$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa File: a6229991-1291-3d4f-94d1-83e8c2cea121.roa (raw, json) Hash identifier: 5dV1m37PS40tO0XV1AyUT5pD2ghNLYgPI7NPkZNdp6o= Subject key identifier: 46:87:C3:65:C6:15:62:33:54:91:90:0B:D6:3C:6A:EE:72:C2:AE:49 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E9384F3A62FDF3FA8B10A9C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa Signing time: Tue 21 Jul 2026 21:00:12 +0000 ROA not before: Tue 21 Jul 2026 21:00:12 +0000 ROA not after: Mon 19 Oct 2026 21:00:12 +0000 asID: 30036 IP address blocks: 173.21.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:93:84:f3:a6:2f:df:3f:a8:b1:0a:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 21 21:00:12 2026 GMT Not After : Oct 19 21:00:12 2026 GMT Subject: CN=e39fb3fb-0866-4c32-ae25-260d1e46f6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:79:b6:47:12:a8:b9:82:72:7e:ae:5a:df: fc:0b:44:15:fc:d5:28:50:34:3d:13:cb:6a:1f:71: c2:eb:bc:9c:9e:3f:6a:f4:05:51:7a:7c:85:86:5d: 2d:c1:db:25:43:bf:6c:d1:dd:01:88:50:8b:df:26: e8:d5:41:07:44:c9:6c:8f:82:2a:6c:5a:b5:d9:67: df:6f:18:45:8c:61:d9:49:72:95:88:20:99:89:4c: 0d:c3:f8:2b:66:ea:f3:91:24:78:36:71:44:71:28: 75:be:c2:30:47:82:21:8e:22:29:14:92:2d:4a:5e: 17:cf:17:87:2e:33:3d:27:1f:a8:73:91:1c:f1:e8: 74:58:f2:5d:99:ac:4e:2d:05:21:f4:2b:33:d6:33: 7a:9e:4a:92:30:12:dc:04:c5:1a:e9:4f:ef:23:8e: 38:5a:2e:0f:00:22:1f:2a:92:92:75:75:21:3f:79: 9c:03:34:4f:70:4d:ef:10:d1:78:30:fe:09:2b:3e: f8:1d:14:9f:7a:53:79:e6:91:80:7e:97:96:77:93: b4:f7:55:55:5c:f9:5e:1b:a4:12:e3:16:cc:e7:1d: 6d:5d:16:da:e8:ad:d5:8f:95:fc:32:cd:37:7d:4f: ef:f3:5f:83:b8:b6:05:5e:98:bc:e7:3f:e3:d3:55: 37:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:87:C3:65:C6:15:62:33:54:91:90:0B:D6:3C:6A:EE:72:C2:AE:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a6229991-1291-3d4f-94d1-83e8c2cea121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:cb:f9:07:38:d4:05:18:96:21:d7:96:8f:6e:c0:ab:f9:76: 33:e8:e9:ca:38:bc:77:e0:cb:e0:5c:64:30:28:c7:69:11:e6: af:ca:30:f1:39:ac:7e:61:f7:a0:7e:65:54:1c:52:02:87:f6: 0d:bd:5b:11:8e:47:d5:6d:a0:fd:aa:a9:2a:5f:ab:0f:4c:15: 93:a9:07:1e:06:ca:91:6c:b5:24:ed:d1:b8:40:61:60:33:65: c9:d6:82:cf:11:04:c6:98:c9:a3:92:34:52:96:68:07:6f:bd: a7:6c:af:1a:47:70:64:b9:33:f7:58:67:cc:46:e4:4b:a2:1b: e6:f2:47:50:0f:26:ba:08:42:2b:14:42:c7:a8:7c:43:2a:47: 09:06:fe:67:c2:7a:ef:e9:4d:0f:86:44:34:ed:35:91:4d:8f: 0a:98:a6:32:c1:0c:9e:b8:f9:6b:82:22:90:f3:a6:e6:fc:55: 62:39:2f:8c:56:9b:25:fc:c4:65:bf:63:ec:74:15:34:eb:83: c5:78:41:b7:ee:84:c7:97:78:f5:a9:81:c0:5e:a8:d8:a7:39: 47:30:22:5f:04:c5:f3:7c:8b:45:9d:ba:c8:7d:8b:f7:e4:b1: be:99:64:ad:77:05:67:3d:68:a9:8e:32:99:0f:a4:83:b2:8a: 53:fb:43:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ThPOmL98/qLEKnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyMTIxMDAxMloXDTI2MTAxOTIxMDAxMlowLzEtMCsGA1UEAxMk ZTM5ZmIzZmItMDg2Ni00YzMyLWFlMjUtMjYwZDFlNDZmNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6R5tkcSqLmCcn6uWt/8C0QV/NUoUDQ9E8tq H3HC67ycnj9q9AVRenyFhl0twdslQ79s0d0BiFCL3ybo1UEHRMlsj4IqbFq12Wff bxhFjGHZSXKViCCZiUwNw/grZurzkSR4NnFEcSh1vsIwR4IhjiIpFJItSl4XzxeH LjM9Jx+oc5Ec8eh0WPJdmaxOLQUh9Csz1jN6nkqSMBLcBMUa6U/vI444Wi4PACIf KpKSdXUhP3mcAzRPcE3vENF4MP4JKz74HRSfelN55pGAfpeWd5O091VVXPleG6QS 4xbM5x1tXRba6K3Vj5X8Ms03fU/v81+DuLYFXpi85z/j01U3IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaHw2XGFWIzVJGQC9Y8au5ywq5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTYyMjk5OTEtMTI5MS0z ZDRmLTk0ZDEtODNlOGMyY2VhMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/L+Qc41AUYliHXlo9uwKv5djPo6co4vHfgy+BcZDAox2kR5q/KMPE5 rH5h96B+ZVQcUgKH9g29WxGOR9VtoP2qqSpfqw9MFZOpBx4GypFstSTt0bhAYWAz ZcnWgs8RBMaYyaOSNFKWaAdvvadsrxpHcGS5M/dYZ8xG5EuiG+byR1APJroIQisU QseofEMqRwkG/mfCeu/pTQ+GRDTtNZFNjwqYpjLBDJ64+WuCIpDzpub8VWI5L4xW myX8xGW/Y+x0FTTrg8V4QbfuhMeXePWpgcBeqNinOUcwIl8ExfN8i0Wdush9i/fk sb6ZZK13BWc9aKmOMpkPpIOyilP7QzU= -----END CERTIFICATE-----Generated at Fri Jul 24 11:09:59 2026 by rpki-client