$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa File: 850c851f-a2f0-39ea-8b04-db5609732a44.roa (raw, json) Hash identifier: Wk25lVC0XZSWicFeKgMxDlJbmjqI9X1uH3di8qqdIS4= Subject key identifier: 3E:AC:25:91:B3:57:D1:C5:7A:C0:D4:BE:8E:E2:18:A8:29:86:C5:D2 Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Certificate serial: 010D0C9F4328584EE38CAB106FE6E2D8E78B4110 Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 46979 IP address blocks: 173.225.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:ab:10:6f:e6:e2:d8:e7:8b:41:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=0d9d26cd-9622-46f4-90a9-cf10c50bb65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:2b:f2:91:ea:a3:ce:4e:f9:7c:4d:eb:73: 16:3d:0a:6e:2a:e1:5c:44:cd:60:24:cf:86:8e:cf: 0b:47:e3:d2:1b:0e:11:f2:ca:d6:dd:09:0c:e4:57: 84:2d:ee:6c:66:4e:b2:92:b1:10:34:33:04:a5:71: 7a:5f:2c:bb:45:5e:44:0b:c5:09:25:9d:b3:43:36: 5e:50:8f:b2:c6:ee:ab:21:da:5d:ad:21:ca:4c:51: 36:ee:3a:f9:50:f9:3d:5d:21:b1:5d:e5:3c:41:2f: f9:23:9c:ef:9d:26:38:9b:ca:d2:94:87:b3:75:10: 7c:d5:b1:b6:bc:44:30:e9:b5:36:53:7c:2f:e9:4b: a3:ce:eb:86:82:1f:c0:25:55:20:98:1b:f6:03:9e: fe:ad:b3:16:db:48:a7:16:0a:0c:07:84:6a:0c:74: 45:27:d4:2a:a7:ca:01:c8:5e:82:b0:ac:02:ed:72: 71:87:79:dd:bb:c7:69:65:30:0e:c7:14:c2:aa:28: ec:03:38:78:83:66:fe:64:80:8c:2c:5e:92:71:fb: c0:6b:a8:62:f0:d2:03:c2:5e:62:b6:f2:13:cf:cc: d0:d7:b9:07:3c:c0:b6:ae:4f:fe:ee:09:8b:df:26: 3f:bd:85:4b:14:9d:af:b6:ea:e8:bf:44:4e:7d:8f: 9d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AC:25:91:B3:57:D1:C5:7A:C0:D4:BE:8E:E2:18:A8:29:86:C5:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl X509v3 Authority Key Identifier: keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer sbgp-ipAddrBlock: critical IPv4: 173.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:84:f5:35:f7:61:08:dc:bc:8e:cd:07:62:08:4c:42:b7:f6: 0a:60:84:13:3e:4d:7c:d9:6e:ea:ee:fd:67:25:e8:20:8f:29: 9b:2a:29:2d:55:b5:6e:04:74:45:d7:2e:63:35:4b:2b:d8:52: 1b:0e:f5:53:5e:63:b3:50:01:da:88:a3:a6:a8:9a:33:15:98: 58:df:d9:75:f3:7a:3b:a3:62:0a:98:93:20:ca:9e:44:17:a1: ad:12:fb:86:dd:c8:f1:2d:bd:31:6e:8d:64:db:f8:53:8d:e6: e2:ad:f6:d0:5b:17:29:0a:d2:25:c1:b6:d6:00:2b:6b:15:56: 58:06:35:f0:2e:7c:2f:a4:15:57:49:e3:cb:bc:c9:9a:c0:c2: fe:af:c9:5a:98:09:a6:11:1b:7a:d9:dc:ca:bb:1f:e4:b7:e7: de:9c:76:ce:4c:3c:00:74:02:b6:c0:c3:e2:a3:ce:9f:29:21: 29:29:6c:1b:24:e6:f1:a0:26:ab:e7:4f:4d:6f:7d:12:41:79: cf:cd:0b:41:f8:7b:94:62:24:f3:c2:88:d7:8a:f5:79:88:d3: 04:26:58:d9:d8:61:23:a6:df:cc:4e:12:3c:a1:ca:21:8f:43: 84:6c:22:5a:c3:3b:18:bc:fb:ca:47:04:1d:aa:b0:72:ac:08: 24:ac:b9:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKsQb+bi2OeLQRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy ODE5MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk MGQ5ZDI2Y2QtOTYyMi00NmY0LTkwYTktY2YxMGM1MGJiNjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEQr8pHqo85O+XxN63MWPQpuKuFcRM1gJM+G js8LR+PSGw4R8srW3QkM5FeELe5sZk6ykrEQNDMEpXF6Xyy7RV5EC8UJJZ2zQzZe UI+yxu6rIdpdrSHKTFE27jr5UPk9XSGxXeU8QS/5I5zvnSY4m8rSlIezdRB81bG2 vEQw6bU2U3wv6UujzuuGgh/AJVUgmBv2A57+rbMW20inFgoMB4RqDHRFJ9Qqp8oB yF6CsKwC7XJxh3ndu8dpZTAOxxTCqijsAzh4g2b+ZICMLF6ScfvAa6hi8NIDwl5i tvITz8zQ17kHPMC2rk/+7gmL3yY/vYVLFJ2vturov0ROfY+dQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6sJZGzV9HFesDUvo7iGKgphsXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvODUwYzg1MWYtYTJmMC0z OWVhLThiMDQtZGI1NjA5NzMyYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1 ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGE9TX3YQjcvI7NB2IITEK39gpghBM+TXzZburu/Wcl6CCPKZsqKS1V tW4EdEXXLmM1SyvYUhsO9VNeY7NQAdqIo6aomjMVmFjf2XXzejujYgqYkyDKnkQX oa0S+4bdyPEtvTFujWTb+FON5uKt9tBbFykK0iXBttYAK2sVVlgGNfAufC+kFVdJ 48u8yZrAwv6vyVqYCaYRG3rZ3Mq7H+S3596cds5MPAB0ArbAw+Kjzp8pISkpbBsk 5vGgJqvnT01vfRJBec/NC0H4e5RiJPPCiNeK9XmI0wQmWNnYYSOm38xOEjyhyiGP Q4RsIlrDOxi8+8pHBB2qsHKsCCSsuWQ= -----END CERTIFICATE-----Generated at Sat Sep 12 08:59:56 2026 by rpki-client