$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/240efba0-c32c-370d-9a15-b7fe3d671314.roa File: 240efba0-c32c-370d-9a15-b7fe3d671314.roa (raw, json) Hash identifier: /SWox4VI7aG14doNmq2ZC9NYudMssiN9t+R6WPTWrIM= Subject key identifier: 00:E4:DA:92:D7:C9:4B:66:B9:D0:14:08:98:C2:CF:E8:E3:F3:DD:22 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4972986772271C90C3252D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/240efba0-c32c-370d-9a15-b7fe3d671314.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.21.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:98:67:72:27:1c:90:c3:25:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=27677909-2b44-49b8-9f54-5130ad48aa55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:9a:97:f5:d6:3b:47:89:c1:90:73:c2:cf: 28:18:f5:20:21:d3:47:1f:60:f8:99:be:bb:d3:8a: e5:57:8b:0f:dc:72:de:b8:ff:14:9d:65:b3:a4:f4: 63:8e:4a:96:77:3b:a0:50:71:92:99:77:74:ba:0e: 44:e8:01:6a:0f:70:f4:c7:71:2c:f0:7f:f9:e9:97: 56:bb:5e:70:95:f8:f1:72:8a:75:8f:2b:af:12:bc: 1b:83:0f:2a:ef:0c:97:92:45:89:50:c2:f3:08:df: 1f:a5:4e:fb:01:78:19:89:96:19:51:5b:e1:68:59: 56:fb:ab:68:22:ea:08:3a:03:4f:4d:05:90:7c:17: dc:49:ad:28:ae:3e:21:93:30:31:e2:f5:ca:f4:db: 45:ea:68:4d:12:b7:8a:5e:60:68:5f:25:1b:5a:8c: 33:83:e2:b4:c1:e0:0d:67:78:8c:1f:fd:57:70:81: 0b:ab:65:5a:6f:9f:8f:3d:93:e4:ee:06:fc:02:40: 76:d5:d9:6a:5b:63:e1:40:c7:af:4a:b1:f9:8d:b3: 90:83:02:7d:e6:7a:70:9f:aa:70:ef:64:e0:79:9f: 16:bd:13:30:7a:33:4b:16:41:25:2e:11:04:6b:6d: 07:06:e5:e1:48:73:90:eb:a2:4b:fa:b4:5a:c6:23: 6f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E4:DA:92:D7:C9:4B:66:B9:D0:14:08:98:C2:CF:E8:E3:F3:DD:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/240efba0-c32c-370d-9a15-b7fe3d671314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:aa:e4:b4:dc:c5:6d:d7:ae:68:26:23:ae:61:67:5b:6a:64: 40:91:ca:ea:36:3f:9b:b7:15:e5:75:ce:6a:cc:38:5f:e4:5b: 63:bc:a6:8a:ec:92:94:46:31:4c:3f:c6:cf:83:03:19:1d:a8: 22:51:12:3e:9a:d6:9d:47:1b:9c:29:db:8a:24:e0:e4:38:a0: d4:8a:7c:e9:a4:23:c5:77:3e:d8:19:f7:8f:a1:65:a4:b4:28: a6:36:71:07:6e:88:5d:d5:21:d2:13:14:73:0a:49:34:5c:8b: 12:a6:fd:f9:41:03:e1:fa:82:b3:11:a5:27:f0:b5:01:13:1b: bd:30:bb:52:f8:bd:be:46:52:a8:db:60:3d:82:13:7e:2c:6c: 93:68:b5:2f:52:44:70:e8:32:a6:4a:1e:77:7a:bb:d2:65:31: 96:1b:7f:0d:7f:9d:14:8f:a1:2f:aa:c7:9e:e2:fb:7b:a9:8e: 3c:7f:61:49:cc:cf:03:e0:58:6b:7d:bf:f0:f7:92:50:9e:6c: 71:aa:75:b6:3f:70:73:a3:fd:fc:35:49:df:ab:14:4f:91:6e: 5a:0c:45:0a:c3:d8:56:b3:3a:ba:8a:ce:06:1b:1e:3a:22:27: ce:96:08:76:48:6f:71:64:74:43:e9:6c:18:ab:d0:33:24:1c: f3:81:c3:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcphncicckMMlLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mjc2Nzc5MDktMmI0NC00OWI4LTlmNTQtNTEzMGFkNDhhYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuceal/XWO0eJwZBzws8oGPUgIdNHH2D4mb67 04rlV4sP3HLeuP8UnWWzpPRjjkqWdzugUHGSmXd0ug5E6AFqD3D0x3Es8H/56ZdW u15wlfjxcop1jyuvErwbgw8q7wyXkkWJUMLzCN8fpU77AXgZiZYZUVvhaFlW+6to IuoIOgNPTQWQfBfcSa0orj4hkzAx4vXK9NtF6mhNEreKXmBoXyUbWowzg+K0weAN Z3iMH/1XcIELq2Vab5+PPZPk7gb8AkB21dlqW2PhQMevSrH5jbOQgwJ95npwn6pw 72TgeZ8WvRMwejNLFkElLhEEa20HBuXhSHOQ66JL+rRaxiNvIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADk2pLXyUtmudAUCJjCz+jj890iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjQwZWZiYTAtYzMyYy0z NzBkLTlhMTUtYjdmZTNkNjcxMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6q5LTcxW3XrmgmI65hZ1tqZECRyuo2P5u3FeV1zmrMOF/kW2O8pors kpRGMUw/xs+DAxkdqCJREj6a1p1HG5wp24ok4OQ4oNSKfOmkI8V3PtgZ94+hZaS0 KKY2cQduiF3VIdITFHMKSTRcixKm/flBA+H6grMRpSfwtQETG70wu1L4vb5GUqjb YD2CE34sbJNotS9SRHDoMqZKHnd6u9JlMZYbfw1/nRSPoS+qx57i+3upjjx/YUnM zwPgWGt9v/D3klCebHGqdbY/cHOj/fw1Sd+rFE+RbloMRQrD2FazOrqKzgYbHjoi J86WCHZIb3FkdEPpbBir0DMkHPOBwzI= -----END CERTIFICATE-----Generated at Sat Sep 26 03:40:05 2026 by rpki-client