$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa File: 8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa (raw, json) Hash identifier: soKoZRKHiIcWfBEnrXYxi5MGYHSuMqVXDilA6UEA4QM= Subject key identifier: 20:D8:96:CA:4A:D7:70:B2:AA:E9:10:BA:A8:05:C3:A4:B9:55:ED:9F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E7E950491314132AA13D47380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 30036 IP address blocks: 173.28.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:04:91:31:41:32:aa:13:d4:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=d1f468ac-1898-4fb6-8c97-3facf0ff62f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:96:bc:26:85:01:f9:b0:23:dd:54:d8:10:72: 3c:76:93:83:00:4d:03:f8:61:c6:96:78:a8:70:17: 94:7e:4f:7f:5a:ca:53:ba:4b:11:e9:70:84:67:94: c9:a2:57:93:3b:e8:ba:c5:b1:c4:92:28:0a:d0:f1: ba:1f:93:5f:79:51:1b:0f:76:40:a6:0e:28:ee:80: 28:18:c5:23:5e:cb:de:d9:0e:42:6f:76:76:1d:d8: ed:48:e4:b8:7d:d6:4c:83:a6:23:59:a7:24:83:45: fa:fb:1c:1b:1a:de:d8:20:be:1a:4e:6d:f7:7b:76: 72:c8:d6:7a:6d:b4:85:f6:08:5a:c8:b5:32:af:3f: 72:f9:1c:dc:28:7b:e9:9d:95:4a:eb:6d:99:84:70: 74:34:16:50:bf:1b:2a:ae:0e:3b:14:1b:9d:44:71: be:da:41:48:be:61:83:6c:9e:48:57:07:ad:4d:ba: 62:c3:8d:18:dd:dd:a8:37:5f:5a:ae:c9:cf:d6:ef: 97:35:2f:a3:37:1e:9f:b9:79:b1:36:08:0c:bd:a2: 2b:90:b8:8c:d7:92:f6:c1:ee:ec:b6:17:97:f2:7f: 86:83:4f:6a:48:a1:50:79:7b:15:59:de:a9:7b:05: ee:7c:70:58:2a:af:7a:35:f8:90:db:ec:c0:e1:c4: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D8:96:CA:4A:D7:70:B2:AA:E9:10:BA:A8:05:C3:A4:B9:55:ED:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:4b:d0:7b:6d:c5:cf:2f:64:05:09:51:f2:30:49:b9:02:bf: b4:29:11:df:2c:a7:97:01:f8:ad:54:af:22:03:b0:a2:91:f9: 1e:fb:af:fc:ba:1e:c7:59:88:14:e2:db:3e:7c:94:df:4b:1b: ee:b1:66:bc:02:4a:49:53:97:b5:eb:b1:83:5f:8e:ad:98:dd: 62:00:79:fa:89:c4:0c:d1:cd:77:0d:27:4b:b0:56:20:d3:07: 11:16:4e:3e:01:f6:fc:8a:c3:20:09:c3:31:92:ea:42:a7:b9: 12:95:d6:4e:70:5a:a4:53:2e:99:06:f1:47:a4:2c:05:90:f7: ca:63:f4:50:30:e8:f2:c8:3f:9f:8e:4f:c0:ba:3e:9f:56:9a: 39:38:6d:57:2b:10:54:e1:73:f6:c0:b1:21:0a:1d:36:e5:e8: 05:e6:e2:71:05:6a:9c:55:3f:30:3f:2a:b5:16:1d:5b:58:c0: 9a:43:3a:d9:14:46:15:6d:86:e8:83:52:38:f6:06:d5:15:78: 43:f7:66:09:a7:17:c1:64:a6:a0:b2:30:66:8a:a2:87:4f:eb: 3f:15:61:01:3e:c1:58:68:d8:9e:dc:71:df:99:b0:7f:be:6c: 04:21:be:cd:ee:70:d6:7f:e0:1b:10:ef:5d:50:49:5e:82:d1: 58:1b:aa:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQSRMUEyqhPUc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZDFmNDY4YWMtMTg5OC00ZmI2LThjOTctM2ZhY2YwZmY2MmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJa8JoUB+bAj3VTYEHI8dpODAE0D+GHGlnio cBeUfk9/WspTuksR6XCEZ5TJoleTO+i6xbHEkigK0PG6H5NfeVEbD3ZApg4o7oAo GMUjXsve2Q5Cb3Z2HdjtSOS4fdZMg6YjWackg0X6+xwbGt7YIL4aTm33e3ZyyNZ6 bbSF9ghayLUyrz9y+RzcKHvpnZVK622ZhHB0NBZQvxsqrg47FBudRHG+2kFIvmGD bJ5IVwetTbpiw40Y3d2oN19arsnP1u+XNS+jNx6fuXmxNggMvaIrkLiM15L2we7s theX8n+Gg09qSKFQeXsVWd6pewXufHBYKq96NfiQ2+zA4cRnNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDYlspK13CyqukQuqgFw6S5Ve2fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGFmMjFhZTMtNDVhZC0z YmViLTlmMzgtYzMwYzZlYTM1NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9L0Httxc8vZAUJUfIwSbkCv7QpEd8sp5cB+K1UryIDsKKR+R77r/y6 HsdZiBTi2z58lN9LG+6xZrwCSklTl7XrsYNfjq2Y3WIAefqJxAzRzXcNJ0uwViDT BxEWTj4B9vyKwyAJwzGS6kKnuRKV1k5wWqRTLpkG8UekLAWQ98pj9FAw6PLIP5+O T8C6Pp9Wmjk4bVcrEFThc/bAsSEKHTbl6AXm4nEFapxVPzA/KrUWHVtYwJpDOtkU RhVthuiDUjj2BtUVeEP3ZgmnF8FkpqCyMGaKoodP6z8VYQE+wVho2J7ccd+ZsH++ bAQhvs3ucNZ/4BsQ711QSV6C0Vgbqv8= -----END CERTIFICATE-----Generated at Fri Jul 24 11:29:56 2026 by rpki-client