$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a975a81c-bc25-3450-a356-fd9d9f94312c.roa File: a975a81c-bc25-3450-a356-fd9d9f94312c.roa (raw, json) Hash identifier: 5Q+APaZ/skx0AINCJzw0y3xLtUwDgxr0UgO8V+Of41Y= Subject key identifier: C3:34:CF:9E:2D:D9:70:D9:0A:49:C7:9C:25:6E:A6:31:CB:A7:8F:20 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F5E62F6013E0B05BFCE0B5600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a975a81c-bc25-3450-a356-fd9d9f94312c.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 19905 IP address blocks: 173.21.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:f6:01:3e:0b:05:bf:ce:0b:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=e694fed0-e8e6-4156-a606-92377d8f8660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:50:60:3d:b9:d2:e6:ce:65:c8:46:4d:0a:e6: df:8b:31:d8:f9:96:a6:cb:e7:c7:3b:fb:ca:ef:94: 6e:ce:13:29:d9:97:93:4c:e7:ef:56:13:22:ea:30: e3:b4:7a:79:bd:6f:7c:36:86:3b:ad:1e:b0:8b:46: a7:4f:97:2d:c6:3e:da:c8:94:1c:9e:37:6c:78:ec: 01:aa:0a:c9:42:dc:5a:4a:33:db:71:20:2c:05:d9: 75:c2:ae:87:09:f8:07:b9:88:87:10:ea:85:90:76: 61:e5:c7:42:d6:89:46:d4:b3:51:70:ee:d0:bc:4a: fd:78:13:72:46:1b:83:5f:8d:92:6c:f2:72:f8:4b: 1b:10:06:a2:72:54:07:4a:4b:07:f2:44:db:25:93: b2:0d:8e:36:a1:23:3f:89:66:a7:72:7b:66:0c:b5: ef:8f:ea:f4:45:de:ca:32:9f:6e:91:71:b9:17:8d: be:e9:68:cf:9b:74:ff:db:8b:8f:a8:5b:0f:1e:b5: 94:6c:d1:ef:45:7a:f2:5d:61:5d:05:45:79:f4:ec: c4:d1:bf:93:61:a8:ba:8d:08:b6:40:25:c4:fc:0d: 1a:bf:c2:70:be:65:04:b0:9b:60:f6:27:ad:ab:4b: a4:0f:41:90:f3:d8:04:cd:8a:74:38:58:9b:b1:f7: 98:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:34:CF:9E:2D:D9:70:D9:0A:49:C7:9C:25:6E:A6:31:CB:A7:8F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a975a81c-bc25-3450-a356-fd9d9f94312c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:4c:f2:31:69:81:7a:bc:10:a2:23:26:92:ed:0e:8b:31:b3: 72:23:d2:21:44:bd:5d:1f:56:3a:f7:b1:53:f2:3e:e1:8c:2f: 2e:b8:8e:dc:5b:dd:5b:94:d3:fd:df:64:3c:65:9a:2d:e3:c3: d9:b7:ed:76:a6:c6:5c:df:ee:bd:df:2b:0f:3d:e9:9a:ff:ae: 58:4e:cc:e5:d9:02:dc:8a:08:1a:35:14:1a:7b:29:ac:1c:c8: a4:9d:a0:e8:6a:d5:26:34:bc:5e:04:d4:29:f3:fe:a4:fc:a3: ab:53:32:43:55:60:d8:84:7a:cd:09:52:72:f2:f8:54:0a:ef: 01:be:5e:50:de:57:f2:ca:7c:ea:d8:04:3d:81:0d:73:d0:26: 1e:56:08:80:62:ae:d5:53:0c:99:fd:8d:b9:51:fd:7f:db:7b: a8:b4:ed:ab:da:36:d2:57:ae:96:bf:ec:dd:70:c0:c8:53:25: a7:7b:40:63:60:6b:cb:65:2f:78:8c:18:44:42:a7:3e:27:e1: 08:d4:e0:04:8d:d1:70:e2:45:67:d2:7d:cd:83:cc:99:b9:91: c6:71:b1:b1:2a:b5:8f:62:d0:d9:ba:be:cc:90:a9:f3:80:71: 2a:f6:5d:1b:a0:cd:1b:15:13:01:b4:d2:87:4f:d7:c9:c8:e8: 56:b3:85:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYvYBPgsFv84LVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZTY5NGZlZDAtZThlNi00MTU2LWE2MDYtOTIzNzdkOGY4NjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlBgPbnS5s5lyEZNCubfizHY+Zamy+fHO/vK 75RuzhMp2ZeTTOfvVhMi6jDjtHp5vW98NoY7rR6wi0anT5ctxj7ayJQcnjdseOwB qgrJQtxaSjPbcSAsBdl1wq6HCfgHuYiHEOqFkHZh5cdC1olG1LNRcO7QvEr9eBNy RhuDX42SbPJy+EsbEAaiclQHSksH8kTbJZOyDY42oSM/iWancntmDLXvj+r0Rd7K Mp9ukXG5F42+6WjPm3T/24uPqFsPHrWUbNHvRXryXWFdBUV59OzE0b+TYai6jQi2 QCXE/A0av8JwvmUEsJtg9ietq0ukD0GQ89gEzYp0OFibsfeYMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMM0z54t2XDZCknHnCVupjHLp48gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTk3NWE4MWMtYmMyNS0z NDUwLWEzNTYtZmQ5ZDlmOTQzMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJM8jFpgXq8EKIjJpLtDosxs3Ij0iFEvV0fVjr3sVPyPuGMLy64jtxb 3VuU0/3fZDxlmi3jw9m37Xamxlzf7r3fKw896Zr/rlhOzOXZAtyKCBo1FBp7Kawc yKSdoOhq1SY0vF4E1Cnz/qT8o6tTMkNVYNiEes0JUnLy+FQK7wG+XlDeV/LKfOrY BD2BDXPQJh5WCIBirtVTDJn9jblR/X/be6i07avaNtJXrpa/7N1wwMhTJad7QGNg a8tlL3iMGERCpz4n4QjU4ASN0XDiRWfSfc2DzJm5kcZxsbEqtY9i0Nm6vsyQqfOA cSr2XRugzRsVEwG00odP18nI6Fazhdo= -----END CERTIFICATE-----Generated at Sun Oct 4 10:17:53 2026 by rpki-client