$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bafe5d2a-895c-3309-bd79-3298a23ac7d1.roa File: bafe5d2a-895c-3309-bd79-3298a23ac7d1.roa (raw, json) Hash identifier: h/Br00wKoMYTY2o15hGJILWLdEwDvdUBmNdOc5PC4KE= Subject key identifier: AF:99:50:24:92:AF:96:99:0B:8B:0D:C9:41:34:EE:60:85:4E:10:FF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E7A64D8E6723D1A84B7FB8E40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bafe5d2a-895c-3309-bd79-3298a23ac7d1.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 30036 IP address blocks: 173.29.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:d8:e6:72:3d:1a:84:b7:fb:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=a2b8893c-fb7d-4cf0-9071-7a40240f1311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fb:0a:09:1b:e6:59:bc:59:9f:1e:6b:99:b2: 3e:40:22:b4:e5:e6:a6:b5:be:a9:10:f5:9c:f1:72: 16:7b:19:87:58:62:de:6d:7d:6e:27:cd:71:21:17: d8:42:49:2e:f3:e5:98:da:ca:2d:f1:87:a5:6c:ee: 67:fd:84:14:54:0d:3c:94:e3:b3:ff:a9:14:f9:be: 57:14:d5:13:e4:50:fe:80:e9:2e:7f:94:dd:d3:bd: 1b:60:8d:f9:8e:a0:27:af:48:40:2f:14:01:1b:f4: 43:d2:15:2e:63:98:1d:96:8d:3e:36:d9:17:ce:07: ed:07:6d:ad:60:f9:f8:ce:b7:22:54:01:fa:e0:f9: 2d:8c:bc:b7:55:0f:3b:b3:02:2d:1f:0b:0b:9f:f6: 66:69:d2:fe:67:fe:79:60:15:ff:9c:1c:33:e3:ac: 03:dd:28:e7:87:92:5e:55:c8:54:82:82:07:54:51: a8:02:f3:9d:e5:20:9c:df:64:fb:50:c6:ae:e3:dd: ad:a4:64:f7:d4:96:bd:0d:ab:da:51:9a:a4:b8:0e: 83:74:b1:fb:57:31:7b:11:51:65:cb:0d:bf:c4:e5: d8:3d:dd:72:61:b6:0e:1a:88:10:07:5c:72:68:97: 5d:33:66:35:4f:68:53:b0:d8:79:cb:90:5e:8c:42: 2b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:99:50:24:92:AF:96:99:0B:8B:0D:C9:41:34:EE:60:85:4E:10:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bafe5d2a-895c-3309-bd79-3298a23ac7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:96:57:cc:88:cd:32:e3:7d:98:e8:dd:3d:ed:92:4c:e9:0f: f3:1c:db:f4:73:f3:c9:99:20:f5:e1:9a:55:60:28:11:dc:5d: c5:8d:62:1a:13:86:1a:58:cc:c6:ab:b2:b7:4f:a8:ab:3d:92: 8c:ac:50:eb:81:62:aa:cd:a0:e2:fe:b2:fb:21:a5:7d:da:bc: 1e:fc:df:8e:6e:55:57:8f:32:98:26:53:1c:51:c7:19:e7:5f: 03:56:91:22:4e:ee:d3:99:10:38:ed:fc:c2:bf:96:bc:9e:ea: fc:99:17:52:0b:1e:e6:87:5e:32:a9:b3:53:e0:3d:14:f0:ad: 0c:d8:b1:42:3b:f7:32:3b:46:24:2a:d3:32:23:7a:77:00:af: f2:b4:68:8b:52:18:e8:47:75:31:7f:1a:d4:c9:77:42:6e:d4: c5:6e:54:db:70:93:24:99:e1:22:44:c5:8e:ae:f4:61:96:0e: 42:7f:99:de:1e:6b:d6:96:98:a5:ff:24:9b:c5:6c:da:1b:fe: 90:c1:85:4a:f0:84:dc:c1:15:ca:92:bf:9f:9c:07:8b:3a:b6: ec:54:72:67:67:4b:78:c7:ab:e6:69:d7:73:12:b2:9b:a0:6a: 44:49:1f:bb:c6:35:5a:2f:f9:8a:71:8c:e1:f5:3e:49:cc:be: 29:67:52:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNjmcj0ahLf7jkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk YTJiODg5M2MtZmI3ZC00Y2YwLTkwNzEtN2E0MDI0MGYxMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fsKCRvmWbxZnx5rmbI+QCK05eamtb6pEPWc 8XIWexmHWGLebX1uJ81xIRfYQkku8+WY2sot8YelbO5n/YQUVA08lOOz/6kU+b5X FNUT5FD+gOkuf5Td070bYI35jqAnr0hALxQBG/RD0hUuY5gdlo0+NtkXzgftB22t YPn4zrciVAH64PktjLy3VQ87swItHwsLn/ZmadL+Z/55YBX/nBwz46wD3Sjnh5Je VchUgoIHVFGoAvOd5SCc32T7UMau492tpGT31Ja9DavaUZqkuA6DdLH7VzF7EVFl yw2/xOXYPd1yYbYOGogQB1xyaJddM2Y1T2hTsNh5y5BejEIrrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+ZUCSSr5aZC4sNyUE07mCFThD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmFmZTVkMmEtODk1Yy0z MzA5LWJkNzktMzI5OGEyM2FjN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECWV8yIzTLjfZjo3T3tkkzpD/Mc2/Rz88mZIPXhmlVgKBHcXcWNYhoT hhpYzMarsrdPqKs9koysUOuBYqrNoOL+svshpX3avB78345uVVePMpgmUxxRxxnn XwNWkSJO7tOZEDjt/MK/lrye6vyZF1ILHuaHXjKps1PgPRTwrQzYsUI79zI7RiQq 0zIjencAr/K0aItSGOhHdTF/GtTJd0Ju1MVuVNtwkySZ4SJExY6u9GGWDkJ/md4e a9aWmKX/JJvFbNob/pDBhUrwhNzBFcqSv5+cB4s6tuxUcmdnS3jHq+Zp13MSspug akRJH7vGNVov+YpxjOH1PknMvilnUuw= -----END CERTIFICATE-----Generated at Fri Jul 24 10:15:36 2026 by rpki-client