$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa File: 850c851f-a2f0-39ea-8b04-db5609732a44.roa (raw, json) Hash identifier: I1wPKTTAElj+3fEacFYSn/UWXzlBEojnCqJw+sYy8xI= Subject key identifier: BC:B8:DA:08:F2:BB:5E:8C:6B:93:50:D0:78:DC:7C:12:85:50:F7:E2 Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Certificate serial: 010D0C9F4328584D60E50C495089049ED0CE35F0 Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 46979 IP address blocks: 173.225.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:0c:49:50:89:04:9e:d0:ce:35:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=1bbaa747-8a06-4c5e-b476-daaa9c898c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6b:ff:2f:9f:3a:4f:b4:8c:bf:ed:ff:33:e3: 2a:35:ac:e2:1b:05:ba:8a:00:d3:a4:73:65:5a:b2: b4:72:6f:df:ee:94:68:b7:f6:88:20:79:68:43:e4: ce:b5:9f:5f:0b:f2:8c:d4:e1:76:ab:e9:26:3e:ea: c6:09:6d:09:c9:bb:22:56:2d:8f:b2:2f:1b:24:b4: 07:11:82:97:df:94:a0:b4:1f:94:75:9f:80:f3:30: 8c:aa:1d:78:e9:ea:fe:50:11:95:55:23:16:67:d1: a0:26:40:40:8e:8b:51:53:fd:b6:02:b1:e5:6f:07: 59:3a:d3:c0:25:70:3f:55:63:52:cc:b8:95:8a:15: fd:d9:a9:03:29:e1:6a:8b:68:c1:d1:3e:4d:4e:02: 91:3b:13:41:e4:4e:37:0c:6f:b5:d5:1f:26:88:1e: 31:b3:67:1a:02:7c:20:cf:2a:e6:60:f8:a5:38:c2: d8:55:d4:b0:52:20:18:c3:1d:9e:b8:26:f6:85:7d: 56:d4:9e:35:0a:67:31:e7:d0:ee:aa:6d:95:1f:77: f0:4e:c5:6d:42:fd:05:ae:5d:6e:86:b5:89:7d:8c: 8e:13:24:22:48:6c:a9:2b:3a:9d:76:6d:0e:c1:e3: 28:ed:4a:7a:df:27:85:20:32:bb:e6:94:33:8a:a7: 9d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B8:DA:08:F2:BB:5E:8C:6B:93:50:D0:78:DC:7C:12:85:50:F7:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl X509v3 Authority Key Identifier: keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer sbgp-ipAddrBlock: critical IPv4: 173.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:15:8e:f3:9d:c9:fa:11:d0:99:e7:39:e3:fc:c3:78:23:54: c3:e2:83:4f:0c:13:02:59:fd:27:bf:71:b0:af:85:bb:64:32: f2:35:48:77:8a:fb:49:e0:0c:0e:3e:f1:cd:5f:c3:6e:75:b4: 03:e0:a2:69:d8:ff:2d:a5:e7:d0:df:c2:94:29:1d:d5:b0:f7: b4:31:a0:d5:c0:62:88:06:8c:e7:c5:2e:9a:cb:f1:2d:e9:c5: be:59:2b:43:58:1b:dc:30:74:a4:1c:c3:0b:36:ba:b8:4b:50: e9:7d:f8:f9:71:29:a2:5d:45:9c:ce:f6:97:25:a1:5a:69:98: 85:57:ce:19:15:4a:0a:22:f3:0f:40:fb:12:62:12:a5:f5:f3: 3b:b9:e0:82:be:18:52:08:24:1a:77:2f:5d:56:c7:89:68:2b: ee:d7:e3:63:f4:ae:f6:55:16:68:19:ec:56:5a:2a:44:8c:99: e7:6d:dd:cc:e2:d1:ce:e3:94:41:30:44:d9:cb:33:fe:30:93: e9:92:52:3f:e0:94:b8:a8:96:d6:e3:be:9c:be:cd:5c:91:73: bf:32:4c:ac:30:21:28:41:19:7a:ec:ed:45:19:fd:ca:d8:14: b1:94:c9:d7:8d:cc:97:4d:e2:5f:a8:da:ed:67:65:38:18:cb: d8:e0:90:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QxJUIkEntDONfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy ODE5MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MWJiYWE3NDctOGEwNi00YzVlLWI0NzYtZGFhYTljODk4YzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmv/L586T7SMv+3/M+MqNaziGwW6igDTpHNl WrK0cm/f7pRot/aIIHloQ+TOtZ9fC/KM1OF2q+kmPurGCW0JybsiVi2Psi8bJLQH EYKX35SgtB+UdZ+A8zCMqh146er+UBGVVSMWZ9GgJkBAjotRU/22ArHlbwdZOtPA JXA/VWNSzLiVihX92akDKeFqi2jB0T5NTgKROxNB5E43DG+11R8miB4xs2caAnwg zyrmYPilOMLYVdSwUiAYwx2euCb2hX1W1J41Cmcx59Duqm2VH3fwTsVtQv0Frl1u hrWJfYyOEyQiSGypKzqddm0OweMo7Up63yeFIDK75pQziqedNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLy42gjyu16Ma5NQ0HjcfBKFUPfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvODUwYzg1MWYtYTJmMC0z OWVhLThiMDQtZGI1NjA5NzMyYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1 ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEVjvOdyfoR0JnnOeP8w3gjVMPig08MEwJZ/Se/cbCvhbtkMvI1SHeK +0ngDA4+8c1fw251tAPgomnY/y2l59DfwpQpHdWw97QxoNXAYogGjOfFLprL8S3p xb5ZK0NYG9wwdKQcwws2urhLUOl9+PlxKaJdRZzO9pcloVppmIVXzhkVSgoi8w9A +xJiEqX18zu54IK+GFIIJBp3L11Wx4loK+7X42P0rvZVFmgZ7FZaKkSMmedt3czi 0c7jlEEwRNnLM/4wk+mSUj/glLioltbjvpy+zVyRc78yTKwwIShBGXrs7UUZ/crY FLGUydeNzJdN4l+o2u1nZTgYy9jgkL4= -----END CERTIFICATE-----Generated at Fri Apr 17 17:09:29 2026 by rpki-client