$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/166e763d-f4a0-31a5-a873-0f074288b16c.roa File: 166e763d-f4a0-31a5-a873-0f074288b16c.roa (raw, json) Hash identifier: zE2/oS4EvxCa/e6kr46MsSutIIzYtxJ0ZXxvVq8oRMQ= Subject key identifier: 73:04:EA:77:62:45:89:ED:9A:C9:8D:D8:06:B7:34:33:79:01:64:6C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DA3E566200F9D5753EBE58280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/166e763d-f4a0-31a5-a873-0f074288b16c.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 19905 IP address blocks: 173.29.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:66:20:0f:9d:57:53:eb:e5:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=dba8ad20-d7a0-4be5-9beb-c0be92a7dc4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:24:62:e1:b6:61:14:e5:d3:df:f9:06:33:f8: 14:b0:71:53:fa:20:06:f5:19:25:a6:dd:50:24:bf: 0c:59:b8:2c:ec:fd:d1:27:97:07:33:7a:10:14:36: 92:78:46:9a:8c:51:36:6a:64:a9:bd:4b:ac:79:b5: 8b:64:fc:4e:5d:76:c0:48:9b:2f:94:2f:4c:f9:aa: 4e:8c:f3:58:ca:75:e1:21:68:0d:af:7a:ea:84:a5: fa:3c:2d:c7:80:29:64:fe:84:08:30:11:32:37:d9: 00:00:2f:07:20:0b:36:f0:85:54:d1:7f:ef:5e:d0: 4b:f7:fc:fc:1b:9b:e2:06:5c:1e:5e:59:5e:20:4f: 30:ef:9a:56:fc:da:89:05:7d:31:6c:fc:ae:92:ed: a3:cc:d7:84:d0:96:0e:c2:73:7d:69:76:e6:a9:1b: b9:91:82:1b:6a:dd:80:27:14:b1:5e:26:7c:b7:0b: 43:f2:c4:69:21:67:5b:73:3f:5c:76:8d:99:7c:46: eb:99:2b:fb:c5:11:17:a9:77:f2:ab:3d:0e:a5:85: 20:ca:46:c5:56:21:3d:21:a7:5a:a9:29:b0:85:32: cd:9f:0e:86:0c:61:3d:81:db:4b:26:cd:5f:36:57: ed:39:e1:77:93:5a:2f:15:32:47:82:50:01:70:62: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:04:EA:77:62:45:89:ED:9A:C9:8D:D8:06:B7:34:33:79:01:64:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/166e763d-f4a0-31a5-a873-0f074288b16c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:61:f3:31:32:81:5e:2c:b0:57:b7:ff:86:f1:c5:fe:a6:ad: a9:dd:4b:32:87:43:26:12:92:b4:90:ba:c2:35:07:41:7a:5f: b0:da:08:65:77:2a:34:88:87:48:07:2d:9c:76:9d:4f:ea:a7: 79:8c:a9:53:17:09:6b:9c:45:3d:1f:26:7c:e2:56:5d:cb:ab: 06:0e:ab:e4:cc:2b:2d:57:3a:c9:b0:26:4b:83:24:cf:e6:13: e9:26:9e:1e:02:ad:7b:2c:d3:12:d9:31:e7:8c:e5:45:83:46: 90:eb:a1:ee:91:51:43:06:38:84:88:05:de:8b:c1:64:5b:69: b7:15:67:4b:fa:5d:a9:d2:b5:d7:4b:d5:3a:22:44:ca:a2:36: b3:6c:12:a8:5b:e9:ad:4e:cc:c9:69:b6:99:cd:57:e2:c0:19: 74:55:94:33:e4:e7:07:80:84:55:0e:0d:7f:d8:ff:64:ed:ba: 9f:b0:84:0f:e9:e2:0c:5b:e5:ab:08:94:95:bc:3d:78:14:6a: 0e:ef:06:6e:56:bf:dc:58:b4:87:f4:99:34:32:5a:4a:3a:2f: 59:82:a8:70:af:db:38:d3:d7:8f:78:07:5b:7f:5f:62:ad:77: c3:69:60:e8:5e:17:7f:d8:d1:87:36:0e:74:58:0b:28:3b:71: 80:d6:4f:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5WYgD51XU+vlgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk ZGJhOGFkMjAtZDdhMC00YmU1LTliZWItYzBiZTkyYTdkYzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCRi4bZhFOXT3/kGM/gUsHFT+iAG9Rklpt1Q JL8MWbgs7P3RJ5cHM3oQFDaSeEaajFE2amSpvUusebWLZPxOXXbASJsvlC9M+apO jPNYynXhIWgNr3rqhKX6PC3HgClk/oQIMBEyN9kAAC8HIAs28IVU0X/vXtBL9/z8 G5viBlweXlleIE8w75pW/NqJBX0xbPyuku2jzNeE0JYOwnN9aXbmqRu5kYIbat2A JxSxXiZ8twtD8sRpIWdbcz9cdo2ZfEbrmSv7xREXqXfyqz0OpYUgykbFViE9Iada qSmwhTLNnw6GDGE9gdtLJs1fNlftOeF3k1ovFTJHglABcGLS6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHME6ndiRYntmsmN2Aa3NDN5AWRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTY2ZTc2M2QtZjRhMC0z MWE1LWE4NzMtMGYwNzQyODhiMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR25MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdh8zEygV4ssFe3/4bxxf6mrandSzKHQyYSkrSQusI1B0F6X7DaCGV3 KjSIh0gHLZx2nU/qp3mMqVMXCWucRT0fJnziVl3LqwYOq+TMKy1XOsmwJkuDJM/m E+kmnh4CrXss0xLZMeeM5UWDRpDroe6RUUMGOISIBd6LwWRbabcVZ0v6XanStddL 1ToiRMqiNrNsEqhb6a1OzMlptpnNV+LAGXRVlDPk5weAhFUODX/Y/2Ttup+whA/p 4gxb5asIlJW8PXgUag7vBm5Wv9xYtIf0mTQyWko6L1mCqHCv2zjT1494B1t/X2Kt d8NpYOheF3/Y0Yc2DnRYCyg7cYDWTyM= -----END CERTIFICATE-----Generated at Fri May 8 21:32:02 2026 by rpki-client