$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa File: cd43aa95-3365-3fce-bb60-9f68c08faebc.roa (raw, json) Hash identifier: szZgN6jPy/g9alcQ5gmxj8pe46qy76ymwMK03vuAQCg= Subject key identifier: 3E:3E:E6:39:82:42:2B:05:28:EC:B1:1E:C0:8F:55:4A:4B:C6:74:18 Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Certificate serial: 010D0C9F4328584F857874151457CB6302B73060 Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 46979 IP address blocks: 173.225.0.0/21 maxlen: 21 173.225.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:74:15:14:57:cb:63:02:b7:30:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=44426305-3831-425a-8569-acad45d6c683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:63:d8:bc:e6:69:a4:84:b1:fa:1d:be:56:95: 46:8f:96:16:c0:1f:a9:da:19:0d:32:6e:65:58:1b: 15:90:aa:8d:1a:fb:3f:b5:53:6c:8c:f7:77:3f:4d: ca:c4:22:b7:a7:67:a0:9d:d5:13:e7:f3:a8:ab:cd: 18:a0:4a:17:a3:ff:5f:4b:24:3b:c7:f2:c6:ea:d1: fa:ef:54:a5:5a:14:8f:88:08:86:a5:81:b0:e0:5f: c0:75:14:86:9f:46:5e:ca:af:ae:5e:6f:c8:1a:34: 7c:1f:31:ae:67:7b:a4:f2:95:9c:c6:63:7f:8d:6b: fa:ee:09:5f:2d:ec:2c:ac:79:31:c5:38:85:ac:f2: 29:a3:d4:9b:a8:1e:93:5f:ce:8e:73:fc:db:4f:b6: af:ec:12:a7:2d:92:5f:71:64:cd:07:fa:40:d1:66: 73:c7:46:25:d8:14:fb:0f:2f:57:9a:e7:86:8f:36: d3:b2:7d:e9:ce:9f:d8:2f:d1:9b:0e:c5:01:13:ba: e8:cb:81:10:c4:5f:0e:26:15:8d:69:61:36:73:68: b8:fb:78:95:58:c0:df:84:0e:2e:d9:83:42:da:93: 37:d3:de:7c:fe:e2:66:53:c9:19:81:b8:77:2c:27: 89:59:46:b7:26:6c:f0:f4:92:82:12:d0:42:ca:b1: 3e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3E:E6:39:82:42:2B:05:28:EC:B1:1E:C0:8F:55:4A:4B:C6:74:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl X509v3 Authority Key Identifier: keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer sbgp-ipAddrBlock: critical IPv4: 173.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1c:c3:cf:be:50:ae:ff:ae:3d:3b:15:ed:b0:b0:54:46:36: 49:0b:6d:16:b8:5a:47:fa:11:7c:5c:51:d8:24:c1:75:1f:a4: f3:0c:f2:42:29:0d:a1:fb:68:d3:35:4d:55:97:e3:a2:3e:89: 6b:85:07:e6:e2:79:80:0a:8b:cc:a0:21:cf:48:6a:b4:be:cc: e6:a0:75:16:66:cd:4a:14:10:73:b3:51:fe:8a:7d:00:0d:17: 3d:40:27:5f:17:71:b9:96:83:f9:e4:77:44:a5:d8:1e:65:f7: b2:1b:c6:26:ad:60:0f:d6:73:31:37:b8:0e:56:21:1e:10:97: c5:ee:78:05:7b:59:cb:85:63:af:48:27:42:8c:15:f2:5d:fb: bd:e1:0e:43:80:90:1e:2f:5a:75:92:76:53:e6:a5:ae:00:d4: fd:e6:2a:34:54:13:ed:91:0f:3f:24:25:77:b2:e4:79:af:f6: 4f:ed:e6:52:60:7b:d1:0f:cc:f3:e5:dd:2a:66:e4:95:fe:d7: a8:ca:b7:81:6d:9c:25:e2:96:a7:32:74:ec:ad:cf:37:0f:82: ee:8c:be:f4:93:12:de:3a:18:e7:78:a7:ba:d1:38:ef:6b:33: 54:32:ae:2d:c9:ce:0f:99:05:66:5a:91:28:94:c2:27:74:50: ce:83:52:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeHQVFFfLYwK3MGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy ODE5MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk NDQ0MjYzMDUtMzgzMS00MjVhLTg1NjktYWNhZDQ1ZDZjNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWPYvOZppISx+h2+VpVGj5YWwB+p2hkNMm5l WBsVkKqNGvs/tVNsjPd3P03KxCK3p2egndUT5/Ooq80YoEoXo/9fSyQ7x/LG6tH6 71SlWhSPiAiGpYGw4F/AdRSGn0Zeyq+uXm/IGjR8HzGuZ3uk8pWcxmN/jWv67glf LewsrHkxxTiFrPIpo9SbqB6TX86Oc/zbT7av7BKnLZJfcWTNB/pA0WZzx0Yl2BT7 Dy9XmueGjzbTsn3pzp/YL9GbDsUBE7roy4EQxF8OJhWNaWE2c2i4+3iVWMDfhA4u 2YNC2pM30958/uJmU8kZgbh3LCeJWUa3Jmzw9JKCEtBCyrE+lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4+5jmCQisFKOyxHsCPVUpLxnQYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvY2Q0M2FhOTUtMzM2NS0z ZmNlLWJiNjAtOWY2OGMwOGZhZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1 ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEcw8++UK7/rj07Fe2wsFRGNkkLbRa4Wkf6EXxcUdgkwXUfpPMM8kIp DaH7aNM1TVWX46I+iWuFB+bieYAKi8ygIc9IarS+zOagdRZmzUoUEHOzUf6KfQAN Fz1AJ18XcbmWg/nkd0Sl2B5l97IbxiatYA/WczE3uA5WIR4Ql8XueAV7WcuFY69I J0KMFfJd+73hDkOAkB4vWnWSdlPmpa4A1P3mKjRUE+2RDz8kJXey5Hmv9k/t5lJg e9EPzPPl3Spm5JX+16jKt4FtnCXilqcydOytzzcPgu6MvvSTEt46GOd4p7rROO9r M1Qyri3Jzg+ZBWZakSiUwid0UM6DUt8= -----END CERTIFICATE-----Generated at Wed Nov 4 05:50:13 2026 by rpki-client