$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdf6bb8b-7e5e-3b8e-9a44-6825319f0651.roa File: cdf6bb8b-7e5e-3b8e-9a44-6825319f0651.roa (raw, json) Hash identifier: Doc1vJ9waCuZsVJsIPtZyFL/4bXZnKGANK4C4u0VwE8= Subject key identifier: 20:C4:A3:61:23:4F:46:16:43:E3:26:0F:1D:4B:08:6A:DB:7B:35:58 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E885A37A3E58201D4D0E74F80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdf6bb8b-7e5e-3b8e-9a44-6825319f0651.roa Signing time: Fri 17 Jul 2026 21:00:12 +0000 ROA not before: Fri 17 Jul 2026 21:00:12 +0000 ROA not after: Thu 15 Oct 2026 21:00:12 +0000 asID: 30036 IP address blocks: 173.18.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:88:5a:37:a3:e5:82:01:d4:d0:e7:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 17 21:00:12 2026 GMT Not After : Oct 15 21:00:12 2026 GMT Subject: CN=32ead868-7447-4359-8775-0b731d1858e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f6:18:ac:9e:e3:90:74:88:0d:91:35:fc:78: 9c:71:8d:6c:df:cb:ff:ec:79:17:e5:00:d6:f7:12: b6:2f:d6:6a:d7:f9:33:1d:f4:34:d6:89:5a:b7:a1: 6e:da:c3:fc:c2:d5:89:8f:03:cd:40:f0:d1:a8:0f: b5:de:fa:81:e5:ee:4d:97:ae:80:66:b1:0e:9a:be: ff:01:b8:41:74:86:01:8b:21:4d:6c:53:21:08:5d: dc:43:fa:4b:43:00:77:4f:ec:48:2c:9e:fb:e2:79: d7:20:69:c2:5d:7a:78:0d:3f:07:dc:6e:a5:73:59: cc:36:dc:18:8c:cb:ae:fe:37:55:9b:e6:60:d7:b0: 13:f7:39:6c:77:43:ef:83:b6:25:08:50:c4:4c:b0: 26:15:70:9c:76:54:b0:ef:a8:ac:ca:81:01:2d:66: b8:d3:40:75:83:38:af:00:53:82:ac:e8:9e:e4:e7: bb:30:94:eb:c9:03:3e:7b:35:c1:40:7f:e1:f9:46: c9:b9:4f:ea:78:34:fe:cc:87:21:86:59:d6:65:16: 71:20:80:90:29:fe:3e:c9:11:8c:98:12:80:bb:38: f6:3e:64:9f:aa:5d:02:66:b1:fd:55:47:53:bc:3d: 74:bc:d3:ed:fd:2e:77:4e:fe:8d:8d:5a:0f:96:4c: e6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C4:A3:61:23:4F:46:16:43:E3:26:0F:1D:4B:08:6A:DB:7B:35:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cdf6bb8b-7e5e-3b8e-9a44-6825319f0651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:80:50:85:6f:38:58:fc:4e:24:e7:84:48:c7:a1:f0:3a:d2: 51:0b:91:a8:b5:0c:71:ad:27:ed:19:85:22:b5:59:e4:0c:c3: 1f:c2:c6:e2:ec:99:b0:f8:14:74:2b:b6:71:54:18:14:44:eb: 46:16:8c:71:b0:7e:04:dc:9d:2e:51:d3:88:64:ce:80:00:0f: a7:44:46:7c:98:f6:d9:b7:c0:5e:0d:fc:56:9a:92:6b:9d:7d: 5b:37:9b:e7:52:17:a7:91:99:2f:35:4d:4f:9c:1e:75:46:1e: b1:53:8d:2f:66:dd:e4:b4:34:b9:23:f3:93:88:ab:eb:e1:12: 68:ad:64:f6:75:dc:be:28:b7:71:71:d7:d1:09:9d:ab:a8:6b: 6a:88:d8:e1:13:e1:a0:30:d1:38:20:b6:25:8b:c4:2c:52:ca: 84:9a:d3:07:13:02:99:f6:8f:c5:8f:73:2d:b9:d0:e9:cf:c1: d2:6e:bd:34:75:39:97:a0:6d:5c:0f:f2:4f:8c:e2:20:f3:fd: 66:b8:2e:80:77:a4:26:94:a0:c7:b4:29:bc:36:ba:e8:8e:f4: 6c:a3:53:0c:b9:77:e2:4d:af:54:7f:b8:7d:60:78:1b:61:da: 3f:39:28:05:2a:bb:ce:fa:8f:35:dd:92:cb:0d:71:07:7b:b0: 10:d6:5a:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWjej5YIB1NDnT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk MzJlYWQ4NjgtNzQ0Ny00MzU5LTg3NzUtMGI3MzFkMTg1OGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPYYrJ7jkHSIDZE1/HiccY1s38v/7HkX5QDW 9xK2L9Zq1/kzHfQ01olat6Fu2sP8wtWJjwPNQPDRqA+13vqB5e5Nl66AZrEOmr7/ AbhBdIYBiyFNbFMhCF3cQ/pLQwB3T+xILJ774nnXIGnCXXp4DT8H3G6lc1nMNtwY jMuu/jdVm+Zg17AT9zlsd0Pvg7YlCFDETLAmFXCcdlSw76isyoEBLWa400B1gziv AFOCrOie5Oe7MJTryQM+ezXBQH/h+UbJuU/qeDT+zIchhlnWZRZxIICQKf4+yRGM mBKAuzj2PmSfql0CZrH9VUdTvD10vNPt/S53Tv6NjVoPlkzm6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDEo2EjT0YWQ+MmDx1LCGrbezVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2RmNmJiOGItN2U1ZS0z YjhlLTlhNDQtNjgyNTMxOWYwNjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRKwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASAUIVvOFj8TiTnhEjHofA60lELkai1DHGtJ+0ZhSK1WeQMwx/CxuLs mbD4FHQrtnFUGBRE60YWjHGwfgTcnS5R04hkzoAAD6dERnyY9tm3wF4N/Faakmud fVs3m+dSF6eRmS81TU+cHnVGHrFTjS9m3eS0NLkj85OIq+vhEmitZPZ13L4ot3Fx 19EJnauoa2qI2OET4aAw0TggtiWLxCxSyoSa0wcTApn2j8WPcy250OnPwdJuvTR1 OZegbVwP8k+M4iDz/Wa4LoB3pCaUoMe0Kbw2uuiO9GyjUwy5d+JNr1R/uH1geBth 2j85KAUqu876jzXdkssNcQd7sBDWWu8= -----END CERTIFICATE-----Generated at Fri Jul 24 11:26:01 2026 by rpki-client