$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b209b49-fd69-3e18-a25b-f032d8f835be.roa File: 6b209b49-fd69-3e18-a25b-f032d8f835be.roa (raw, json) Hash identifier: gdK/805eUMZzzeetZlTwDb0r775Hfr1I3ATVaY8Q3A8= Subject key identifier: 1B:EE:31:4A:B3:7F:17:F5:36:C7:94:DE:1E:BC:1A:40:55:09:97:7A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49735497FA28C916A9071600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b209b49-fd69-3e18-a25b-f032d8f835be.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.21.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:54:97:fa:28:c9:16:a9:07:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=86d19453-0f9d-41d2-9cb2-f86490fc4c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:a4:65:6d:dc:6f:26:15:76:24:56:38:00: 71:35:15:cc:38:e9:67:d4:5d:68:eb:c5:39:85:7b: 3e:cc:6a:cd:1f:93:a9:db:9e:c8:2d:9a:70:c6:79: f3:a7:57:5f:68:5b:a2:a9:a8:87:b4:22:bb:36:cd: 32:46:d1:c4:ac:b8:2a:3b:57:94:5b:b8:52:32:86: a6:cf:f6:8a:de:bc:72:5b:4b:a3:c5:c7:d9:fd:85: 1c:92:ac:c0:17:1a:ed:9c:b5:b3:e8:27:41:5f:f3: 07:84:8e:a5:23:e0:5e:4b:19:79:c3:9b:00:b3:c3: 45:93:31:2a:37:09:21:6f:91:42:8f:3a:c1:a4:16: 58:29:3e:2f:20:6f:01:29:e6:92:87:ac:22:dd:a5: c9:ac:fe:a4:c7:90:d8:8c:fe:62:80:d7:81:b3:84: 8a:e2:40:60:57:46:33:58:fe:ee:c0:1e:19:1f:81: 9d:14:b1:06:32:59:1d:3c:46:b3:54:30:e5:a7:26: c3:58:2b:c4:1c:85:40:5f:00:ec:dc:9a:91:2f:9d: f0:84:af:2d:1b:2f:00:eb:f4:7c:33:ad:ce:b2:19: 2b:a7:ac:ac:5f:0a:30:f3:4a:d2:82:fb:02:3d:4f: 30:d4:d4:10:74:1f:27:5d:12:0a:6f:c5:b3:b0:55: b6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:EE:31:4A:B3:7F:17:F5:36:C7:94:DE:1E:BC:1A:40:55:09:97:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6b209b49-fd69-3e18-a25b-f032d8f835be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:7f:9c:d9:40:0e:46:1b:54:07:a0:88:c0:6f:cd:2e:0e:58: 99:6e:ca:b0:0c:ef:cd:b1:c9:de:da:51:25:9b:7d:4d:7b:61: 18:29:8a:08:91:72:2b:3e:40:e7:57:94:7c:20:5e:22:70:76: a6:07:83:f2:ac:c1:a5:c3:48:72:f7:81:a6:f4:21:2d:1b:13: a7:f3:6e:a0:b1:02:5f:d4:03:d9:54:82:21:1f:fa:f3:a8:43: 9a:c1:f8:36:e1:00:89:18:7c:8c:34:75:40:e2:c1:92:49:fe: 2c:31:94:58:51:07:db:4c:16:5f:74:a9:7d:0b:67:08:0c:81: 1e:2b:f8:25:c8:b6:19:a9:73:87:7e:3e:cd:be:78:93:5a:23: ff:4e:7b:41:64:3e:00:37:16:2d:7f:0f:32:05:bb:75:ef:92: 43:70:e5:24:bd:d0:1a:99:8b:4e:93:c7:e1:87:0e:5a:f8:07: 24:4a:65:69:80:6c:d3:a2:96:9f:99:0a:4a:ad:6d:16:98:d9: 88:fe:c2:ff:2f:47:07:f5:33:8c:ad:57:8a:96:62:dc:5d:46: c4:f6:8a:dd:97:3c:fe:ed:73:97:91:9a:cc:8f:d7:0e:55:76: 7b:9b:54:3e:53:c7:90:ce:78:31:c4:c1:f4:31:c5:56:98:a8: e6:3c:5a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc1SX+ijJFqkHFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODZkMTk0NTMtMGY5ZC00MWQyLTljYjItZjg2NDkwZmM0YzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkukZW3cbyYVdiRWOABxNRXMOOln1F1o68U5 hXs+zGrNH5Op257ILZpwxnnzp1dfaFuiqaiHtCK7Ns0yRtHErLgqO1eUW7hSMoam z/aK3rxyW0ujxcfZ/YUckqzAFxrtnLWz6CdBX/MHhI6lI+BeSxl5w5sAs8NFkzEq Nwkhb5FCjzrBpBZYKT4vIG8BKeaSh6wi3aXJrP6kx5DYjP5igNeBs4SK4kBgV0Yz WP7uwB4ZH4GdFLEGMlkdPEazVDDlpybDWCvEHIVAXwDs3JqRL53whK8tGy8A6/R8 M63Oshkrp6ysXwow80rSgvsCPU8w1NQQdB8nXRIKb8WzsFW2jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvuMUqzfxf1NseU3h68GkBVCZd6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmIyMDliNDktZmQ2OS0z ZTE4LWEyNWItZjAzMmQ4ZjgzNWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9/nNlADkYbVAegiMBvzS4OWJluyrAM782xyd7aUSWbfU17YRgpigiR cis+QOdXlHwgXiJwdqYHg/KswaXDSHL3gab0IS0bE6fzbqCxAl/UA9lUgiEf+vOo Q5rB+DbhAIkYfIw0dUDiwZJJ/iwxlFhRB9tMFl90qX0LZwgMgR4r+CXIthmpc4d+ Ps2+eJNaI/9Oe0FkPgA3Fi1/DzIFu3XvkkNw5SS90BqZi06Tx+GHDlr4ByRKZWmA bNOilp+ZCkqtbRaY2Yj+wv8vRwf1M4ytV4qWYtxdRsT2it2XPP7tc5eRmsyP1w5V dnubVD5Tx5DOeDHEwfQxxVaYqOY8WjA= -----END CERTIFICATE-----Generated at Sat Sep 26 07:36:22 2026 by rpki-client