$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4601a129-5e5f-3484-82ed-6f52c998960d.roa File: 4601a129-5e5f-3484-82ed-6f52c998960d.roa (raw, json) Hash identifier: c4NFdSDtVJx+rV62i2AzxEVQO5eY5/oScuzn1vo4Als= Subject key identifier: E5:9A:A1:A6:68:44:64:ED:5F:DE:0A:90:EB:0D:A9:54:A0:FC:3D:CC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4974A59ACEED0C3E5E76FB80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4601a129-5e5f-3484-82ed-6f52c998960d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.21.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a5:9a:ce:ed:0c:3e:5e:76:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9ed35a97-9696-4669-81cf-e7feea0d645e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:84:8c:5f:1e:50:8b:02:7c:7e:31:15:a6:21: e6:50:1a:d2:0c:1b:82:b7:c2:3e:67:17:86:fb:41: 2b:2a:59:bf:e0:c0:e4:9c:62:ca:69:19:07:25:67: 60:1a:b2:5c:67:b0:f4:c2:7c:32:d5:17:0e:f7:b7: 66:4b:f4:6c:7b:31:f3:b4:c4:f9:1c:76:a8:9a:e6: 76:be:fd:48:4e:6d:4d:8f:28:20:59:f0:ac:05:1a: 5f:05:ce:80:ca:7c:c4:56:16:27:e4:17:c0:db:c1: a9:27:46:19:63:dc:4b:21:fd:1e:bf:e0:cf:a5:c7: eb:67:b9:27:2e:54:18:1b:7c:6e:bc:71:83:8b:a4: 37:74:89:0a:8d:85:8d:be:6f:a9:71:cb:b3:27:bc: 06:64:af:b5:1f:99:29:5c:51:f8:1d:0f:a4:59:2d: d7:5a:0a:25:6e:e5:44:82:38:ff:50:28:58:04:d0: 8f:fb:e2:71:37:bd:d4:78:3d:82:ca:de:ab:db:68: 24:2d:64:56:46:ae:d6:db:3d:05:e4:b0:c2:a7:93: 8c:8c:66:52:0c:f6:43:7f:c6:ed:91:07:82:34:bc: 10:78:60:82:82:47:bf:51:e5:7a:ce:02:23:12:5a: 12:ec:dd:19:2d:2b:0c:2f:ea:34:06:52:9a:b3:af: f1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9A:A1:A6:68:44:64:ED:5F:DE:0A:90:EB:0D:A9:54:A0:FC:3D:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4601a129-5e5f-3484-82ed-6f52c998960d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ef:61:d7:32:0f:87:a2:2d:db:27:dc:ba:97:b7:ef:c2:36: b0:75:f5:84:8b:5c:08:92:1f:c4:81:18:5d:10:ec:6f:23:30: 7d:3f:bd:68:82:d3:09:65:3c:8f:24:ca:16:df:ba:c4:ec:ce: 56:06:14:80:25:7d:52:1b:ba:e5:2b:ca:1a:1f:dd:42:ad:48: 6e:ae:38:7e:1b:89:ee:00:36:b9:be:94:e5:fc:8a:a3:5d:10: 63:62:bc:3f:b6:30:b9:78:7f:08:cf:9e:70:41:cc:5b:b0:4c: 1d:e1:f6:c7:f0:ce:9a:21:93:c4:6f:62:a5:d5:c3:b1:d7:33: d6:3f:a1:45:f2:f5:39:59:56:fb:6c:62:fb:bf:c9:87:5a:16: 59:42:f6:ac:d2:2b:94:15:22:19:4f:2d:3e:60:ea:92:0b:e0: 21:51:d2:81:66:c8:b5:3a:b1:d1:85:1e:93:cf:45:11:56:28: 0c:7f:a3:c8:4e:13:f1:55:06:21:a2:07:9a:ba:67:29:fe:0e: 3f:20:99:df:c8:23:49:1a:ff:16:42:a3:a1:c7:73:d3:ba:0d: af:a1:cd:b0:13:bc:9c:e9:3c:e3:17:4f:29:fa:83:5c:ef:59: 22:8b:a6:d0:89:dd:2c:03:54:fb:23:09:a4:47:4e:76:97:2e: bf:71:ad:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKWazu0MPl52+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWVkMzVhOTctOTY5Ni00NjY5LTgxY2YtZTdmZWVhMGQ2NDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4SMXx5QiwJ8fjEVpiHmUBrSDBuCt8I+ZxeG +0ErKlm/4MDknGLKaRkHJWdgGrJcZ7D0wnwy1RcO97dmS/RsezHztMT5HHaomuZ2 vv1ITm1NjyggWfCsBRpfBc6AynzEVhYn5BfA28GpJ0YZY9xLIf0ev+DPpcfrZ7kn LlQYG3xuvHGDi6Q3dIkKjYWNvm+pccuzJ7wGZK+1H5kpXFH4HQ+kWS3XWgolbuVE gjj/UChYBNCP++JxN73UeD2Cyt6r22gkLWRWRq7W2z0F5LDCp5OMjGZSDPZDf8bt kQeCNLwQeGCCgke/UeV6zgIjEloS7N0ZLSsML+o0BlKas6/xDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWaoaZoRGTtX94KkOsNqVSg/D3MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDYwMWExMjktNWU1Zi0z NDg0LTgyZWQtNmY1MmM5OTg5NjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRWGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDvYdcyD4eiLdsn3LqXt+/CNrB19YSLXAiSH8SBGF0Q7G8jMH0/vWiC 0wllPI8kyhbfusTszlYGFIAlfVIbuuUryhof3UKtSG6uOH4bie4ANrm+lOX8iqNd EGNivD+2MLl4fwjPnnBBzFuwTB3h9sfwzpohk8RvYqXVw7HXM9Y/oUXy9TlZVvts Yvu/yYdaFllC9qzSK5QVIhlPLT5g6pIL4CFR0oFmyLU6sdGFHpPPRRFWKAx/o8hO E/FVBiGiB5q6Zyn+Dj8gmd/II0ka/xZCo6HHc9O6Da+hzbATvJzpPOMXTyn6g1zv WSKLptCJ3SwDVPsjCaRHTnaXLr9xrX0= -----END CERTIFICATE-----Generated at Sat Sep 26 03:45:10 2026 by rpki-client