27:25:c0:e7:5e:c6: 41:9c:7b:cc:7d:ce:8c:58:c5:5f:25:30:27:42:cc:92:fd:4f: fe:f4:5c:c5:05:af:b2:40:c8:b5:03:f1:59:e9:37:e7:11:75: 08:90:9d:50:48:b7:4a:45:b1:02:2a:38:f1:ac:d5:e8:03:76: 08:84:04:69:c6:28:94:28:d6:46:75:d6:5c:2f:4f:42:52:e5: 83:56:cc:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niGHDOawWEzt9JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTg0ZGE4OGEtM2JjOS00ZTMyLTk1OTAtNjcyNmYyZDNiYmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP/LdQ0qr2d1mevV0CLkzwH+2vI+tKyDgBrq Rl37xhM8DZtJuAQr9+FMxKXVZrNArrWlSxYVMAmw53qxEuQVE/nLA998ZJKsglpL pBXVa5EYSeQT63hYgKTCT7Vbb1ygk+oAnLx5ysktndiTIyzOu/cMqYYwoNKrMElx kC9w6mGTsQ68x5LPQwwPjoMHE76USZ8SEIjRRKpXsfOJa+uRYqdwPpNywi3XUbGb PFk/nwKt5o4kdJNzsj7CB5JOQJk7p3MokYii+Y0fkyYPlEoqRcopaYqDug/4Q7ud 13wRsLlbiQngMxxGyucFEsE3hWSJuCMCXe0KEKwIQd/b7teBZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTp5rTXFNJRrI89Zs7vhbvCorG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2Y4M2QxNDgtMzRlNC0z ZTdlLWJiYWMtOTRhMjQ3NDZhNjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRaDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzdcavxjvgcyQSdN7SiWEQErqHPaBxdmt91im1e2hNUL6cjUtB0Mlfi YzxFmqzGJJfLc8OMMO2gNemJ0N32QhXVhC7LWm8sNOzSRJwiYH6e06WwXKj/UCmK 4/zb8pg32Hr2tFDkzlOLPgWREZlZZC6JDWszTHaFnm3GJPy+H/N7KRvpX6z6F5Cp u7BrHzgpK6ma7QXXsK2RQNaDV0iRgBQXq721J9Dut7wVN7LzMCclwOdexkGce8x9 zoxYxV8lMCdCzJL9T/70XMUFr7JAyLUD8VnpN+cRdQiQnVBIt0pFsQIqOPGs1egD dgiEBGnGKJQo1kZ11lwvT0JS5YNWzHs= -----END CERTIFICATE-----Generated at Wed Jul 29 03:29:06 2026 by rpki-client