$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba25e767-fac8-33ef-86ee-28cf8252cb5a.roa File: ba25e767-fac8-33ef-86ee-28cf8252cb5a.roa (raw, json) Hash identifier: 7A3G5+2kU5RfeP0Bb6DuoxAM/7hc/nfeTMwNorcYHiI= Subject key identifier: 5C:CE:AD:C7:C6:F5:88:17:AF:D0:47:F5:9B:22:2C:BE:F4:4C:D4:60 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E5B6FDB60B9E36D23A2C15680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba25e767-fac8-33ef-86ee-28cf8252cb5a.roa Signing time: Wed 01 Jul 2026 18:52:27 +0000 ROA not before: Wed 01 Jul 2026 18:52:27 +0000 ROA not after: Tue 29 Sep 2026 18:52:27 +0000 asID: 19905 IP address blocks: 173.17.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:6f:db:60:b9:e3:6d:23:a2:c1:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 1 18:52:27 2026 GMT Not After : Sep 29 18:52:27 2026 GMT Subject: CN=6030a2da-89a4-473a-9332-e1fbe7f7e98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:69:8e:b5:0a:71:ec:64:e8:08:cd:ea:49:d3: 44:0c:bc:23:91:03:13:b1:28:83:11:94:f2:1c:3e: f7:06:41:b3:a0:59:6d:e5:6b:9f:28:41:98:9d:0a: 2a:ca:85:ca:a4:b0:d4:76:e2:28:f5:2e:9d:89:ea: 66:b9:d3:18:c7:85:24:83:f9:26:d9:91:50:e4:03: f6:67:32:8c:f7:e9:a9:32:20:3c:49:20:f0:21:07: 84:24:08:68:81:09:88:b0:80:f3:d7:bc:84:48:69: 6c:d2:18:e7:45:38:c9:49:07:5e:88:39:f3:02:c7: 04:42:13:31:d2:54:d4:fb:a3:dc:c0:79:8c:d6:44: ef:0a:17:fd:07:17:d0:be:d9:44:5f:2e:c6:99:44: 23:a3:85:8b:de:b8:63:d5:ba:d3:88:41:e3:97:e4: 50:89:01:fe:59:5f:f7:a3:f7:73:1f:b9:c5:92:61: 37:c2:14:62:29:db:e6:0c:cc:1c:9a:7d:dd:5b:44: ec:b5:6d:e5:2a:06:46:b7:b8:c1:47:63:76:e2:ac: 4d:93:6c:03:d4:ce:e8:9d:05:19:c9:b7:a5:75:1c: a1:82:1b:6a:d7:0c:70:c1:4d:af:bc:5f:2c:45:ca: 98:35:40:9f:96:9f:96:4c:95:64:70:13:06:3a:7b: 79:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CE:AD:C7:C6:F5:88:17:AF:D0:47:F5:9B:22:2C:BE:F4:4C:D4:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ba25e767-fac8-33ef-86ee-28cf8252cb5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.17.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b9:af:a0:cd:9f:0e:fb:5d:91:ab:3e:8d:20:6a:90:97:97: 3d:75:3c:e2:1b:fc:1a:20:89:27:d5:95:24:d5:c5:b4:5f:a6: 1e:22:f3:61:24:b1:78:82:6d:b6:e6:e9:92:d3:ce:e0:79:1d: 0e:73:89:20:18:ab:fd:57:bf:23:f4:d0:d9:79:45:8d:6b:16: 11:f9:0e:49:71:65:3f:5e:66:43:98:05:d7:15:b1:67:6c:61: f1:d3:a4:de:a1:a6:d0:4b:9a:cf:dd:6f:ef:27:54:8f:2c:32: ab:52:c1:ac:2f:ca:5c:75:aa:90:bb:21:51:0a:ca:f0:5e:44: c0:2f:a9:25:14:80:94:6f:1d:c4:21:7a:34:f2:68:8f:fb:ee: 76:ec:a7:43:86:a7:2f:9a:e8:f2:41:a9:fe:ac:23:d9:65:ed: 80:4f:ad:42:a7:e1:5f:87:2a:52:cb:9c:cd:94:88:13:c6:63: 79:33:82:59:bc:fb:aa:98:cc:1a:73:b5:21:ce:df:2d:1f:30: 6f:56:54:fe:e8:22:d9:c5:9e:11:2a:87:80:cc:ba:b6:69:0e: 84:93:a8:c8:77:c7:ed:80:57:53:10:cd:48:00:a9:54:25:57: 30:80:c5:96:3d:82:93:64:83:51:4e:a8:a5:b4:ae:f2:8d:28: 90:6f:90:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5bb9tgueNtI6LBVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcwMTE4NTIyN1oXDTI2MDkyOTE4NTIyN1owLzEtMCsGA1UEAxMk NjAzMGEyZGEtODlhNC00NzNhLTkzMzItZTFmYmU3ZjdlOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmmOtQpx7GToCM3qSdNEDLwjkQMTsSiDEZTy HD73BkGzoFlt5WufKEGYnQoqyoXKpLDUduIo9S6diepmudMYx4Ukg/km2ZFQ5AP2 ZzKM9+mpMiA8SSDwIQeEJAhogQmIsIDz17yESGls0hjnRTjJSQdeiDnzAscEQhMx 0lTU+6PcwHmM1kTvChf9BxfQvtlEXy7GmUQjo4WL3rhj1brTiEHjl+RQiQH+WV/3 o/dzH7nFkmE3whRiKdvmDMwcmn3dW0TstW3lKgZGt7jBR2N24qxNk2wD1M7onQUZ ybeldRyhghtq1wxwwU2vvF8sRcqYNUCflp+WTJVkcBMGOnt5LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzOrcfG9YgXr9BH9ZsiLL70TNRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmEyNWU3NjctZmFjOC0z M2VmLTg2ZWUtMjhjZjgyNTJjYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRFSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu5r6DNnw77XZGrPo0gapCXlz11POIb/BogiSfVlSTVxbRfph4i82Ek sXiCbbbm6ZLTzuB5HQ5ziSAYq/1XvyP00Nl5RY1rFhH5DklxZT9eZkOYBdcVsWds YfHTpN6hptBLms/db+8nVI8sMqtSwawvylx1qpC7IVEKyvBeRMAvqSUUgJRvHcQh ejTyaI/77nbsp0OGpy+a6PJBqf6sI9ll7YBPrUKn4V+HKlLLnM2UiBPGY3kzglm8 +6qYzBpztSHO3y0fMG9WVP7oItnFnhEqh4DMurZpDoSTqMh3x+2AV1MQzUgAqVQl VzCAxZY9gpNkg1FOqKW0rvKNKJBvkJo= -----END CERTIFICATE-----Generated at Mon Jul 20 19:31:46 2026 by rpki-client