$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa File: 3baf912b-384b-3427-b752-a35aa9af6107.roa (raw, json) Hash identifier: 3iCAojirgh82ddrE56vwFX9zG+Jr9rIXmOc/qmGUkvs= Subject key identifier: D7:42:30:C7:03:E0:5F:A6:47:0C:6E:44:41:97:03:01:08:ED:93:6E Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584EA798B15D28E7B91173C14FD0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 852 IP address blocks: 172.219.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:b1:5d:28:e7:b9:11:73:c1:4f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=428795a2-1ad5-4cb7-b75f-d22a96ab1aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:35:ad:a2:3b:0f:b0:bc:a2:79:23:3e:db:b2: b9:3e:75:96:59:24:32:34:17:9f:ed:b2:33:46:4a: aa:5b:03:2b:f3:40:5d:cb:7a:8c:99:21:17:83:39: 24:e7:48:19:0d:92:09:d9:2a:0d:c5:a1:a9:a0:3e: 9a:2d:e2:17:e7:8f:ab:37:99:86:5b:77:9a:f7:1d: 6d:c8:66:21:a3:84:3c:3e:c4:8b:a9:fd:55:b4:69: 40:74:dd:24:5b:52:31:b6:b8:2c:38:55:58:98:35: 22:7b:87:31:4a:97:aa:24:8c:05:e4:63:ac:36:6a: cb:26:7f:72:37:7d:a7:a0:d2:41:25:65:90:38:b8: 18:6e:0c:6f:64:2e:76:5f:1a:af:ee:89:da:7b:dd: ae:fe:79:e7:13:ba:4c:4a:d0:b4:4c:19:65:bb:99: 2f:71:1b:8b:24:69:ad:ed:f8:65:f4:30:50:75:e4: 13:d5:28:f9:02:a5:5f:c9:7a:f3:77:e0:8f:61:d1: 34:e1:83:5e:8c:ed:40:26:06:81:ba:54:ad:46:49: d3:23:0f:0b:ce:55:6f:8d:85:12:7e:20:80:38:8a: 8e:a4:b5:af:70:0e:28:10:94:63:35:0a:f4:c4:a1: ee:0c:8d:36:43:ae:5f:21:b5:ab:86:78:d8:a4:4f: 52:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:42:30:C7:03:E0:5F:A6:47:0C:6E:44:41:97:03:01:08:ED:93:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3baf912b-384b-3427-b752-a35aa9af6107.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 172.219.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:e2:cf:ae:68:7a:27:6f:11:4d:37:4b:a1:d8:93:bb:6a:4b: de:0b:c8:fe:31:e6:e9:11:de:15:f7:f1:a6:35:a2:57:96:ca: 02:58:2d:1b:06:a1:f5:6f:e4:47:f7:cf:83:7b:2f:70:36:34: 22:1d:2d:01:46:9f:93:e6:d2:02:6c:f9:40:1f:41:83:9b:7c: 90:56:38:74:e3:01:13:44:7a:a0:64:f0:18:6c:d3:21:aa:1d: 43:4f:52:05:0a:47:9c:d6:c7:70:e4:b4:21:8c:7e:3f:bd:61: db:68:51:9c:87:61:a2:f4:60:84:1b:a8:9d:6e:9a:2c:01:fa: 6f:10:10:e8:62:de:6c:f2:83:80:e5:09:3b:13:7f:74:4d:69: 88:61:b8:10:8e:07:b8:8f:5f:24:8b:7a:d0:59:9e:20:7c:f7: c6:15:ae:ce:ca:c3:7e:aa:81:03:cb:5b:b5:d7:80:b3:56:fb: 9a:62:ef:6d:84:c7:cd:74:d9:bb:86:3a:21:83:ba:da:48:31: 8a:63:02:ce:b3:a6:fa:ab:1c:0c:9f:a7:91:be:ea:72:de:1b: ac:6e:c7:e5:07:3a:d6:3e:85:92:64:24:fd:e8:49:2c:f4:9b: 63:58:f9:28:72:7b:30:98:61:31:4c:68:73:18:51:b5:18:9a: bf:8f:d5:e9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6nmLFdKOe5EXPBT9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDI4Nzk1YTItMWFkNS00Y2I3LWI3NWYtZDIyYTk2YWIxYWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDWtojsPsLyieSM+27K5PnWWWSQyNBef7bIz RkqqWwMr80Bdy3qMmSEXgzkk50gZDZIJ2SoNxaGpoD6aLeIX54+rN5mGW3ea9x1t yGYho4Q8PsSLqf1VtGlAdN0kW1IxtrgsOFVYmDUie4cxSpeqJIwF5GOsNmrLJn9y N32noNJBJWWQOLgYbgxvZC52Xxqv7onae92u/nnnE7pMStC0TBllu5kvcRuLJGmt 7fhl9DBQdeQT1Sj5AqVfyXrzd+CPYdE04YNejO1AJgaBulStRknTIw8LzlVvjYUS fiCAOIqOpLWvcA4oEJRjNQr0xKHuDI02Q65fIbWrhnjYpE9SEQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNdCMMcD4F+mRwxuREGXAwEI7ZNuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2JhZjkxMmItMzg0Yi0z NDI3LWI3NTItYTM1YWE5YWY2MTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMArNswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAp+LPrmh6J28RTTdLodiTu2pL3gvI/jHm6RHeFffxpjWiV5bKAlgtGwah 9W/kR/fPg3svcDY0Ih0tAUafk+bSAmz5QB9Bg5t8kFY4dOMBE0R6oGTwGGzTIaod Q09SBQpHnNbHcOS0IYx+P71h22hRnIdhovRghBuonW6aLAH6bxAQ6GLebPKDgOUJ OxN/dE1piGG4EI4HuI9fJIt60FmeIHz3xhWuzsrDfqqBA8tbtdeAs1b7mmLvbYTH zXTZu4Y6IYO62kgximMCzrOm+qscDJ+nkb7qct4brG7H5Qc61j6FkmQk/ehJLPSb Y1j5KHJ7MJhhMUxocxhRtRiav4/V6Q== -----END CERTIFICATE-----Generated at Wed Jul 29 03:44:18 2026 by rpki-client