$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdaa0aba-b515-360a-8168-d64f29315153.roa File: bdaa0aba-b515-360a-8168-d64f29315153.roa (raw, json) Hash identifier: HHHuYYG7iL0JOSEB17Orx8JMDKT17cfEjALQnNtakv8= Subject key identifier: B5:33:7E:55:08:70:B1:D9:0B:3B:B4:90:95:02:49:C9:1D:07:F2:C0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E5619F2F58E3A0BD30FEB2880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdaa0aba-b515-360a-8168-d64f29315153.roa Signing time: Mon 29 Jun 2026 21:00:12 +0000 ROA not before: Mon 29 Jun 2026 21:00:12 +0000 ROA not after: Sun 27 Sep 2026 21:00:12 +0000 asID: 19905 IP address blocks: 173.29.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:19:f2:f5:8e:3a:0b:d3:0f:eb:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 29 21:00:12 2026 GMT Not After : Sep 27 21:00:12 2026 GMT Subject: CN=3bf62b8f-63db-433b-b6a8-9227368c9bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:de:83:d6:06:f2:b4:c4:52:44:7c:c6:ae: f3:9b:4e:ac:de:e1:fd:9c:b9:5d:3a:4a:c4:f8:bd: 35:bd:75:66:fe:5c:20:b5:4b:71:5b:b0:44:df:7e: 51:75:1a:c4:e5:3c:b3:c4:2e:2d:b8:23:0b:37:7f: 7a:f9:9f:e1:a1:17:c2:35:a9:95:ac:70:34:86:6a: 66:ea:dd:41:92:cd:7e:e5:01:44:3e:6e:72:da:21: 19:c7:8b:64:06:01:c2:d4:63:54:a0:27:47:19:02: 24:24:6b:71:ec:cb:03:4f:c4:00:21:05:82:5b:be: 7f:2c:48:2e:ea:74:ad:74:2f:b8:3c:b0:1b:26:e6: fb:f6:de:93:5d:41:a0:43:89:a5:49:29:7e:66:42: 9e:ea:c0:b1:12:e1:3b:a2:5c:93:df:be:c5:e3:e8: 56:7d:ec:23:a4:af:9c:71:ed:49:b7:e1:5c:41:b3: 24:f7:15:89:1b:28:c6:33:73:e2:2f:99:93:a0:0d: 1f:59:d2:0c:25:1b:b8:9e:e0:89:fc:c1:28:5a:c0: 37:0e:d6:b2:fd:c0:bc:ba:60:ef:7a:0d:e1:9f:57: e2:4e:ad:1b:3b:cf:61:71:8c:60:41:8a:1f:53:5b: 7e:41:f5:15:e1:01:5a:1f:3c:07:d9:f8:a0:fa:b2: 40:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:33:7E:55:08:70:B1:D9:0B:3B:B4:90:95:02:49:C9:1D:07:F2:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bdaa0aba-b515-360a-8168-d64f29315153.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:48:44:ec:dd:f6:59:9a:bf:ca:97:85:06:9e:58:9f:47:7e: 94:fd:51:5e:58:8d:b3:ea:c1:ae:2a:40:f3:a2:10:0b:10:8a: 84:f2:a1:89:9e:c9:f2:a3:11:b0:16:a7:6d:26:f1:96:32:b7: 05:37:78:5d:a6:16:b3:85:97:c3:3e:4e:39:96:36:04:b8:5d: cc:b4:b3:24:f6:ed:95:f5:c1:49:6d:04:d5:84:69:c7:eb:71: 63:b3:e5:42:35:4a:ab:87:25:e4:d7:71:0b:c2:df:1b:52:3c: 74:8e:f7:c4:02:c3:a4:5e:f0:17:9c:90:10:8f:3b:42:5b:6e: b3:d3:70:6f:27:ab:a1:6a:d6:b0:ae:40:1a:00:b4:f5:dc:9a: 75:17:2a:b7:6f:cd:be:da:af:a6:48:34:b0:5d:e2:da:04:37: c9:d4:ef:f5:05:0d:26:2a:e8:01:33:35:04:67:a6:87:8c:60: f7:30:bf:88:b5:35:d7:04:7e:ec:3f:5d:5b:cd:71:ab:91:8e: e3:bb:9b:c7:b4:9a:1a:e4:39:53:13:bd:f6:5f:63:ab:98:eb: 4c:49:45:9f:e0:dc:4c:18:89:4f:b4:ef:95:52:60:8c:23:02: e7:7f:29:3e:59:84:3d:8e:ed:ac:76:5c:f8:f5:b6:4d:d5:32: 8a:35:4e:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WGfL1jjoL0w/rKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYyOTIxMDAxMloXDTI2MDkyNzIxMDAxMlowLzEtMCsGA1UEAxMk M2JmNjJiOGYtNjNkYi00MzNiLWI2YTgtOTIyNzM2OGM5YmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEDeg9YG8rTEUkR8xq7zm06s3uH9nLldOkrE +L01vXVm/lwgtUtxW7BE335RdRrE5TyzxC4tuCMLN396+Z/hoRfCNamVrHA0hmpm 6t1Bks1+5QFEPm5y2iEZx4tkBgHC1GNUoCdHGQIkJGtx7MsDT8QAIQWCW75/LEgu 6nStdC+4PLAbJub79t6TXUGgQ4mlSSl+ZkKe6sCxEuE7olyT377F4+hWfewjpK+c ce1Jt+FcQbMk9xWJGyjGM3PiL5mToA0fWdIMJRu4nuCJ/MEoWsA3Dtay/cC8umDv eg3hn1fiTq0bO89hcYxgQYofU1t+QfUV4QFaHzwH2fig+rJAVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUzflUIcLHZCzu0kJUCSckdB/LAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmRhYTBhYmEtYjUxNS0z NjBhLTgxNjgtZDY0ZjI5MzE1MTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrR0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpIROzd9lmav8qXhQaeWJ9HfpT9UV5YjbPqwa4qQPOiEAsQioTyoYme yfKjEbAWp20m8ZYytwU3eF2mFrOFl8M+TjmWNgS4Xcy0syT27ZX1wUltBNWEacfr cWOz5UI1SquHJeTXcQvC3xtSPHSO98QCw6Re8BeckBCPO0JbbrPTcG8nq6Fq1rCu QBoAtPXcmnUXKrdvzb7ar6ZINLBd4toEN8nU7/UFDSYq6AEzNQRnpoeMYPcwv4i1 NdcEfuw/XVvNcauRjuO7m8e0mhrkOVMTvfZfY6uY60xJRZ/g3EwYiU+075VSYIwj Aud/KT5ZhD2O7ax2XPj1tk3VMoo1Tpw= -----END CERTIFICATE-----Generated at Fri Jul 24 02:10:24 2026 by rpki-client