$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa File: cd43aa95-3365-3fce-bb60-9f68c08faebc.roa (raw, json) Hash identifier: MdylDLOpsSAUBBxOVcmr1HFvgPyv9k2iTFlOVA8t3YM= Subject key identifier: BC:37:22:93:FB:15:CC:A3:BD:83:19:A2:B9:2F:83:45:2B:34:59:2A Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Certificate serial: 010D0C9F4328584E4129DF1EC4CE1C87595FA740 Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 46979 IP address blocks: 173.225.0.0/21 maxlen: 21 173.225.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:df:1e:c4:ce:1c:87:59:5f:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=08f16001-a46a-4468-a10e-4c6900f058f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:aa:9d:72:51:d0:58:a4:3c:56:a7:0d:43:85: 79:18:18:0c:2f:a4:b0:a8:1c:be:f4:69:f2:7f:04: 24:19:29:63:eb:ae:06:ff:e6:88:b6:e1:41:0d:4e: e8:4f:0e:06:e4:ac:36:f2:4c:f6:55:98:7a:8e:27: ad:39:9b:86:a4:2f:a1:b5:5c:db:04:97:f8:c3:dd: 66:af:f5:f5:f9:f1:39:0a:7c:5a:53:ca:30:fd:4c: c0:48:45:33:b4:5f:09:2a:7e:53:09:3e:7b:29:34: 4f:a1:90:f6:de:c2:25:81:7f:19:77:8e:c6:37:a4: 6f:c6:14:f0:88:cb:b8:38:d1:e1:ca:6e:85:38:f5: 61:11:69:88:3b:6b:c9:26:56:bb:1e:10:22:7a:89: e8:37:1a:02:56:5b:77:96:e6:5e:7c:7e:ad:31:eb: 2d:70:ec:88:5f:70:c9:a2:0f:5a:1a:e1:da:1f:67: f1:13:d6:2d:69:0a:fa:8e:50:38:de:91:9d:62:3a: 2d:e9:66:d2:a8:52:90:d3:0f:6b:82:e1:bf:f3:ea: 14:23:4e:36:61:3d:b3:5b:86:11:eb:29:1c:2e:85: 19:98:a9:a2:5a:01:44:fb:b0:dd:19:33:9c:8f:24: 79:06:56:20:0f:a5:3f:f9:e0:d1:f9:4a:99:83:80: 24:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:37:22:93:FB:15:CC:A3:BD:83:19:A2:B9:2F:83:45:2B:34:59:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl X509v3 Authority Key Identifier: keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer sbgp-ipAddrBlock: critical IPv4: 173.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:72:a3:c4:25:0f:3e:4c:e5:37:08:ff:63:68:6f:3a:00:50: b3:e4:f3:fc:e5:41:1a:cc:d3:b3:ae:8c:ae:ef:fb:ef:61:3f: b6:15:68:62:e2:11:95:b0:38:c7:ef:80:e2:c8:b5:7a:c2:14: 76:6e:26:37:dd:cd:45:91:9d:0e:38:26:ef:7e:3e:c7:e7:81: 36:f0:15:05:83:57:e9:aa:55:f4:ab:06:72:a6:f5:02:eb:1e: 69:e8:74:09:3f:f8:0a:54:97:9d:4f:f1:22:9b:3c:a8:31:2e: 16:76:ec:6f:ba:31:f4:4a:f9:71:f4:43:60:16:35:b9:53:73: f1:db:d7:1b:a5:bd:bb:da:c1:4d:ea:31:35:21:3e:54:83:cb: 0e:6c:07:c2:51:9f:cc:4f:0d:e3:39:7a:24:af:b6:72:62:65: bd:78:33:05:59:33:11:4c:d1:59:8b:56:c5:88:69:f2:0a:f0: 34:dc:27:71:82:44:36:0f:df:2a:47:1e:1c:c6:d2:cc:b4:82: 79:cb:e8:52:49:cd:b5:81:a7:3e:c8:b4:53:25:1e:2a:6a:ee: f2:fc:a8:ce:58:e0:c2:5c:90:86:93:bb:f2:8f:48:e8:f5:fe: 10:e4:04:55:0e:20:c3:76:86:4f:d9:e2:e0:94:67:d2:a5:94: 6b:f9:43:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKd8exM4ch1lfp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy ODE5MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk MDhmMTYwMDEtYTQ2YS00NDY4LWExMGUtNGM2OTAwZjA1OGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6qdclHQWKQ8VqcNQ4V5GBgML6SwqBy+9Gny fwQkGSlj664G/+aItuFBDU7oTw4G5Kw28kz2VZh6jietOZuGpC+htVzbBJf4w91m r/X1+fE5CnxaU8ow/UzASEUztF8JKn5TCT57KTRPoZD23sIlgX8Zd47GN6RvxhTw iMu4ONHhym6FOPVhEWmIO2vJJla7HhAieonoNxoCVlt3luZefH6tMestcOyIX3DJ og9aGuHaH2fxE9YtaQr6jlA43pGdYjot6WbSqFKQ0w9rguG/8+oUI042YT2zW4YR 6ykcLoUZmKmiWgFE+7DdGTOcjyR5BlYgD6U/+eDR+UqZg4AknQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLw3IpP7FcyjvYMZorkvg0UrNFkqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvY2Q0M2FhOTUtMzM2NS0z ZmNlLWJiNjAtOWY2OGMwOGZhZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1 ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJyo8QlDz5M5TcI/2NobzoAULPk8/zlQRrM07OujK7v++9hP7YVaGLi EZWwOMfvgOLItXrCFHZuJjfdzUWRnQ44Ju9+PsfngTbwFQWDV+mqVfSrBnKm9QLr HmnodAk/+ApUl51P8SKbPKgxLhZ27G+6MfRK+XH0Q2AWNblTc/Hb1xulvbvawU3q MTUhPlSDyw5sB8JRn8xPDeM5eiSvtnJiZb14MwVZMxFM0VmLVsWIafIK8DTcJ3GC RDYP3ypHHhzG0sy0gnnL6FJJzbWBpz7ItFMlHipq7vL8qM5Y4MJckIaTu/KPSOj1 /hDkBFUOIMN2hk/Z4uCUZ9KllGv5Q6Y= -----END CERTIFICATE-----Generated at Fri Jul 24 07:49:05 2026 by rpki-client