$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d429698-2bfc-3eae-8d85-55492090ea2a.roa File: 3d429698-2bfc-3eae-8d85-55492090ea2a.roa (raw, json) Hash identifier: LWfEkDyoj1gFVSaQDvrdxBsVDGQcS/1Svr+mQk2lW3Q= Subject key identifier: 52:FB:DF:54:DC:D0:79:88:AB:F0:65:F7:A2:41:88:1D:3C:B0:9F:62 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E9384FA5CA0D54688912ADA60 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d429698-2bfc-3eae-8d85-55492090ea2a.roa Signing time: Tue 21 Jul 2026 21:00:12 +0000 ROA not before: Tue 21 Jul 2026 21:00:12 +0000 ROA not after: Mon 19 Oct 2026 21:00:12 +0000 asID: 30036 IP address blocks: 173.21.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:84:fa:5c:a0:d5:46:88:91:2a:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 21 21:00:12 2026 GMT Not After : Oct 19 21:00:12 2026 GMT Subject: CN=2275b31d-43a0-4786-ad00-7efdf9c973cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:61:26:eb:c2:04:78:fa:63:b5:13:df:03:b3: e2:0d:7f:57:18:3d:41:a0:1a:73:2f:e4:05:9d:81: cd:56:a0:fe:8c:72:fe:f6:d9:89:78:ee:b0:a9:6a: f2:f6:9b:79:45:ba:5f:55:7d:f6:21:eb:5a:42:9e: 11:9c:cb:99:73:dd:85:ed:e7:7f:c5:01:9f:23:50: e9:f0:2e:ad:06:2a:c8:e7:f1:0d:7a:98:d8:dc:38: 99:3f:0e:54:c2:3b:7a:88:54:97:ca:43:71:a7:c3: 6f:5a:1b:a1:f7:1c:4c:22:07:18:fd:d5:d0:df:a6: db:82:c0:c0:41:67:e4:a8:2c:eb:b1:db:34:66:c8: ad:c8:b6:b1:ee:77:da:f0:b6:20:da:c4:fc:90:21: be:f7:3c:da:7f:83:02:f4:6a:2a:58:4c:e1:fd:3e: ef:5b:d8:9f:79:a4:71:e9:80:40:ad:22:c6:d1:52: 7c:a0:ba:5b:db:2c:35:4b:06:b7:4d:47:75:0a:b9: 93:8f:1a:15:27:38:91:4f:e4:f8:06:96:3c:4a:45: 2c:d9:3b:10:a5:04:b0:08:6f:39:8f:44:c5:67:37: 2b:b3:34:46:12:8a:00:b0:d8:b9:ed:7a:94:72:dc: 00:f0:07:33:11:47:f6:c1:fc:32:92:6d:7a:d4:e9: 9c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FB:DF:54:DC:D0:79:88:AB:F0:65:F7:A2:41:88:1D:3C:B0:9F:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d429698-2bfc-3eae-8d85-55492090ea2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f5:94:0e:26:e5:38:8d:73:b1:77:ec:b6:bf:9c:0b:5d:c7: f1:08:e4:7e:28:40:bd:de:0e:47:de:e6:4e:8d:e5:85:b8:88: 87:1c:14:97:55:b3:ab:98:6a:6f:d2:c5:95:a7:af:cc:4c:09: 8a:b0:6a:2e:86:90:66:21:84:e7:60:87:33:7e:8a:6a:d0:96: ab:bf:4d:c2:37:15:6c:14:f8:70:67:81:fb:a0:f4:0b:f4:45: d1:dc:b9:73:7c:0c:95:4a:0d:6d:02:29:a0:b3:cc:73:2a:6d: 04:99:eb:a1:2c:d3:1c:26:f9:75:fe:07:ac:21:3d:5e:a8:71: e5:14:7b:b9:c6:2b:cd:e4:8a:c0:c1:3e:ef:b6:24:9b:a4:80: 0b:40:ce:92:76:ce:c4:2c:4e:eb:47:33:7b:10:10:b5:35:2a: 2b:35:e6:f4:8d:53:3e:8a:6a:07:de:75:19:d3:0f:37:1c:27: 7b:e7:c5:06:b6:27:a5:ff:c5:3a:4d:93:4f:56:3b:5d:e8:ba: ae:a6:a9:20:96:c5:2b:06:8f:d4:4f:32:26:ca:8b:2c:dc:00: 20:73:a0:1c:1e:d0:35:e1:5e:13:86:02:73:30:14:2b:cd:73: 1c:c9:3a:57:82:84:cf:5f:6b:11:f7:00:3d:4e:69:dd:9c:94: 2f:1a:8a:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ThPpcoNVGiJEq2mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyMTIxMDAxMloXDTI2MTAxOTIxMDAxMlowLzEtMCsGA1UEAxMk MjI3NWIzMWQtNDNhMC00Nzg2LWFkMDAtN2VmZGY5Yzk3M2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumEm68IEePpjtRPfA7PiDX9XGD1BoBpzL+QF nYHNVqD+jHL+9tmJeO6wqWry9pt5RbpfVX32IetaQp4RnMuZc92F7ed/xQGfI1Dp 8C6tBirI5/ENepjY3DiZPw5Uwjt6iFSXykNxp8NvWhuh9xxMIgcY/dXQ36bbgsDA QWfkqCzrsds0ZsityLax7nfa8LYg2sT8kCG+9zzaf4MC9GoqWEzh/T7vW9ifeaRx 6YBArSLG0VJ8oLpb2yw1Swa3TUd1CrmTjxoVJziRT+T4BpY8SkUs2TsQpQSwCG85 j0TFZzcrszRGEooAsNi57XqUctwA8AczEUf2wfwykm161OmcrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFL731Tc0HmIq/Bl96JBiB08sJ9iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Q0Mjk2OTgtMmJmYy0z ZWFlLThkODUtNTU0OTIwOTBlYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv1lA4m5TiNc7F37La/nAtdx/EI5H4oQL3eDkfe5k6N5YW4iIccFJdV s6uYam/SxZWnr8xMCYqwai6GkGYhhOdghzN+imrQlqu/TcI3FWwU+HBngfug9Av0 RdHcuXN8DJVKDW0CKaCzzHMqbQSZ66Es0xwm+XX+B6whPV6oceUUe7nGK83kisDB Pu+2JJukgAtAzpJ2zsQsTutHM3sQELU1Kis15vSNUz6KagfedRnTDzccJ3vnxQa2 J6X/xTpNk09WO13ouq6mqSCWxSsGj9RPMibKiyzcACBzoBwe0DXhXhOGAnMwFCvN cxzJOleChM9faxH3AD1Oad2clC8aihY= -----END CERTIFICATE-----Generated at Fri Jul 24 10:49:25 2026 by rpki-client