$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e34dbd5-63a5-3567-899e-5dfc158e9a81.roa File: 8e34dbd5-63a5-3567-899e-5dfc158e9a81.roa (raw, json) Hash identifier: oUbtRd6RRepfAqzlLutB9LFBPURXI5LY+Db6zGOrBdQ= Subject key identifier: 05:63:D6:CA:6F:13:E1:40:FD:7A:E3:4A:6F:C4:06:D6:02:C6:BA:0A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3DEA6C90F9AF663A8A4800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e34dbd5-63a5-3567-899e-5dfc158e9a81.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.16.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:ea:6c:90:f9:af:66:3a:8a:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=8198a615-a258-4702-8e63-19958e557b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:bb:23:30:8f:0b:99:9e:4f:14:0a:72:eb: 94:05:f9:7e:ef:18:4a:75:be:3f:73:01:63:12:c2: fe:64:db:d5:94:59:ca:28:83:7b:dd:c5:42:8b:54: ba:5a:86:51:47:81:e2:6b:2e:45:e0:67:ff:ab:d4: b9:c5:21:70:92:c6:b1:7b:f4:99:31:c1:d9:bb:e2: 14:a2:91:ec:fb:95:5d:ef:7e:d0:b9:25:c2:52:94: e6:f8:2f:b9:75:97:2b:e4:a1:7f:47:f5:d9:48:b9: 69:d3:8a:2a:ee:f3:64:e8:93:68:02:90:8f:04:1f: 54:26:ff:26:5b:e5:59:bf:0e:b9:f7:61:cb:0b:9a: 7f:00:31:55:a4:a8:b8:00:b9:aa:17:f8:b8:7b:f4: 3e:21:72:0f:00:81:c9:f5:83:7c:58:d9:f4:4a:54: e9:ad:52:9a:31:57:7a:87:a4:1a:9e:b0:e6:c9:68: b1:10:3d:85:b2:50:6a:b7:54:77:7c:75:33:e4:fa: 30:17:e9:06:09:92:c5:4e:00:56:01:41:cf:86:c7: 7d:21:3e:e4:64:e1:40:28:92:2b:8e:00:02:34:b1: e3:3d:7a:11:79:3d:7e:e3:1c:15:2a:b8:4c:d3:7f: 2a:5f:63:4d:0c:b8:21:c0:c9:d7:7f:50:72:e8:57: 74:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:63:D6:CA:6F:13:E1:40:FD:7A:E3:4A:6F:C4:06:D6:02:C6:BA:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8e34dbd5-63a5-3567-899e-5dfc158e9a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:2b:8a:1f:83:4c:e7:b2:5c:c7:3b:c2:b4:cc:75:8b:8a:fa: 6c:d8:86:6d:fc:b4:4d:0b:23:37:d9:7c:65:3c:c0:f1:84:83: d5:02:82:4e:39:92:c7:15:e5:f3:29:15:ce:7d:9c:59:8d:a6: ab:61:5b:9e:80:2a:4f:6d:1c:d6:32:af:02:ed:08:19:66:8d: d3:2a:e7:44:c4:cb:82:15:92:52:57:8e:1c:7a:d0:46:00:9d: 3d:04:94:20:96:81:5d:1a:14:a7:ff:cf:2a:a7:0f:99:ac:90: de:08:48:e5:ec:60:a8:e4:37:4d:65:44:83:d5:d8:eb:29:59: b7:06:25:8f:f7:67:93:7b:fb:9a:58:3a:48:76:2b:1f:c6:ce: 33:3c:41:79:82:05:1e:92:13:87:78:4d:01:f0:ae:93:4b:15: 24:88:d9:b9:73:4d:70:8b:fe:42:d5:c4:14:4b:39:b0:27:5a: ee:e4:27:d6:e7:df:b4:57:8b:6c:00:bf:f1:da:ca:1a:b9:fe: 05:80:33:2b:e9:be:34:66:3a:8c:26:b9:59:a3:88:87:c1:7c: b7:e2:da:06:f3:54:4d:d3:28:60:50:82:b9:72:ca:09:f1:64: e2:5e:78:b6:e3:0b:a5:35:c9:8c:e5:57:f9:7c:39:db:81:3e: 78:44:06:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPepskPmvZjqKSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODE5OGE2MTUtYTI1OC00NzAyLThlNjMtMTk5NThlNTU3YjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuG7IzCPC5meTxQKcuuUBfl+7xhKdb4/cwFj EsL+ZNvVlFnKKIN73cVCi1S6WoZRR4Hiay5F4Gf/q9S5xSFwksaxe/SZMcHZu+IU opHs+5Vd737QuSXCUpTm+C+5dZcr5KF/R/XZSLlp04oq7vNk6JNoApCPBB9UJv8m W+VZvw6592HLC5p/ADFVpKi4ALmqF/i4e/Q+IXIPAIHJ9YN8WNn0SlTprVKaMVd6 h6QanrDmyWixED2FslBqt1R3fHUz5PowF+kGCZLFTgBWAUHPhsd9IT7kZOFAKJIr jgACNLHjPXoReT1+4xwVKrhM038qX2NNDLghwMnXf1By6Fd0zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVj1spvE+FA/XrjSm/EBtYCxroKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGUzNGRiZDUtNjNhNS0z NTY3LTg5OWUtNWRmYzE1OGU5YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRAVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABErih+DTOeyXMc7wrTMdYuK+mzYhm38tE0LIzfZfGU8wPGEg9UCgk45 kscV5fMpFc59nFmNpqthW56AKk9tHNYyrwLtCBlmjdMq50TEy4IVklJXjhx60EYA nT0ElCCWgV0aFKf/zyqnD5mskN4ISOXsYKjkN01lRIPV2OspWbcGJY/3Z5N7+5pY Okh2Kx/GzjM8QXmCBR6SE4d4TQHwrpNLFSSI2blzTXCL/kLVxBRLObAnWu7kJ9bn 37RXi2wAv/Hayhq5/gWAMyvpvjRmOowmuVmjiIfBfLfi2gbzVE3TKGBQgrlyygnx ZOJeeLbjC6U1yYzlV/l8OduBPnhEBqQ= -----END CERTIFICATE-----Generated at Sat Sep 26 10:30:13 2026 by rpki-client