$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa File: a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa (raw, json) Hash identifier: QCMX0FI7PBnV2dOlJSIDgsN5ejzrWmQgOpj3L7NujzU= Subject key identifier: F2:FC:AA:6C:98:3D:E9:00:DB:1C:AE:B7:AE:29:CB:06:3A:EB:75:6B Certificate issuer: /CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Certificate serial: 010D0C9F4328584EA7980BC4E19CD720BD6A9480 Authority key identifier: A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 32854 IP address blocks: 169.197.172.0/24 maxlen: 24 169.197.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:0b:c4:e1:9c:d7:20:bd:6a:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b24522b-8239-4bb9-9845-1e01e28aa452 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0c065f05-d906-416a-82b8-e1b430d411e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:eb:63:4d:10:4f:93:15:71:cb:64:9f:b6:dd: d6:e8:41:9f:4f:6b:8f:04:e2:03:31:21:c3:52:d1: ab:7b:44:ea:41:fa:9c:ef:b0:bc:6d:cd:5b:56:a1: aa:df:1b:70:7a:a8:dd:92:47:1d:b3:27:f1:e7:64: 04:b1:71:0d:aa:9f:d7:a8:a1:99:0a:05:a6:b2:06: be:f1:bb:fe:bc:59:7b:6d:5f:e9:49:31:d0:5a:55: 80:d2:8a:22:ee:57:c2:d9:b6:1a:20:b5:a3:f2:2d: b9:da:d0:0a:65:f0:40:65:46:45:fa:12:cb:8e:81: 08:62:2f:1a:a8:68:3a:a9:30:8a:85:5c:7d:e6:5d: 92:2b:7b:4b:72:64:8b:e0:6e:e9:22:5f:d8:44:ec: d4:db:2f:0e:78:24:ae:3a:11:b2:04:8a:59:93:07: 5a:e8:5d:b7:3b:1e:c2:7c:70:a1:96:c2:48:fa:36: 9f:1a:f0:db:be:82:73:48:3e:54:c6:f5:f0:87:05: ef:e6:bf:9f:38:4a:88:12:a4:aa:6a:08:9c:bc:28: da:71:26:e1:a6:e4:c8:dd:38:2d:81:a0:b0:c6:87: 6e:a0:51:af:d1:55:82:43:17:9b:d4:ad:9a:d3:66: d6:ce:a4:b1:52:c1:b2:89:34:d7:50:2f:4c:e6:ec: dd:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FC:AA:6C:98:3D:E9:00:DB:1C:AE:B7:AE:29:CB:06:3A:EB:75:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/a3278fd8-969b-3d7a-b7c1-e5f4aaba073f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452/3b24522b-8239-4bb9-9845-1e01e28aa452.crl X509v3 Authority Key Identifier: keyid:A0:02:F5:68:D9:AE:0F:63:11:51:15:44:02:1D:1D:5B:FE:4E:B0:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b24522b-8239-4bb9-9845-1e01e28aa452.cer sbgp-ipAddrBlock: critical IPv4: 169.197.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:dd:1b:03:d4:3a:13:7d:5b:ee:08:08:e7:c0:63:30:6f:78: 3c:6d:1e:26:51:ce:48:42:2f:7e:3d:54:68:e8:e3:3a:38:c6: f4:81:81:8f:1c:e9:12:c6:9f:da:63:c1:ae:77:d6:68:b9:18: 9d:63:60:46:c3:ae:c6:31:cc:a7:a0:34:8e:a7:75:eb:5d:ac: b3:6f:c5:cb:e2:8a:38:08:91:bc:ba:06:53:f6:94:23:14:6c: f8:92:f5:af:b0:2b:b0:3a:7e:2a:87:2e:e4:c1:4f:9e:3a:20: 01:60:98:ca:30:8d:a1:8d:fb:f9:18:12:49:0f:7c:27:8e:d6: 67:a7:20:1a:c6:7b:65:fe:11:4b:9b:1b:8e:7f:49:e9:06:4e: 0e:d4:c8:a0:d5:dd:f8:18:d1:95:c8:c3:5a:5c:89:6d:5e:0f: 7c:00:93:78:99:bd:48:a3:93:d7:5a:f3:4d:30:fd:1c:ea:4a: 20:92:00:83:e2:e6:58:f7:eb:7c:f2:74:71:91:d5:cd:b5:94: a9:3a:60:1f:7b:76:2e:2b:3d:d5:7b:33:ba:d0:9e:91:6d:2d: da:22:84:34:1b:68:89:45:5c:08:c5:40:45:01:d3:88:05:58: b4:24:7b:51:38:7a:f0:9f:0b:ce:59:2d:56:fc:35:cc:32:ee: 5b:dd:af:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmAvE4ZzXIL1qlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2IyNDUyMmItODIzOS00YmI5LTk4NDUtMWUwMWUyOGFh NDUyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGMwNjVmMDUtZDkwNi00MTZhLTgyYjgtZTFiNDMwZDQxMWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOtjTRBPkxVxy2Sftt3W6EGfT2uPBOIDMSHD UtGre0TqQfqc77C8bc1bVqGq3xtweqjdkkcdsyfx52QEsXENqp/XqKGZCgWmsga+ 8bv+vFl7bV/pSTHQWlWA0ooi7lfC2bYaILWj8i252tAKZfBAZUZF+hLLjoEIYi8a qGg6qTCKhVx95l2SK3tLcmSL4G7pIl/YROzU2y8OeCSuOhGyBIpZkwda6F23Ox7C fHChlsJI+jafGvDbvoJzSD5UxvXwhwXv5r+fOEqIEqSqagicvCjacSbhpuTI3Tgt gaCwxoduoFGv0VWCQxeb1K2a02bWzqSxUsGyiTTXUC9M5uzd2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPL8qmyYPekA2xyut64pywY663VrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjI0 NTIyYi04MjM5LTRiYjktOTg0NS0xZTAxZTI4YWE0NTIvYTMyNzhmZDgtOTY5Yi0z ZDdhLWI3YzEtZTVmNGFhYmEwNzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2IyNDUyMmItODIzOS00YmI5LTk4 NDUtMWUwMWUyOGFhNDUyLzNiMjQ1MjJiLTgyMzktNGJiOS05ODQ1LTFlMDFlMjhh YTQ1Mi5jcmwwHwYDVR0jBBgwFoAUoAL1aNmuD2MRURVEAh0dW/5OsNIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYjI0NTIyYi04MjM5LTRiYjktOTg0NS0xZTAx ZTI4YWE0NTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqcWsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACndGwPUOhN9W+4ICOfAYzBveDxtHiZRzkhCL349VGjo4zo4xvSBgY8c 6RLGn9pjwa531mi5GJ1jYEbDrsYxzKegNI6ndetdrLNvxcviijgIkby6BlP2lCMU bPiS9a+wK7A6fiqHLuTBT546IAFgmMowjaGN+/kYEkkPfCeO1menIBrGe2X+EUub G45/SekGTg7UyKDV3fgY0ZXIw1pciW1eD3wAk3iZvUijk9da800w/RzqSiCSAIPi 5lj363zydHGR1c21lKk6YB97di4rPdV7M7rQnpFtLdoihDQbaIlFXAjFQEUB04gF WLQke1E4evCfC85ZLVb8Ncwy7lvdr1U= -----END CERTIFICATE-----Generated at Wed Jul 29 20:37:44 2026 by rpki-client