$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86904349-f07e-3073-9f05-8546aacd61f6.roa File: 86904349-f07e-3073-9f05-8546aacd61f6.roa (raw, json) Hash identifier: +wC8cPfSdK8giRSu0E5VpRsQj8Ah14Dby0LsfOnezCs= Subject key identifier: 8F:B5:A3:4E:1B:7C:E4:66:26:E2:11:14:FD:A4:29:66:15:72:2F:EF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E4F1F62B6E80C2BDE1EE38DC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86904349-f07e-3073-9f05-8546aacd61f6.roa Signing time: Sat 27 Jun 2026 09:00:12 +0000 ROA not before: Sat 27 Jun 2026 09:00:12 +0000 ROA not after: Fri 25 Sep 2026 09:00:12 +0000 asID: 30036 IP address blocks: 173.29.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:1f:62:b6:e8:0c:2b:de:1e:e3:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 27 09:00:12 2026 GMT Not After : Sep 25 09:00:12 2026 GMT Subject: CN=4ac37ed6-5f72-4f91-a6d3-b970f2bbd2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f5:76:56:43:2e:8d:90:e6:00:24:6e:52:aa: 73:13:61:f6:0b:f1:f2:ef:71:f5:7b:cb:23:82:78: 1e:d6:41:89:23:ef:9f:4b:f4:17:84:2a:5e:32:ad: 3a:47:e3:45:11:21:d5:14:d9:2d:a2:a2:3c:b1:3e: 91:44:32:0f:10:3a:ff:e0:f9:62:de:a6:1b:d5:94: 11:8c:b8:aa:07:1a:69:03:e6:db:cd:21:d2:a6:39: ff:58:d9:8b:46:fd:40:59:be:5b:93:c6:cb:32:ce: b3:78:ad:6f:28:5d:d5:1c:35:1d:2f:96:81:1a:96: fd:0c:e5:92:85:9f:65:96:66:6a:2e:bc:9b:a5:54: fc:cb:a0:61:6c:0d:43:f9:0a:4b:58:67:6b:4b:a2: 5c:b8:db:ab:93:7a:0e:8b:2e:59:16:9c:a0:50:c0: ec:01:86:fc:0c:9d:84:4f:7a:65:43:3e:2f:21:ac: 19:eb:2e:a9:a3:b6:b7:c4:51:3d:95:84:ec:76:8f: b4:d1:e1:b6:8e:7a:5e:c5:8a:a1:11:ba:8e:47:d4: 38:33:d6:0e:ad:98:8b:8c:a7:cc:23:78:dd:9f:f7: 3a:21:75:66:2f:48:3f:b7:1c:e0:26:55:f2:d8:94: da:03:15:a0:3a:dd:2e:f4:11:1c:bf:ef:0d:41:ba: b6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B5:A3:4E:1B:7C:E4:66:26:E2:11:14:FD:A4:29:66:15:72:2F:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/86904349-f07e-3073-9f05-8546aacd61f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:12:10:ea:fe:4a:86:4a:0a:7f:37:a0:88:a0:31:0f:e8:3c: da:f4:11:69:06:8b:2b:38:a7:9b:67:02:aa:41:1a:d7:c1:c0: 68:a0:69:f9:90:16:e3:13:e0:2a:23:f7:51:ae:71:c6:69:80: 96:af:6d:19:b6:bb:d0:86:a2:d5:97:61:2c:09:a5:71:9e:e0: 1d:2a:73:3a:60:43:00:d4:b2:76:b1:02:d8:c1:57:25:83:00: 93:5e:3a:d2:77:55:da:f4:5c:61:82:3f:e3:eb:00:1a:94:99: 7d:25:40:b1:ea:e3:1e:74:f6:49:93:32:1a:f0:e3:18:1c:29: 23:0a:ae:e4:a5:26:7f:31:36:bd:cc:3e:13:80:b0:a8:6b:67: 6f:94:6e:e3:00:01:b0:65:a6:79:38:b1:a3:1a:14:eb:ae:01: 0d:c1:eb:39:58:ba:45:8a:97:1f:d0:15:b8:02:c3:3c:ff:3a: 86:a3:e6:82:4d:e8:0a:8f:99:53:c0:46:c5:88:05:62:9a:69: dc:af:d2:a7:16:ef:49:04:64:e2:31:de:c9:30:96:2d:06:28: b1:e1:04:7b:9e:e6:e9:4b:a3:f8:c5:3b:6a:63:ab:2e:69:75: a5:f6:84:ab:dc:bd:68:e2:36:69:14:72:df:df:3b:7f:b7:f3: 57:34:b5:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PH2K26Awr3h7jjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk NGFjMzdlZDYtNWY3Mi00ZjkxLWE2ZDMtYjk3MGYyYmJkMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fV2VkMujZDmACRuUqpzE2H2C/Hy73H1e8sj gnge1kGJI++fS/QXhCpeMq06R+NFESHVFNktoqI8sT6RRDIPEDr/4Pli3qYb1ZQR jLiqBxppA+bbzSHSpjn/WNmLRv1AWb5bk8bLMs6zeK1vKF3VHDUdL5aBGpb9DOWS hZ9llmZqLrybpVT8y6BhbA1D+QpLWGdrS6JcuNurk3oOiy5ZFpygUMDsAYb8DJ2E T3plQz4vIawZ6y6po7a3xFE9lYTsdo+00eG2jnpexYqhEbqOR9Q4M9YOrZiLjKfM I3jdn/c6IXVmL0g/txzgJlXy2JTaAxWgOt0u9BEcv+8NQbq25wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+1o04bfORmJuIRFP2kKWYVci/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODY5MDQzNDktZjA3ZS0z MDczLTlmMDUtODU0NmFhY2Q2MWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR1lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYSEOr+SoZKCn83oIigMQ/oPNr0EWkGiys4p5tnAqpBGtfBwGigafmQ FuMT4Coj91GuccZpgJavbRm2u9CGotWXYSwJpXGe4B0qczpgQwDUsnaxAtjBVyWD AJNeOtJ3Vdr0XGGCP+PrABqUmX0lQLHq4x509kmTMhrw4xgcKSMKruSlJn8xNr3M PhOAsKhrZ2+UbuMAAbBlpnk4saMaFOuuAQ3B6zlYukWKlx/QFbgCwzz/Ooaj5oJN 6AqPmVPARsWIBWKaadyv0qcW70kEZOIx3skwli0GKLHhBHue5ulLo/jFO2pjqy5p daX2hKvcvWjiNmkUct/fO3+381c0tR0= -----END CERTIFICATE-----Generated at Fri Jul 24 22:40:20 2026 by rpki-client