$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45db7033-023e-3a55-b502-440a7e6599a7.roa File: 45db7033-023e-3a55-b502-440a7e6599a7.roa (raw, json) Hash identifier: NfM/EnZsbwwf9402E+FQzPRZ9vWFcw6W83RQE2/xG10= Subject key identifier: 4A:58:06:42:1B:F4:0F:7A:4F:C1:E2:48:BA:1B:32:C8:C8:3A:D4:FE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DE39A7D5D16E3042A3500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45db7033-023e-3a55-b502-440a7e6599a7.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.21.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e3:9a:7d:5d:16:e3:04:2a:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=efd4f7bb-7f08-4cf4-b28d-deead036f9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2c:99:24:83:9b:a3:e4:77:05:dc:c0:ef:fc: 80:28:bf:c3:7f:0e:bd:13:81:89:e2:c7:8e:67:e1: 02:14:5a:b7:63:bc:12:c5:40:c1:f6:83:31:1c:9e: 83:f1:be:19:f2:fb:db:89:a8:5f:d6:6c:50:1c:f6: 28:43:fe:ce:60:35:20:9e:c7:6d:dd:56:de:97:38: 44:99:23:54:44:3c:cc:45:11:6b:0f:42:75:ab:da: be:cb:80:be:bc:da:04:30:15:8a:81:97:8e:33:21: d8:3b:31:ee:59:04:b5:a8:21:59:3b:65:ef:8a:b8: fa:4c:32:56:32:80:d9:71:91:ea:0f:2d:ff:4c:3c: c0:21:b4:22:7c:d8:bf:04:47:15:57:a2:ae:31:7e: 93:98:85:05:76:13:d9:ed:e5:39:14:d6:8a:af:30: f4:89:58:ad:d9:53:9c:c7:bc:4e:d9:bf:8b:80:6d: 8c:37:af:0f:d9:96:03:83:d9:aa:05:f4:14:47:30: 5a:22:b3:5b:b3:15:80:0a:5c:ca:e6:c1:99:5c:f7: 94:81:4c:8c:3b:83:94:f0:c1:a1:82:31:22:7c:f5: fe:85:e6:65:06:4d:06:48:9c:9d:bf:4e:5d:be:a5: 16:bd:46:b3:31:bc:3c:46:03:13:ab:36:ae:a7:f0: 6d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:58:06:42:1B:F4:0F:7A:4F:C1:E2:48:BA:1B:32:C8:C8:3A:D4:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45db7033-023e-3a55-b502-440a7e6599a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:1c:03:c8:bf:eb:4f:de:18:f1:6c:3b:2f:d2:75:ba:77:c5: 59:67:72:21:3d:47:bf:10:af:1e:4e:c7:c6:0b:f4:5a:04:d9: 8e:48:ee:ee:eb:2e:15:e5:6c:03:3f:a9:a7:c9:97:45:45:29: 13:e3:97:a2:9b:f6:48:e4:9b:e0:35:11:49:c8:16:5d:67:05: bb:9f:b1:dd:00:b8:d6:0d:21:8b:c8:ff:13:29:e8:ee:45:17: 61:0e:0d:d7:e9:80:ef:48:35:c4:cf:b3:d6:d4:c6:fe:9c:e2: 48:ce:c7:41:bc:7e:aa:ca:78:8c:f8:18:92:e0:7f:73:97:4e: 43:a8:bc:1c:60:0a:b8:0a:23:06:1b:0b:61:ab:e1:9b:d8:09: 39:58:b1:4b:b7:92:3b:81:5b:f0:78:f5:bc:20:c4:66:54:b1: de:70:54:df:31:f0:ac:2b:79:a5:51:55:cd:8f:89:e7:c7:20: ab:1c:f9:86:3f:b7:8b:47:94:82:8d:52:81:1a:60:ce:3e:a4: c2:6f:c2:53:07:6d:8d:f6:25:51:85:80:42:33:68:be:f8:c7: 23:d2:9b:bd:8a:2c:8d:f3:cb:bb:63:99:e0:b1:74:2c:c8:6d: ea:0f:e1:16:26:ca:77:1f:5c:92:d1:2e:60:7d:a0:7c:79:df: 05:4e:0c:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPeOafV0W4wQqNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZWZkNGY3YmItN2YwOC00Y2Y0LWIyOGQtZGVlYWQwMzZmOWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiyZJIObo+R3BdzA7/yAKL/Dfw69E4GJ4seO Z+ECFFq3Y7wSxUDB9oMxHJ6D8b4Z8vvbiahf1mxQHPYoQ/7OYDUgnsdt3VbelzhE mSNURDzMRRFrD0J1q9q+y4C+vNoEMBWKgZeOMyHYOzHuWQS1qCFZO2Xvirj6TDJW MoDZcZHqDy3/TDzAIbQifNi/BEcVV6KuMX6TmIUFdhPZ7eU5FNaKrzD0iVit2VOc x7xO2b+LgG2MN68P2ZYDg9mqBfQURzBaIrNbsxWAClzK5sGZXPeUgUyMO4OU8MGh gjEifPX+heZlBk0GSJydv05dvqUWvUazMbw8RgMTqzaup/Bt8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpYBkIb9A96T8HiSLobMsjIOtT+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDVkYjcwMzMtMDIzZS0z YTU1LWI1MDItNDQwYTdlNjU5OWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEscA8i/60/eGPFsOy/Sdbp3xVlnciE9R78Qrx5Ox8YL9FoE2Y5I7u7r LhXlbAM/qafJl0VFKRPjl6Kb9kjkm+A1EUnIFl1nBbufsd0AuNYNIYvI/xMp6O5F F2EODdfpgO9INcTPs9bUxv6c4kjOx0G8fqrKeIz4GJLgf3OXTkOovBxgCrgKIwYb C2Gr4ZvYCTlYsUu3kjuBW/B49bwgxGZUsd5wVN8x8KwreaVRVc2PiefHIKsc+YY/ t4tHlIKNUoEaYM4+pMJvwlMHbY32JVGFgEIzaL74xyPSm72KLI3zy7tjmeCxdCzI beoP4RYmyncfXJLRLmB9oHx53wVODEo= -----END CERTIFICATE-----Generated at Sun Sep 27 17:23:34 2026 by rpki-client