$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa File: 3a3ff72c-b732-3667-ade1-9d63c15074cb.roa (raw, json) Hash identifier: ZkmvJPI2izNyiLnC36UVcKMg6+eLkwci80aSh7oOvhU= Subject key identifier: F6:68:41:9C:E4:A7:F2:E4:5A:37:C5:DF:38:E3:64:CD:F6:69:BF:07 Certificate issuer: /CN=0b291a85-da3e-420d-8e7f-61b66b323402 Certificate serial: 010D0C9F4328584EA8EC49CA05883439A378A080 Authority key identifier: 8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa Signing time: Wed 29 Jul 2026 13:00:12 +0000 ROA not before: Wed 29 Jul 2026 13:00:12 +0000 ROA not after: Tue 27 Oct 2026 13:00:12 +0000 asID: 13566 IP address blocks: 204.76.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a8:ec:49:ca:05:88:34:39:a3:78:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b291a85-da3e-420d-8e7f-61b66b323402 Validity Not Before: Jul 29 13:00:12 2026 GMT Not After : Oct 27 13:00:12 2026 GMT Subject: CN=ac97957d-4cf4-4378-8f73-2523f0b7d995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:85:a7:d3:93:20:67:19:c3:13:bc:db:e7:5b: ae:99:3d:8b:ee:05:c3:39:a4:65:29:d6:8a:f0:1b: 01:b4:f2:f8:d7:34:1f:f5:65:e5:da:15:4b:46:2f: 43:5b:5f:93:cb:58:fa:27:9c:de:2c:ac:44:6d:ee: c2:20:6f:6b:e0:a6:a0:20:1c:6b:c0:3c:6b:9f:6d: 05:e3:34:97:90:f6:fb:35:4a:5e:f9:88:bf:7f:a1: 7a:9d:98:86:24:72:2b:30:a2:56:ef:10:c3:4a:08: fd:fa:1d:8c:e1:08:6e:b2:12:bc:34:99:ce:fd:4e: bc:cb:d5:63:e0:b2:14:f7:d5:39:1f:e6:09:3e:fc: f3:02:a2:fc:ab:07:82:90:45:49:26:a5:85:62:0a: 6d:5f:15:e4:de:94:99:0e:13:b5:c5:85:67:1e:15: 5e:57:34:00:f5:c0:fc:97:f4:90:9c:5d:b0:c6:0a: e0:ca:d2:9b:c5:9d:42:fc:3c:bb:55:59:47:fd:af: c7:b7:9a:14:17:6d:3f:04:c6:ec:cb:c2:05:be:10: 30:0a:88:71:e7:e1:06:9f:de:af:d4:f3:7d:d6:80: 53:01:0e:e8:e5:92:cd:66:e7:62:23:90:91:f1:0a: 3c:9f:80:7e:2a:79:28:14:2e:6a:c8:bb:0d:1b:7e: 6d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:68:41:9C:E4:A7:F2:E4:5A:37:C5:DF:38:E3:64:CD:F6:69:BF:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl X509v3 Authority Key Identifier: keyid:8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer sbgp-ipAddrBlock: critical IPv4: 204.76.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:8b:c8:92:a1:bd:ca:37:47:35:bb:80:34:a6:70:42:32:34: f3:af:89:60:52:89:e9:c7:81:9a:16:2d:e7:18:1a:7d:97:fa: 6b:bb:82:46:58:54:13:6c:00:7f:20:7b:f4:3b:14:e2:2e:cc: 9a:e7:c6:f7:7d:68:1a:32:d9:13:9b:53:bc:5e:db:84:25:2e: b9:60:ba:67:49:b6:26:e9:bd:18:ef:38:75:61:24:7e:5d:40: 5d:af:44:e6:a7:cf:7e:60:2c:99:44:89:63:f9:18:69:bc:48: 15:9a:8a:ea:0f:db:8b:b0:05:6f:88:07:79:23:08:3a:1e:2a: d4:99:00:da:b6:84:5c:a9:5e:03:e8:00:dc:eb:82:a7:ef:16: 96:74:50:2e:7b:58:f3:a3:be:47:43:4e:f4:7e:90:41:3a:e7: 5b:c4:90:8f:12:1b:3d:28:5c:59:1f:7c:f2:08:cd:f8:f8:a9: ef:1c:70:fc:5c:d7:89:13:c1:a2:1f:ce:f8:75:09:64:6d:d6: ed:f1:2b:7f:b5:f2:1b:95:eb:56:d6:64:64:7b:df:43:72:6c: 67:81:b8:a5:93:01:63:83:16:dd:18:88:ff:c6:1d:b8:a8:e2: ab:36:b1:8b:0d:e6:70:f2:2d:a4:4e:d4:29:44:3f:37:10:8d: 18:00:5c:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7EnKBYg0OaN4oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIyOTFhODUtZGEzZS00MjBkLThlN2YtNjFiNjZiMzIz NDAyMB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk YWM5Nzk1N2QtNGNmNC00Mzc4LThmNzMtMjUyM2YwYjdkOTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIWn05MgZxnDE7zb51uumT2L7gXDOaRlKdaK 8BsBtPL41zQf9WXl2hVLRi9DW1+Ty1j6J5zeLKxEbe7CIG9r4KagIBxrwDxrn20F 4zSXkPb7NUpe+Yi/f6F6nZiGJHIrMKJW7xDDSgj9+h2M4QhushK8NJnO/U68y9Vj 4LIU99U5H+YJPvzzAqL8qweCkEVJJqWFYgptXxXk3pSZDhO1xYVnHhVeVzQA9cD8 l/SQnF2wxgrgytKbxZ1C/Dy7VVlH/a/Ht5oUF20/BMbsy8IFvhAwCohx5+EGn96v 1PN91oBTAQ7o5ZLNZudiI5CR8Qo8n4B+KnkoFC5qyLsNG35tSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZoQZzkp/LkWjfF3zjjZM32ab8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5 MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2NmIzMjM0MDIvM2EzZmY3MmMtYjczMi0z NjY3LWFkZTEtOWQ2M2MxNTA3NGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGIyOTFhODUtZGEzZS00MjBkLThl N2YtNjFiNjZiMzIzNDAyLzBiMjkxYTg1LWRhM2UtNDIwZC04ZTdmLTYxYjY2YjMy MzQwMi5jcmwwHwYDVR0jBBgwFoAUipRjkI4k+zNyMvz6tGzAt618TWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2 NmIzMjM0MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEyuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCLyJKhvco3RzW7gDSmcEIyNPOviWBSienHgZoWLecYGn2X+mu7gkZY VBNsAH8ge/Q7FOIuzJrnxvd9aBoy2RObU7xe24QlLrlgumdJtibpvRjvOHVhJH5d QF2vROanz35gLJlEiWP5GGm8SBWaiuoP24uwBW+IB3kjCDoeKtSZANq2hFypXgPo ANzrgqfvFpZ0UC57WPOjvkdDTvR+kEE651vEkI8SGz0oXFkffPIIzfj4qe8ccPxc 14kTwaIfzvh1CWRt1u3xK3+18huV61bWZGR730NybGeBuKWTAWODFt0YiP/GHbio 4qs2sYsN5nDyLaRO1ClEPzcQjRgAXMQ= -----END CERTIFICATE-----Generated at Fri Jul 31 00:49:25 2026 by rpki-client