$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/badf578c-83c1-3c8c-bb2d-bb193df36515.roa File: badf578c-83c1-3c8c-bb2d-bb193df36515.roa (raw, json) Hash identifier: jzlUYaC/xgjPCXP9kUvI0T141eJXZ48yDnjPquWvXac= Subject key identifier: 91:56:CF:68:60:85:A2:E0:E2:2F:37:32:0D:A7:84:81:B5:EF:27:01 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E90BA5C361D7FAEF2E73B5080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/badf578c-83c1-3c8c-bb2d-bb193df36515.roa Signing time: Mon 20 Jul 2026 21:00:11 +0000 ROA not before: Mon 20 Jul 2026 21:00:11 +0000 ROA not after: Sun 18 Oct 2026 21:00:11 +0000 asID: 19905 IP address blocks: 173.29.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:ba:5c:36:1d:7f:ae:f2:e7:3b:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 20 21:00:11 2026 GMT Not After : Oct 18 21:00:11 2026 GMT Subject: CN=1c4f59ce-213e-4dff-a9ea-73ec3b3152ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:58:9a:32:02:db:c4:c6:3c:c0:2f:29:d7:e0: f3:13:e7:4a:39:82:52:33:35:1a:de:43:d8:ea:d5: b5:08:63:f0:a2:26:7c:ca:9b:08:57:0c:a0:91:9c: 2b:68:c9:01:8f:eb:3d:07:76:00:b6:cf:e4:49:43: 9c:da:af:db:28:b3:52:cc:4f:2e:9c:31:20:91:3f: cf:c2:c4:4e:3e:67:9c:9b:3a:3e:6f:f3:93:8a:11: 95:00:0b:65:d5:63:bb:40:f6:52:4e:79:01:a0:91: 3c:b3:f1:0f:a2:65:c1:3e:c3:b8:90:f2:16:15:de: 68:10:7b:c1:2b:18:5d:4b:53:8d:f0:c0:8b:6a:23: 75:ac:cf:64:d6:04:53:42:86:e7:6d:8c:a0:8b:15: 2b:5a:f2:d5:cb:87:cc:35:73:82:d2:eb:da:7c:e3: 5a:79:fc:5d:69:a0:e3:ae:85:a0:39:b2:0d:8a:fb: 9f:22:15:35:ff:8c:8b:20:7d:75:33:c7:18:4c:16: 86:a1:e1:82:d9:40:c3:dd:82:dd:41:d2:ae:fe:3f: 94:e4:67:df:76:ee:76:03:3a:e7:13:31:71:c1:28: 91:53:35:e3:6c:00:70:fe:f5:31:41:a5:dd:5d:ef: eb:00:69:7a:d8:63:8a:12:83:67:31:d5:f0:3e:23: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:56:CF:68:60:85:A2:E0:E2:2F:37:32:0D:A7:84:81:B5:EF:27:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/badf578c-83c1-3c8c-bb2d-bb193df36515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c3:94:40:1c:e6:1b:df:c0:ac:4c:42:2e:50:f5:aa:aa:88: 62:57:9b:8e:ef:28:6f:0e:0f:54:00:cd:64:43:97:b7:b3:01: 31:f1:74:95:db:eb:d7:5e:4b:85:ec:59:1a:a5:3c:e2:8c:8e: b2:dc:4a:6b:89:fa:9c:d9:23:44:51:17:85:62:bb:b1:f5:1f: 68:11:bf:53:7f:92:3d:3c:53:18:5c:2e:68:c4:c8:f2:65:ff: 55:d6:1f:67:f5:5e:b5:f4:3f:94:75:95:8b:c8:04:69:b3:3e: d5:28:a5:7e:24:71:e8:2d:dc:e5:9c:2f:d4:28:28:b2:1c:1a: 00:64:aa:ff:19:aa:66:2f:80:45:fd:a9:e0:c9:50:20:11:9e: df:0f:49:e7:99:0b:36:f9:fc:51:64:a8:60:ec:15:71:1d:a2: 7f:74:a6:7f:fe:0d:b3:b9:d6:49:8f:ec:35:18:f3:ea:4f:ee: ee:9e:56:d2:bb:21:a4:27:bd:b6:5d:5a:96:2e:fc:c2:41:a8: ad:97:fd:4b:33:8e:9e:8b:f5:d7:74:ac:af:63:ec:3e:e8:25: c4:1c:ae:4c:a3:60:85:c4:68:2b:1a:74:61:08:0b:c6:f5:98: b1:50:31:d1:58:57:84:a8:0a:79:51:48:70:5a:6b:bf:92:0e: fd:40:79:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Qulw2HX+u8uc7UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk MWM0ZjU5Y2UtMjEzZS00ZGZmLWE5ZWEtNzNlYzNiMzE1MmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFiaMgLbxMY8wC8p1+DzE+dKOYJSMzUa3kPY 6tW1CGPwoiZ8ypsIVwygkZwraMkBj+s9B3YAts/kSUOc2q/bKLNSzE8unDEgkT/P wsROPmecmzo+b/OTihGVAAtl1WO7QPZSTnkBoJE8s/EPomXBPsO4kPIWFd5oEHvB KxhdS1ON8MCLaiN1rM9k1gRTQobnbYygixUrWvLVy4fMNXOC0uvafONaefxdaaDj roWgObINivufIhU1/4yLIH11M8cYTBaGoeGC2UDD3YLdQdKu/j+U5Gffdu52Azrn EzFxwSiRUzXjbABw/vUxQaXdXe/rAGl62GOKEoNnMdXwPiNElwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFWz2hghaLg4i83Mg2nhIG17ycBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmFkZjU3OGMtODNjMS0z YzhjLWJiMmQtYmIxOTNkZjM2NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPDlEAc5hvfwKxMQi5Q9aqqiGJXm47vKG8OD1QAzWRDl7ezATHxdJXb 69deS4XsWRqlPOKMjrLcSmuJ+pzZI0RRF4Viu7H1H2gRv1N/kj08UxhcLmjEyPJl /1XWH2f1XrX0P5R1lYvIBGmzPtUopX4kcegt3OWcL9QoKLIcGgBkqv8ZqmYvgEX9 qeDJUCARnt8PSeeZCzb5/FFkqGDsFXEdon90pn/+DbO51kmP7DUY8+pP7u6eVtK7 IaQnvbZdWpYu/MJBqK2X/Uszjp6L9dd0rK9j7D7oJcQcrkyjYIXEaCsadGEIC8b1 mLFQMdFYV4SoCnlRSHBaa7+SDv1AeTU= -----END CERTIFICATE-----Generated at Thu Jul 23 22:36:38 2026 by rpki-client