$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa File: 2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa (raw, json) Hash identifier: wwg9dgisoiePrkWMPyY0Y9+y+lXl+9trmxi8ESv25JU= Subject key identifier: 92:18:C2:D8:36:5B:E9:52:29:2D:5C:BD:09:8E:81:E2:F6:E2:D1:8E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4986DADAC12D581E3B276B60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.21.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:da:da:c1:2d:58:1e:3b:27:6b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=522f2c7f-80e1-4274-9d85-c7220dcf09f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cd:1b:b2:67:3e:12:1e:7e:ac:aa:21:e5:a9: 08:5a:2a:98:22:ff:0f:74:9b:b8:28:b9:bd:30:2f: 59:6e:74:cb:a1:2f:c5:6a:00:fb:0a:9e:11:19:7a: ab:63:98:7a:e6:38:ea:55:db:b5:08:ff:e6:78:14: 22:8f:0d:6a:a7:f6:36:3f:a9:c1:71:02:b3:de:8e: 7c:9b:9a:7b:da:bb:d5:da:b1:5d:1e:a0:c6:d4:cd: 8c:09:e7:28:c7:f7:c7:6a:72:bb:e2:cf:a7:38:66: e3:72:94:f0:5f:1b:1c:c5:a7:51:fb:11:0c:23:d3: 52:9e:1b:14:6e:c2:d0:45:b7:d2:0b:40:a1:62:2d: 67:50:bb:34:b5:21:4c:65:16:5b:00:56:bd:3f:7c: 51:30:50:4b:06:8c:10:26:54:5a:19:c8:73:5d:a9: a9:ea:b7:b3:68:72:58:01:b5:67:15:09:d7:b3:63: 27:7c:a6:00:c9:12:28:e6:42:65:94:b7:83:b6:4c: 6b:ca:73:06:5c:f4:d3:46:a9:24:43:92:c0:f0:ea: 45:03:f2:00:fb:28:69:17:d4:1f:12:73:73:b3:5b: 31:6f:1a:69:87:d8:00:73:4c:0d:96:df:98:97:d9: 98:d4:ce:42:de:5a:e1:0b:f9:e8:d7:15:0f:93:de: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:18:C2:D8:36:5B:E9:52:29:2D:5C:BD:09:8E:81:E2:F6:E2:D1:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:1c:dd:de:46:b2:d6:f0:23:99:49:15:f5:e4:d3:76:89:8c: 97:20:22:72:9b:0d:f9:fc:d9:a4:59:21:ce:de:52:97:d3:f1: ec:07:e9:f2:17:14:e1:e2:be:be:fe:c0:f7:a5:37:95:15:8b: a8:8b:01:f9:11:7f:12:d4:8d:bf:46:ab:8d:dd:1a:c6:e6:c9: 69:1f:01:c6:be:a7:32:0f:43:93:6b:4b:db:08:5d:f3:b8:4a: 8c:c5:5f:8f:9e:38:2d:88:6a:fe:88:04:81:52:e0:6f:97:9c: 94:fe:e7:88:66:bf:01:4c:15:b1:f8:48:5f:16:c0:70:1b:6a: c1:c2:a3:1f:7a:25:97:72:24:74:71:94:94:1b:e3:c2:90:f2: 73:3b:dc:05:4a:1f:e0:38:4e:ac:b1:27:ea:68:0a:2e:ad:fb: 1f:36:0b:d7:62:16:cf:fe:0f:43:cb:c7:66:f3:e5:15:af:ef: cb:c3:e4:3a:69:75:5d:01:3c:99:ef:35:6d:ef:eb:09:74:56: e4:1a:7f:d4:cf:d7:a9:e5:6a:c8:34:ae:05:69:d0:b2:a3:fc: 53:1d:ae:1c:ad:a0:eb:18:e9:ef:1d:3f:2c:1c:1f:74:44:66: 1c:c0:31:c9:aa:72:7f:8d:26:3a:76:b4:66:8a:50:4b:19:9e: b0:45:88:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhtrawS1YHjsna2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTIyZjJjN2YtODBlMS00Mjc0LTlkODUtYzcyMjBkY2YwOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc0bsmc+Eh5+rKoh5akIWiqYIv8PdJu4KLm9 MC9ZbnTLoS/FagD7Cp4RGXqrY5h65jjqVdu1CP/meBQijw1qp/Y2P6nBcQKz3o58 m5p72rvV2rFdHqDG1M2MCecox/fHanK74s+nOGbjcpTwXxscxadR+xEMI9NSnhsU bsLQRbfSC0ChYi1nULs0tSFMZRZbAFa9P3xRMFBLBowQJlRaGchzXamp6rezaHJY AbVnFQnXs2MnfKYAyRIo5kJllLeDtkxrynMGXPTTRqkkQ5LA8OpFA/IA+yhpF9Qf EnNzs1sxbxpph9gAc0wNlt+Yl9mY1M5C3lrhC/no1xUPk97fOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIYwtg2W+lSKS1cvQmOgeL24tGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmZlNDg4Y2ItNjM4Ni0z Y2VhLWJhNGYtZmUxYzRhYzY2MTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoc3d5GstbwI5lJFfXk03aJjJcgInKbDfn82aRZIc7eUpfT8ewH6fIX FOHivr7+wPelN5UVi6iLAfkRfxLUjb9Gq43dGsbmyWkfAca+pzIPQ5NrS9sIXfO4 SozFX4+eOC2Iav6IBIFS4G+XnJT+54hmvwFMFbH4SF8WwHAbasHCox96JZdyJHRx lJQb48KQ8nM73AVKH+A4TqyxJ+poCi6t+x82C9diFs/+D0PLx2bz5RWv78vD5Dpp dV0BPJnvNW3v6wl0VuQaf9TP16nlasg0rgVp0LKj/FMdrhytoOsY6e8dPywcH3RE ZhzAMcmqcn+NJjp2tGaKUEsZnrBFiL8= -----END CERTIFICATE-----Generated at Fri Sep 25 18:43:06 2026 by rpki-client