$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29310405-b409-345b-bb0c-ffcf3f40f611.roa File: 29310405-b409-345b-bb0c-ffcf3f40f611.roa (raw, json) Hash identifier: BpCZJx1sK7Shofc1TJAgGdzHkF11emwXyIR2Z9z2WY4= Subject key identifier: 20:07:A0:E9:C6:19:4B:73:CB:34:F2:96:C9:ED:AF:CC:8A:F0:C0:C4 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584E1E445A9DB4CA3477854B0200 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29310405-b409-345b-bb0c-ffcf3f40f611.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 33363 IP address blocks: 174.135.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:5a:9d:b4:ca:34:77:85:4b:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=3aac66ce-273f-4828-a95d-b75c196b6703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:79:3a:01:78:b5:69:0e:0c:e0:5e:38:65:7c: af:8e:aa:0b:98:ee:c0:1f:5b:e2:df:97:89:d6:0e: ce:a7:35:ca:47:84:24:93:49:31:83:ce:19:2e:92: 3f:7b:4a:29:36:1f:40:bd:82:ce:3c:a0:33:45:9f: 90:7c:59:45:09:02:c9:26:ef:8c:e5:bb:19:81:37: 2f:9c:ae:f7:af:e9:c5:54:6a:8f:91:91:26:fb:68: 5d:fb:46:9d:5e:af:da:f8:e2:35:10:3a:e2:2d:e2: 5c:b7:94:81:a4:ba:7b:a5:dd:d4:98:bf:01:63:f3: 60:cf:18:83:8b:5e:ff:2a:8c:88:13:30:b9:a7:4c: 47:8d:dc:8d:b4:bf:7a:96:4c:84:16:e6:68:1d:7f: 9e:94:e9:c5:dd:13:31:a2:49:ab:da:53:68:e6:63: 8f:3e:08:f8:09:4c:5e:7e:95:9f:3e:a2:63:17:ce: 7a:3a:16:ec:a9:a6:df:7d:8f:71:61:6e:2a:09:e4: d1:0b:01:a5:47:f3:16:e4:03:61:a6:c7:d6:12:b4: f3:22:d3:b2:97:73:a3:ad:7d:c6:11:e1:8e:39:cc: 90:30:01:fc:55:92:d8:fc:c7:42:ca:e9:b8:90:f2: 4e:cb:10:18:d9:a9:82:93:fa:77:c4:5c:60:ea:0c: 5f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:07:A0:E9:C6:19:4B:73:CB:34:F2:96:C9:ED:AF:CC:8A:F0:C0:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/29310405-b409-345b-bb0c-ffcf3f40f611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 174.135.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:8a:d1:da:ab:e3:6d:cf:fd:62:bc:c2:52:76:02:b0:ed:91: 75:87:0c:32:fc:d0:2e:8c:bf:41:da:58:42:0e:b6:c0:3e:5f: cf:e2:71:84:bf:cc:c5:c8:2f:37:9e:cf:6d:4e:bb:fc:58:b3: be:26:94:74:2c:f1:8b:b8:37:59:a6:b3:68:ce:27:8e:36:cf: 7a:0e:66:8a:1b:12:da:bc:e8:18:59:ae:6e:a6:bb:2e:a6:9a: b9:8a:98:97:f1:45:d3:10:95:3f:84:2b:36:53:1f:b4:96:00: fe:5a:7d:a9:90:00:79:66:62:bb:59:96:2f:d7:ff:94:48:ee: fa:e2:f0:35:cf:0d:2f:c2:91:b4:5c:40:34:2c:61:b6:22:10: c1:b5:64:c3:8c:d2:2c:78:32:69:c8:51:e1:a1:ff:0d:46:d5: e1:ce:02:24:7c:4d:aa:fa:c2:6a:d5:da:b4:42:2a:f8:3c:21: 48:54:e8:91:21:72:ef:c3:32:de:04:10:e5:25:ab:52:82:20: cc:f2:55:02:84:78:a7:fb:72:1b:d8:c8:6f:3f:bd:15:00:17: b7:b3:d3:40:30:d8:84:25:5a:84:fc:8b:c7:ef:b1:12:f0:4e: e5:16:6d:23:91:a1:4f:fd:a4:b0:f1:e7:fd:62:f3:88:aa:30: 01:9b:56:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRFqdtMo0d4VLAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk M2FhYzY2Y2UtMjczZi00ODI4LWE5NWQtYjc1YzE5NmI2NzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13k6AXi1aQ4M4F44ZXyvjqoLmO7AH1vi35eJ 1g7OpzXKR4Qkk0kxg84ZLpI/e0opNh9AvYLOPKAzRZ+QfFlFCQLJJu+M5bsZgTcv nK73r+nFVGqPkZEm+2hd+0adXq/a+OI1EDriLeJct5SBpLp7pd3UmL8BY/NgzxiD i17/KoyIEzC5p0xHjdyNtL96lkyEFuZoHX+elOnF3RMxokmr2lNo5mOPPgj4CUxe fpWfPqJjF856OhbsqabffY9xYW4qCeTRCwGlR/MW5ANhpsfWErTzItOyl3OjrX3G EeGOOcyQMAH8VZLY/MdCyum4kPJOyxAY2amCk/p3xFxg6gxfoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAHoOnGGUtzyzTylsntr8yK8MDEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMjkzMTA0MDUtYjQwOS0z NDViLWJiMGMtZmZjZjNmNDBmNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHrocAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqK0dqr423P/WK8wlJ2ArDtkXWHDDL80C6Mv0HaWEIOtsA+X8/icYS/ zMXILzeez21Ou/xYs74mlHQs8Yu4N1mms2jOJ442z3oOZoobEtq86BhZrm6muy6m mrmKmJfxRdMQlT+EKzZTH7SWAP5afamQAHlmYrtZli/X/5RI7vri8DXPDS/CkbRc QDQsYbYiEMG1ZMOM0ix4MmnIUeGh/w1G1eHOAiR8Tar6wmrV2rRCKvg8IUhU6JEh cu/DMt4EEOUlq1KCIMzyVQKEeKf7chvYyG8/vRUAF7ez00Aw2IQlWoT8i8fvsRLw TuUWbSORoU/9pLDx5/1i84iqMAGbViQ= -----END CERTIFICATE-----Generated at Sat Jun 13 22:55:50 2026 by rpki-client