$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa File: 850c851f-a2f0-39ea-8b04-db5609732a44.roa (raw, json) Hash identifier: qbgKnDugQxb8eFJUi3W1Bi6WATx3YQNMRTAHwm2vvc4= Subject key identifier: 9F:9E:DB:4B:02:47:F6:FC:F5:3A:EB:14:A1:1B:7F:15:24:90:8E:93 Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Certificate serial: 010D0C9F4328584E4129DF37BA36023B4C13B080 Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 46979 IP address blocks: 173.225.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:df:37:ba:36:02:3b:4c:13:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=2eae8ec8-4a00-49ca-b452-cfd4130f3cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:02:92:35:85:e5:52:98:e7:5a:a9:7a:19:07: 67:44:f6:00:e3:69:b5:83:75:24:ee:7c:1f:98:54: 91:99:ab:fd:eb:4d:54:21:4b:c7:2d:9d:cd:38:b3: 4d:28:ff:ed:08:e3:ef:dd:25:ce:21:8f:de:e2:ba: c9:b3:7f:37:d5:af:18:ce:e8:eb:59:8f:3b:14:14: f9:11:d4:12:06:17:56:a9:ae:bc:7b:7d:5b:60:01: 3f:b8:07:1f:84:8a:71:64:67:a1:fd:1b:79:4c:e7: 2f:cf:57:48:11:09:b3:a9:72:ab:1f:7e:86:2d:5c: a6:b4:f5:bb:5a:78:77:e7:9c:91:af:64:56:41:b2: 45:11:af:fe:52:f3:c8:88:07:17:21:3b:b4:07:73: 73:86:e5:2a:5e:a8:51:c7:60:6d:47:d4:60:2a:c5: 7e:b7:90:51:f1:f9:5d:64:dd:95:49:a7:e1:49:6a: 88:1c:a3:a2:f7:3d:a8:d1:f3:1f:19:ce:25:b2:bc: 42:e7:e5:bf:f4:09:73:b2:1e:19:b8:af:93:a6:06: 6f:1c:f2:43:dd:1a:4d:05:b7:35:20:9e:77:24:f1: b0:80:ef:9a:01:ce:a2:82:55:61:1d:af:a9:6f:43: 87:18:c7:cd:b8:2a:fb:61:ef:32:7b:87:7b:a2:97: 78:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9E:DB:4B:02:47:F6:FC:F5:3A:EB:14:A1:1B:7F:15:24:90:8E:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl X509v3 Authority Key Identifier: keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer sbgp-ipAddrBlock: critical IPv4: 173.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:7e:4d:bd:d8:ac:aa:e5:63:4e:35:7c:06:81:41:cd:d8:0c: f2:99:52:bb:46:8a:e2:37:99:fd:c0:1f:5a:af:c4:20:86:ae: bf:55:dd:be:b1:bd:46:69:96:df:9f:fb:e7:d7:11:45:c0:68: 9a:48:b8:4c:c2:8f:63:74:9c:d0:ea:d7:98:4b:ef:38:6d:4b: 9c:ca:3c:56:5b:5c:5c:9a:4d:ef:cd:dd:d6:59:2a:36:69:5b: 6e:3c:c3:ab:dc:c2:4b:66:70:49:02:31:02:38:71:09:93:6c: bf:cb:19:da:06:4b:90:03:71:50:13:a2:ef:61:a1:ef:63:38: c1:6a:a2:e1:d0:13:81:54:f1:3e:03:2f:0d:86:6b:b6:d2:d9: 62:ca:92:3a:36:ff:cb:55:8f:06:40:00:f8:02:8d:81:19:10: c8:00:40:c0:de:e4:4c:62:39:84:7f:ba:b8:00:42:a6:4f:2a: b0:b9:08:d3:e3:c8:69:9e:f5:31:63:79:b3:57:e5:61:9b:0e: a6:7a:26:16:8e:68:82:f9:89:5b:27:89:3a:52:51:21:7b:05: 30:b8:4d:51:49:fc:1c:88:8a:f3:54:a3:03:39:46:8f:5a:28: 9e:4b:0d:e8:24:e8:1a:c9:2a:74:fa:46:64:12:56:3a:60:72: be:08:ee:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKd83ujYCO0wTsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy ODE5MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk MmVhZThlYzgtNGEwMC00OWNhLWI0NTItY2ZkNDEzMGYzY2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgKSNYXlUpjnWql6GQdnRPYA42m1g3Uk7nwf mFSRmav9601UIUvHLZ3NOLNNKP/tCOPv3SXOIY/e4rrJs3831a8YzujrWY87FBT5 EdQSBhdWqa68e31bYAE/uAcfhIpxZGeh/Rt5TOcvz1dIEQmzqXKrH36GLVymtPW7 Wnh355yRr2RWQbJFEa/+UvPIiAcXITu0B3NzhuUqXqhRx2BtR9RgKsV+t5BR8fld ZN2VSafhSWqIHKOi9z2o0fMfGc4lsrxC5+W/9Alzsh4ZuK+TpgZvHPJD3RpNBbc1 IJ53JPGwgO+aAc6iglVhHa+pb0OHGMfNuCr7Ye8ye4d7opd4bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+e20sCR/b89TrrFKEbfxUkkI6TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvODUwYzg1MWYtYTJmMC0z OWVhLThiMDQtZGI1NjA5NzMyYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1 ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt+Tb3YrKrlY041fAaBQc3YDPKZUrtGiuI3mf3AH1qvxCCGrr9V3b6x vUZplt+f++fXEUXAaJpIuEzCj2N0nNDq15hL7zhtS5zKPFZbXFyaTe/N3dZZKjZp W248w6vcwktmcEkCMQI4cQmTbL/LGdoGS5ADcVATou9hoe9jOMFqouHQE4FU8T4D Lw2Ga7bS2WLKkjo2/8tVjwZAAPgCjYEZEMgAQMDe5ExiOYR/urgAQqZPKrC5CNPj yGme9TFjebNX5WGbDqZ6JhaOaIL5iVsniTpSUSF7BTC4TVFJ/ByIivNUowM5Ro9a KJ5LDegk6BrJKnT6RmQSVjpgcr4I7vA= -----END CERTIFICATE-----Generated at Fri Jul 24 15:11:15 2026 by rpki-client