$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa File: cd43aa95-3365-3fce-bb60-9f68c08faebc.roa (raw, json) Hash identifier: eeIR6JCFf9rdubxKSDoFP6Ax41kB7yN1rHqKS/Nhkt0= Subject key identifier: 93:20:44:33:B9:AF:48:80:1F:17:B3:A4:67:8E:34:FF:75:DC:A3:F5 Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Certificate serial: 010D0C9F4328584D60E50C2FDFC225FF0BEBB400 Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 46979 IP address blocks: 173.225.0.0/21 maxlen: 21 173.225.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:0c:2f:df:c2:25:ff:0b:eb:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=726af145-16ac-4edf-a35b-715fddefcd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:40:b0:5c:8b:ad:fe:13:a0:90:f2:ec:10:56: 6f:1b:89:50:62:4b:91:34:62:a1:6e:80:27:45:27: ef:d7:6e:95:82:ed:c5:2a:1d:cc:17:5d:67:22:cc: d9:5f:4d:74:b9:16:dc:04:87:1c:d9:e2:1e:42:6d: 21:33:60:f1:17:ee:62:c9:89:e3:40:b5:c8:c8:fe: 45:29:70:03:0d:51:ac:15:68:de:f2:13:57:55:f5: dc:5d:f4:62:66:dd:30:29:1c:93:d5:2d:1d:de:29: c2:33:be:d2:e2:5b:3c:38:65:a7:3b:b2:98:7a:5e: 49:0e:03:47:86:76:ce:48:fb:51:6b:63:61:96:47: 75:9f:5a:99:ca:cb:88:0f:44:b9:18:4d:c5:86:a0: c4:6e:e4:81:a3:50:42:7b:51:fe:84:6e:62:6e:0d: 16:2f:c5:1d:0a:b9:32:63:c4:73:b5:07:55:b8:65: a7:20:6e:d2:e5:4c:51:d5:a0:8e:b2:83:2f:0c:63: e1:0c:86:6f:91:e2:f8:70:41:f2:85:b5:8d:66:7e: e1:25:83:7b:b2:af:d3:e6:bc:f9:a1:4a:99:fa:d8: 70:75:f2:b5:70:8c:3e:d1:73:a3:cb:da:9a:29:42: fa:72:99:60:96:99:0e:e2:67:88:e9:12:10:cc:2f: df:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:20:44:33:B9:AF:48:80:1F:17:B3:A4:67:8E:34:FF:75:DC:A3:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl X509v3 Authority Key Identifier: keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer sbgp-ipAddrBlock: critical IPv4: 173.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:36:55:4b:d8:40:77:9c:69:29:9a:aa:10:86:4c:ba:69:d3: 72:94:ab:8b:6c:7f:eb:93:00:7f:01:8c:79:af:ef:4c:dd:63: 54:86:df:6a:a4:60:d2:39:11:41:4d:82:17:a5:0a:0b:08:6a: 17:74:b4:9c:0d:b0:4a:3e:15:f3:e0:1e:99:2f:84:2a:92:7f: 71:65:ce:e4:76:26:67:6e:4e:74:e6:90:ae:b7:fe:51:86:9a: e7:4f:06:7e:0b:16:c3:a8:b4:a9:0a:6e:57:bd:2f:26:1b:63: c2:c1:03:32:78:c4:d2:90:85:ce:b9:db:e9:b3:93:b2:c2:8f: 12:6a:8d:8a:ec:80:03:1e:9f:ff:46:e0:e6:b9:48:9a:2f:ef: 2d:81:7e:d1:35:6a:37:49:7b:99:6f:bc:4a:7e:7d:d7:45:0e: 0b:18:55:dc:82:33:2f:1e:09:52:94:b4:fd:67:b2:8a:ea:00: 62:3e:a0:32:cc:9b:b4:36:9e:10:9a:5a:66:5e:14:1c:7b:3d: 57:3f:c8:ed:96:b6:d2:a4:16:2b:a0:bd:25:01:62:5f:82:64: 4f:5b:04:67:20:9a:c8:0b:31:7c:36:93:d8:84:3b:41:ea:eb: a5:27:62:70:27:ab:31:f7:d7:9a:e1:1f:12:2e:25:12:91:f9: a9:09:33:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Qwv38Il/wvrtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy ODE5MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk NzI2YWYxNDUtMTZhYy00ZWRmLWEzNWItNzE1ZmRkZWZjZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkCwXIut/hOgkPLsEFZvG4lQYkuRNGKhboAn RSfv126Vgu3FKh3MF11nIszZX010uRbcBIcc2eIeQm0hM2DxF+5iyYnjQLXIyP5F KXADDVGsFWje8hNXVfXcXfRiZt0wKRyT1S0d3inCM77S4ls8OGWnO7KYel5JDgNH hnbOSPtRa2Nhlkd1n1qZysuID0S5GE3FhqDEbuSBo1BCe1H+hG5ibg0WL8UdCrky Y8RztQdVuGWnIG7S5UxR1aCOsoMvDGPhDIZvkeL4cEHyhbWNZn7hJYN7sq/T5rz5 oUqZ+thwdfK1cIw+0XOjy9qaKUL6cplglpkO4meI6RIQzC/fwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMgRDO5r0iAHxezpGeONP913KP1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvY2Q0M2FhOTUtMzM2NS0z ZmNlLWJiNjAtOWY2OGMwOGZhZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1 ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAE2VUvYQHecaSmaqhCGTLpp03KUq4tsf+uTAH8BjHmv70zdY1SG32qk YNI5EUFNghelCgsIahd0tJwNsEo+FfPgHpkvhCqSf3FlzuR2JmduTnTmkK63/lGG mudPBn4LFsOotKkKble9LyYbY8LBAzJ4xNKQhc652+mzk7LCjxJqjYrsgAMen/9G 4Oa5SJov7y2BftE1ajdJe5lvvEp+fddFDgsYVdyCMy8eCVKUtP1nsorqAGI+oDLM m7Q2nhCaWmZeFBx7PVc/yO2WttKkFiugvSUBYl+CZE9bBGcgmsgLMXw2k9iEO0Hq 66UnYnAnqzH315rhHxIuJRKR+akJMwM= -----END CERTIFICATE-----Generated at Fri Apr 17 19:36:04 2026 by rpki-client