$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa File: 850c851f-a2f0-39ea-8b04-db5609732a44.roa (raw, json) Hash identifier: BBEESnsPjpXQRKPYbDkriYHfbXwvmbgf6klqI82sG80= Subject key identifier: 60:2F:47:44:56:AB:1B:2C:95:0D:94:79:FD:6B:E6:65:9B:82:50:11 Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Certificate serial: 010D0C9F4328584F8578742F168C66FAD338B932 Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 46979 IP address blocks: 173.225.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:74:2f:16:8c:66:fa:d3:38:b9:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=aa303b03-5ff0-4f1e-b4d3-f7eff3ef8bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c2:0e:1c:38:04:32:0e:34:b6:d3:13:17:f0: b8:32:6e:83:f9:7e:b0:df:65:94:16:53:d9:d7:9b: 31:f3:ae:8a:67:e2:94:99:89:09:e7:34:c4:55:74: 45:f1:e6:58:df:e2:d9:00:fa:78:65:7c:f3:a0:5e: 03:f3:d6:81:d4:6b:05:f5:e9:48:c3:e6:4d:5d:57: e7:d2:ca:74:9c:51:e1:f2:78:86:af:c6:da:a9:b4: 98:ea:a6:f7:6a:85:79:19:b9:7a:77:46:3f:5c:7c: c0:59:8f:87:12:9f:11:b9:26:ef:41:a2:78:85:c4: b1:d8:f4:b5:06:35:66:68:82:47:80:e5:83:8d:d5: a1:fb:5e:d4:17:b0:56:0f:33:6b:0f:0b:87:e9:5d: d2:ed:d1:a5:ae:1d:c8:6c:20:e8:e1:1c:92:2e:19: 63:02:1c:69:e4:bf:72:c5:64:35:ec:c9:97:d8:5a: 43:3c:7c:1f:7f:d6:c1:50:99:31:27:02:2b:18:fd: 55:49:e9:18:b0:b7:80:99:9c:30:57:c9:b3:c7:bd: 67:78:76:57:5a:97:9a:6a:d5:2d:a1:1f:02:f1:46: 3d:33:9a:aa:1d:27:a6:c9:6c:f2:35:c0:da:0f:f9: 22:9e:8c:34:71:ff:3b:98:62:d0:69:b6:e1:23:af: af:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2F:47:44:56:AB:1B:2C:95:0D:94:79:FD:6B:E6:65:9B:82:50:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/850c851f-a2f0-39ea-8b04-db5609732a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl X509v3 Authority Key Identifier: keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer sbgp-ipAddrBlock: critical IPv4: 173.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:a1:c7:1d:44:9b:4e:11:3b:08:03:af:08:73:ae:c7:94:04: 67:27:aa:a6:27:59:e7:be:a0:ea:f1:e3:c5:06:7d:d9:e3:bf: 6c:85:8d:99:8f:0d:6b:a2:99:64:bb:28:b8:c3:cf:af:2c:c6: fb:d5:17:80:02:54:7c:db:56:71:49:88:bd:83:50:44:62:de: 45:70:38:1f:74:a3:d3:4a:68:19:6e:f7:94:6b:2f:41:ff:e3: c0:d3:e1:5b:71:e4:6d:1b:43:49:cb:41:ab:1c:08:2a:03:ac: a9:d4:aa:a3:a9:87:65:cf:44:f4:73:50:8b:73:3a:fb:81:b7: 9f:6e:3c:79:4f:45:3d:ce:23:b5:bd:6c:c9:ea:d4:26:90:a2: 25:1c:c8:9a:21:3b:78:e0:aa:15:91:c8:00:67:02:47:a8:43: 9d:03:1e:e2:db:1d:d6:ca:54:5b:83:e7:95:08:e3:b6:9e:6a: ee:13:96:10:23:8a:50:71:13:1b:35:97:71:40:0e:17:6f:84: fc:59:9c:a5:73:8a:89:cf:cd:ff:89:85:07:b2:c0:1c:49:80: a2:48:ca:43:17:fb:9c:87:47:e1:c7:c2:b8:43:11:82:f0:90: c5:10:71:99:94:e5:60:84:35:88:22:c4:ab:1b:f2:78:3e:ca: 75:fe:c8:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeHQvFoxm+tM4uTIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy ODE5MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk YWEzMDNiMDMtNWZmMC00ZjFlLWI0ZDMtZjdlZmYzZWY4YmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMIOHDgEMg40ttMTF/C4Mm6D+X6w32WUFlPZ 15sx866KZ+KUmYkJ5zTEVXRF8eZY3+LZAPp4ZXzzoF4D89aB1GsF9elIw+ZNXVfn 0sp0nFHh8niGr8baqbSY6qb3aoV5Gbl6d0Y/XHzAWY+HEp8RuSbvQaJ4hcSx2PS1 BjVmaIJHgOWDjdWh+17UF7BWDzNrDwuH6V3S7dGlrh3IbCDo4RySLhljAhxp5L9y xWQ17MmX2FpDPHwff9bBUJkxJwIrGP1VSekYsLeAmZwwV8mzx71neHZXWpeaatUt oR8C8UY9M5qqHSemyWzyNcDaD/kinow0cf87mGLQabbhI6+v7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAvR0RWqxsslQ2Uef1r5mWbglARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvODUwYzg1MWYtYTJmMC0z OWVhLThiMDQtZGI1NjA5NzMyYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1 ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGhxx1Em04ROwgDrwhzrseUBGcnqqYnWee+oOrx48UGfdnjv2yFjZmP DWuimWS7KLjDz68sxvvVF4ACVHzbVnFJiL2DUERi3kVwOB90o9NKaBlu95RrL0H/ 48DT4Vtx5G0bQ0nLQascCCoDrKnUqqOph2XPRPRzUItzOvuBt59uPHlPRT3OI7W9 bMnq1CaQoiUcyJohO3jgqhWRyABnAkeoQ50DHuLbHdbKVFuD55UI47aeau4TlhAj ilBxExs1l3FADhdvhPxZnKVzionPzf+JhQeywBxJgKJIykMX+5yHR+HHwrhDEYLw kMUQcZmU5WCENYgixKsb8ng+ynX+yAQ= -----END CERTIFICATE-----Generated at Wed Nov 4 12:16:31 2026 by rpki-client