$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6fa250f-d699-3709-8967-2ba67be444e1.roa File: d6fa250f-d699-3709-8967-2ba67be444e1.roa (raw, json) Hash identifier: jaWTRG6+mDQA6ob75JYWt9/2r1L5uvrA1Fsh3JwMw2o= Subject key identifier: 5F:74:F0:42:BF:E0:7A:A7:05:6D:19:58:82:F1:3D:B3:09:D3:42:39 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA795AA1CDDF4E6C0BFDE3270 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6fa250f-d699-3709-8967-2ba67be444e1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 173.19.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:aa:1c:dd:f4:e6:c0:bf:de:32:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b2f9e8ba-53a2-4506-ae16-64c532f7f7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c7:fb:30:2f:73:00:90:0e:5f:fa:7b:21:b8: 46:ec:5f:ae:4d:c5:b4:e9:22:26:8e:9b:56:eb:e3: 08:03:87:e9:97:00:98:df:94:6e:e3:0b:23:d4:5e: 3d:6c:14:30:b0:98:ce:dc:06:56:13:8a:77:77:d0: 97:1d:9e:84:c3:52:c9:eb:16:7f:a3:61:48:73:06: f7:52:6c:05:36:c5:cd:d3:ea:9f:3a:67:98:84:08: 04:4e:7a:2a:8f:55:f7:3c:d8:18:0a:ec:00:60:a3: ba:5c:57:9a:7c:e3:4e:1c:db:99:ab:c0:df:ce:36: 26:51:d3:c0:e8:78:3f:98:c2:a1:c4:6d:89:9b:98: 58:72:25:11:2e:26:dd:3d:cd:a5:63:66:4e:0a:42: 8b:1e:f6:2f:f0:c9:e5:5e:16:b5:91:8b:0d:90:b9: 01:d0:05:04:2a:ef:32:a4:81:2e:be:06:3a:0d:04: ba:30:cd:09:d3:d0:5b:88:6e:cd:e6:b8:2f:cf:4b: b0:12:c5:2b:4e:ac:ac:16:4a:2a:da:9c:0d:eb:b7: b1:42:80:75:50:57:50:2d:4c:d3:f5:da:ef:2d:a4: 46:70:6d:22:e4:2b:35:58:87:ca:8c:9c:86:ab:8e: d5:9b:12:a7:d5:95:35:22:3b:50:d5:42:9f:3d:48: 06:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:74:F0:42:BF:E0:7A:A7:05:6D:19:58:82:F1:3D:B3:09:D3:42:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6fa250f-d699-3709-8967-2ba67be444e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.19.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:2c:8d:8e:ce:66:44:c6:1a:3d:05:e9:f5:df:5e:4f:7d:46: 93:89:51:a9:54:41:68:48:3d:55:a4:a3:58:15:f7:ae:af:72: 49:e1:3e:7c:cb:44:42:43:c8:6d:5b:1d:e9:3a:e1:3d:98:35: b7:b1:fa:ac:64:90:c8:8d:4d:2c:8d:40:95:cd:a1:ed:f6:7c: 97:13:a0:fb:64:74:19:04:07:40:e4:4f:34:35:9e:00:85:ca: 85:73:ba:1b:51:b7:49:fd:af:36:4e:a6:64:24:c9:e4:9a:f7: 06:62:f0:00:2b:91:3c:4d:e1:92:72:9c:cd:e4:0c:54:71:40: 9a:17:60:12:b8:d4:5c:eb:71:46:97:75:9c:07:6f:f6:e4:69: b0:b5:55:a1:d7:e4:24:22:e7:dd:f0:c7:88:f7:a0:5d:aa:32: 57:d2:1f:41:c5:41:be:f5:71:86:8a:82:38:32:e9:c1:0c:bb: 1a:fc:0e:eb:80:8f:66:26:81:bf:16:cf:1c:ea:d3:b4:23:f4: 13:7a:dc:1c:7e:74:ef:31:9f:3e:e1:87:f9:51:51:ff:23:8a: b2:a0:10:9f:ae:4a:52:35:f2:de:07:37:63:d9:d5:51:88:97: 3e:37:39:6e:55:5e:48:88:ff:46:e3:71:08:b1:82:1a:6b:03: 65:fe:0a:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlaoc3fTmwL/eMnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjJmOWU4YmEtNTNhMi00NTA2LWFlMTYtNjRjNTMyZjdmN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcf7MC9zAJAOX/p7IbhG7F+uTcW06SImjptW 6+MIA4fplwCY35Ru4wsj1F49bBQwsJjO3AZWE4p3d9CXHZ6Ew1LJ6xZ/o2FIcwb3 UmwFNsXN0+qfOmeYhAgETnoqj1X3PNgYCuwAYKO6XFeafONOHNuZq8DfzjYmUdPA 6Hg/mMKhxG2Jm5hYciURLibdPc2lY2ZOCkKLHvYv8MnlXha1kYsNkLkB0AUEKu8y pIEuvgY6DQS6MM0J09BbiG7N5rgvz0uwEsUrTqysFkoq2pwN67exQoB1UFdQLUzT 9drvLaRGcG0i5Cs1WIfKjJyGq47VmxKn1ZU1IjtQ1UKfPUgG7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF908EK/4HqnBW0ZWILxPbMJ00I5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDZmYTI1MGYtZDY5OS0z NzA5LTg5NjctMmJhNjdiZTQ0NGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8sjY7OZkTGGj0F6fXfXk99RpOJUalUQWhIPVWko1gV966vcknhPnzL REJDyG1bHek64T2YNbex+qxkkMiNTSyNQJXNoe32fJcToPtkdBkEB0DkTzQ1ngCF yoVzuhtRt0n9rzZOpmQkyeSa9wZi8AArkTxN4ZJynM3kDFRxQJoXYBK41FzrcUaX dZwHb/bkabC1VaHX5CQi593wx4j3oF2qMlfSH0HFQb71cYaKgjgy6cEMuxr8DuuA j2Ymgb8Wzxzq07Qj9BN63Bx+dO8xnz7hh/lRUf8jirKgEJ+uSlI18t4HN2PZ1VGI lz43OW5VXkiI/0bjcQixghprA2X+CsA= -----END CERTIFICATE-----Generated at Wed Sep 23 02:34:08 2026 by rpki-client