$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa File: cd43aa95-3365-3fce-bb60-9f68c08faebc.roa (raw, json) Hash identifier: 66F8n7P6/fPlWbo2klO2UB6nk59gy/5SPtyLp0kGkSg= Subject key identifier: 3A:1D:21:A5:FE:2C:D3:39:26:29:2F:A3:4C:9F:14:2B:3C:E8:BE:83 Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Certificate serial: 010D0C9F4328584EE38CAAF67335D836D6C81000 Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 46979 IP address blocks: 173.225.0.0/21 maxlen: 21 173.225.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:aa:f6:73:35:d8:36:d6:c8:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=06da797a-5e0c-408a-b698-32813fd7647d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c8:9d:04:b3:bc:1f:98:4d:33:35:3c:aa:1b: 93:7b:82:6c:21:06:96:4e:79:9e:52:5c:c8:b2:36: e5:2d:4e:fd:de:39:53:1c:29:e9:2a:b0:46:b6:4e: 3f:09:9f:04:d2:dd:d5:45:20:b1:7b:63:a2:61:71: 58:ea:9f:e8:e5:1a:83:3f:fd:a3:2c:5e:87:0a:6f: 83:31:0f:b2:62:4e:07:56:85:39:2e:e2:68:f4:0d: 57:78:0d:f2:d5:d4:9a:6d:2b:26:14:3d:bd:7f:e4: 4d:74:32:64:7f:90:f0:d4:70:fe:86:f6:e2:85:07: fe:d7:52:53:58:27:6e:f8:2a:cd:fc:6e:fc:e7:3d: 6f:84:9f:ca:64:4e:ce:4b:8f:5c:40:a5:a1:92:2e: f5:b2:a6:fe:61:5b:d0:fe:94:62:32:d9:aa:59:e2: 20:2e:4e:48:2c:30:30:fe:15:a6:34:a1:e8:f4:d6: 5f:db:5d:3e:a8:d3:27:ac:b0:d3:d1:61:36:f0:a7: 89:17:d1:04:8b:32:00:a3:4d:c5:6c:5f:9f:50:f7: 9d:a2:d2:58:c3:e4:f5:b7:b4:c4:64:66:a6:d1:1b: dc:8f:09:8d:5b:0a:38:46:f1:39:c4:4f:ad:57:c9: 1c:5f:93:87:d7:c2:30:52:c7:b1:8a:59:ae:b7:8e: c7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1D:21:A5:FE:2C:D3:39:26:29:2F:A3:4C:9F:14:2B:3C:E8:BE:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl X509v3 Authority Key Identifier: keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer sbgp-ipAddrBlock: critical IPv4: 173.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d2:44:1b:04:98:b9:3e:66:37:f5:48:f8:2a:6c:67:80:6f: c8:ac:f0:04:d7:62:da:aa:73:20:4d:4c:11:cc:df:8d:c2:4c: 68:d3:57:cf:a9:0d:c5:7f:c6:57:c9:10:3e:d2:b8:71:41:f6: 0f:80:c5:c7:45:a0:d4:50:e6:04:43:dc:74:0a:97:0a:48:68: a7:59:44:2c:5c:4f:3c:27:12:f3:ec:2e:b2:c3:c3:61:05:80: 6a:1f:3a:97:e4:39:5c:74:9d:c3:68:e2:bb:be:66:57:8e:d8: e7:8c:78:22:a7:97:f8:60:27:87:00:cb:0e:d2:e8:16:46:06: 5d:03:dd:94:9f:ca:70:d0:28:3e:fb:f9:16:96:94:11:91:42: 33:43:e4:37:ab:3e:4b:9d:35:0d:d8:79:bf:6b:ea:43:05:cd: ec:2a:84:99:15:49:e0:64:09:e4:33:ff:ae:06:71:b3:0f:27: f7:71:d0:53:d5:1e:84:63:35:0f:2e:ec:d5:11:4c:0f:25:ce: 9a:58:37:ee:9c:5f:eb:74:1f:94:78:97:65:1e:52:14:9d:83: 2a:64:f1:c6:0e:e3:e4:ba:1e:7c:a4:86:35:c1:7f:4e:f5:40: 0a:74:e1:7c:56:07:ed:11:3d:fb:64:c7:2e:e6:32:fd:be:cc: ca:e2:f5:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKr2czXYNtbIEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy ODE5MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk MDZkYTc5N2EtNWUwYy00MDhhLWI2OTgtMzI4MTNmZDc2NDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycidBLO8H5hNMzU8qhuTe4JsIQaWTnmeUlzI sjblLU793jlTHCnpKrBGtk4/CZ8E0t3VRSCxe2OiYXFY6p/o5RqDP/2jLF6HCm+D MQ+yYk4HVoU5LuJo9A1XeA3y1dSabSsmFD29f+RNdDJkf5Dw1HD+hvbihQf+11JT WCdu+CrN/G785z1vhJ/KZE7OS49cQKWhki71sqb+YVvQ/pRiMtmqWeIgLk5ILDAw /hWmNKHo9NZf210+qNMnrLDT0WE28KeJF9EEizIAo03FbF+fUPedotJYw+T1t7TE ZGam0RvcjwmNWwo4RvE5xE+tV8kcX5OH18IwUsexilmut47HVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDodIaX+LNM5Jikvo0yfFCs86L6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvY2Q0M2FhOTUtMzM2NS0z ZmNlLWJiNjAtOWY2OGMwOGZhZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1 ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfSRBsEmLk+Zjf1SPgqbGeAb8is8ATXYtqqcyBNTBHM343CTGjTV8+p DcV/xlfJED7SuHFB9g+AxcdFoNRQ5gRD3HQKlwpIaKdZRCxcTzwnEvPsLrLDw2EF gGofOpfkOVx0ncNo4ru+ZleO2OeMeCKnl/hgJ4cAyw7S6BZGBl0D3ZSfynDQKD77 +RaWlBGRQjND5DerPkudNQ3Yeb9r6kMFzewqhJkVSeBkCeQz/64GcbMPJ/dx0FPV HoRjNQ8u7NURTA8lzppYN+6cX+t0H5R4l2UeUhSdgypk8cYO4+S6HnykhjXBf071 QAp04XxWB+0RPftkxy7mMv2+zMri9SI= -----END CERTIFICATE-----Generated at Sat Sep 12 08:58:58 2026 by rpki-client