$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa File: a6229991-1291-3d4f-94d1-83e8c2cea121.roa (raw, json) Hash identifier: IGRrbo4P4yVT+p0wu8LMnWLFNAB7w1btciGI29XkGBs= Subject key identifier: 24:2E:EB:EB:CF:54:1C:D4:81:B0:1F:44:77:D9:BA:3B:23:89:F1:0D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F35E7C4BCA6AC8E4E7A98CF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.21.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:c4:bc:a6:ac:8e:4e:7a:98:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=586ffc6b-ff73-4466-8d48-3ef68d9db5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fd:e1:df:79:b1:3e:1c:f4:99:30:2a:88:29: cd:3e:07:f9:d8:15:a8:21:0a:8e:41:87:78:00:0d: e8:7d:af:21:1f:46:5a:29:89:7b:a8:c9:37:35:ba: b8:dd:46:c7:81:b3:c8:1f:42:19:ca:2c:a7:91:c4: 02:7f:f7:7a:8c:6c:61:ef:3b:df:72:09:0a:1e:fe: d8:6b:02:a0:85:a8:32:31:45:54:10:a5:1f:fc:4f: b0:f9:65:c6:a0:01:fe:09:32:32:14:a3:25:62:9b: ed:2b:da:ed:96:37:ae:ef:fe:b1:d7:ed:fb:1e:a1: d5:29:ee:65:89:10:92:d4:a0:19:f9:1f:26:a2:23: 24:36:1e:2a:c8:fc:8d:d9:08:12:a5:97:96:f4:e3: 81:37:cb:68:b0:0a:4b:c1:41:e7:4a:d2:d4:bf:94: fb:64:e4:17:c4:47:7a:00:92:bd:35:ff:e7:18:91: e8:b5:80:6a:e6:e5:ef:1e:62:fe:56:a4:85:a8:9e: 5b:e3:28:db:6d:b1:3b:81:40:d9:f5:af:56:b4:32: 67:b5:8b:f5:50:87:99:63:b7:5a:52:a4:a5:80:1d: 28:3b:51:4b:4c:4d:93:22:82:f3:9b:8f:fa:0a:29: 02:9b:85:eb:0d:78:03:1c:c6:20:3d:fa:c6:51:61: 2c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2E:EB:EB:CF:54:1C:D4:81:B0:1F:44:77:D9:BA:3B:23:89:F1:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:5d:16:ff:0f:78:b0:90:6f:27:ac:b3:c9:06:b0:f3:27:dd: c1:c2:ac:8d:23:0a:65:10:23:7c:ca:76:73:8a:9b:25:eb:01: 8d:01:9b:38:df:a8:d5:40:5c:fb:c1:1b:57:ab:53:cd:74:e9: eb:a2:bb:b3:b6:a6:ae:61:15:1f:41:15:0c:1d:83:bc:a0:17: c5:cd:ad:ad:53:b0:de:bb:58:93:c9:0f:2d:ae:90:1c:9f:87: de:e2:8c:9c:80:0b:56:ba:cb:55:38:13:d2:71:de:74:ff:ef: a4:e8:d7:f3:34:04:94:d5:5d:e9:aa:bc:c5:10:a1:0c:87:a4: b1:37:41:b3:55:77:b2:c8:a3:3a:82:4d:aa:f2:6b:85:73:d3: 37:92:34:da:e6:7d:08:b6:40:7b:2a:9e:74:60:32:5d:ee:14: 97:0c:6c:93:70:07:1c:58:10:75:0e:f2:fd:a1:48:5a:7b:e9: 6b:31:79:58:23:26:79:f3:cf:cc:ac:d6:67:3c:bd:8d:5b:3a: cf:0d:c8:0a:18:3d:32:5f:53:77:54:cb:f6:ba:b5:4c:08:62: 74:09:80:4f:9d:4e:f2:6e:c1:17:20:f2:42:90:f8:5f:bd:67: bb:a6:11:52:5f:f4:d4:80:13:2e:3b:f2:c3:aa:9d:09:38:0a: 4e:7b:f1:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158S8pqyOTnqYzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk NTg2ZmZjNmItZmY3My00NDY2LThkNDgtM2VmNjhkOWRiNWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof3h33mxPhz0mTAqiCnNPgf52BWoIQqOQYd4 AA3ofa8hH0ZaKYl7qMk3Nbq43UbHgbPIH0IZyiynkcQCf/d6jGxh7zvfcgkKHv7Y awKghagyMUVUEKUf/E+w+WXGoAH+CTIyFKMlYpvtK9rtljeu7/6x1+37HqHVKe5l iRCS1KAZ+R8moiMkNh4qyPyN2QgSpZeW9OOBN8tosApLwUHnStLUv5T7ZOQXxEd6 AJK9Nf/nGJHotYBq5uXvHmL+VqSFqJ5b4yjbbbE7gUDZ9a9WtDJntYv1UIeZY7da UqSlgB0oO1FLTE2TIoLzm4/6CikCm4XrDXgDHMYgPfrGUWEsmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQu6+vPVBzUgbAfRHfZujsjifENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTYyMjk5OTEtMTI5MS0z ZDRmLTk0ZDEtODNlOGMyY2VhMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHldFv8PeLCQbyess8kGsPMn3cHCrI0jCmUQI3zKdnOKmyXrAY0Bmzjf qNVAXPvBG1erU8106euiu7O2pq5hFR9BFQwdg7ygF8XNra1TsN67WJPJDy2ukByf h97ijJyAC1a6y1U4E9Jx3nT/76To1/M0BJTVXemqvMUQoQyHpLE3QbNVd7LIozqC Tarya4Vz0zeSNNrmfQi2QHsqnnRgMl3uFJcMbJNwBxxYEHUO8v2hSFp76WsxeVgj Jnnzz8ys1mc8vY1bOs8NyAoYPTJfU3dUy/a6tUwIYnQJgE+dTvJuwRcg8kKQ+F+9 Z7umEVJf9NSAEy478sOqnQk4Ck578Tc= -----END CERTIFICATE-----Generated at Mon Sep 28 18:09:44 2026 by rpki-client