$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad35f282-4358-39cf-a530-e512a7b2efe6.roa File: ad35f282-4358-39cf-a530-e512a7b2efe6.roa (raw, json) Hash identifier: uIu2vtlc3orH6TRV0PDV1WuHzP10MPfc+wpsP5CQVmg= Subject key identifier: C2:93:3B:15:1E:69:7D:8B:DB:01:57:F7:DF:8C:49:9E:B3:94:9F:57 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4987BD9EC32082E206EBCE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad35f282-4358-39cf-a530-e512a7b2efe6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.21.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:bd:9e:c3:20:82:e2:06:eb:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=117535c2-12e1-4aa5-ac68-852530c3c021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fd:fd:e8:b1:c5:cb:b6:a4:19:c4:1d:3c:ee: 90:43:2d:60:f6:68:f0:6a:b4:f4:df:7f:40:6b:cd: 1c:dd:6b:28:ce:c2:d4:ff:ce:0e:0c:24:f9:bd:c3: c8:58:88:d1:12:9e:76:b7:23:f6:18:00:36:aa:07: b7:e1:4d:bc:e5:40:54:23:ec:50:f2:98:0c:1b:9a: ba:c4:2c:60:1d:a4:04:e0:6b:74:b5:7f:fd:8c:9c: c4:90:eb:d7:0e:23:48:a4:76:0f:31:69:93:0f:d8: 91:65:79:f1:41:23:22:6e:9b:c9:0d:14:52:a8:b6: 89:bd:50:a8:39:e0:a2:2a:49:eb:a3:f5:21:de:c5: ca:a5:e0:01:50:2f:1a:11:d9:c9:07:48:9d:00:31: d5:cd:4f:0c:af:9d:bf:d4:d3:f4:8f:4e:c4:c3:05: d9:15:c1:c7:67:3e:e4:c2:5b:76:08:4b:93:df:1c: b1:39:0f:4a:12:84:8f:02:66:ef:93:7e:98:0c:9c: 73:5e:5c:36:30:77:ba:0c:a0:2d:6b:91:f8:ca:71: 40:c3:67:87:09:5e:b0:fd:a9:46:d9:7e:4f:32:4d: c6:3d:4c:59:95:f6:d1:b0:13:a0:8a:a2:d0:ea:f1: 7e:ba:9b:36:76:f2:b4:6e:67:84:4d:e2:fa:38:a4: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:93:3B:15:1E:69:7D:8B:DB:01:57:F7:DF:8C:49:9E:B3:94:9F:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad35f282-4358-39cf-a530-e512a7b2efe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:b0:ea:bf:89:4b:b9:fc:c8:bb:bd:74:82:3a:7a:50:10:0d: ec:22:24:f6:5a:b2:66:21:13:04:6f:f8:03:76:5f:45:f9:4c: 1f:26:21:8b:47:c1:0d:82:37:fd:83:43:e6:61:fc:57:d8:6f: d1:3f:7e:9e:73:0c:32:93:64:bf:cc:ef:e4:2c:7b:ad:91:cc: 32:59:9d:bd:6c:e2:25:4d:ce:ea:aa:04:5f:11:62:ec:7a:aa: f1:3b:b1:34:92:f8:4c:13:1e:ba:a3:1c:38:fa:28:22:b5:bb: 0d:14:2a:6c:ab:f6:89:0f:72:d9:d9:3d:2e:4a:cb:04:81:13: c3:80:70:da:67:f4:62:7f:2c:9b:50:0b:b3:9e:fd:b8:a3:b2: 61:01:3f:03:71:c6:41:0e:4b:1e:91:73:89:c7:04:0d:90:7d: 5d:1f:07:e2:16:ed:ec:8e:e4:ed:02:4d:58:28:da:0e:68:8e: 1b:80:04:99:02:2c:90:8e:39:fb:bf:f7:4f:62:dd:43:09:4e: 86:66:c8:bc:77:c7:07:d2:aa:d8:17:ed:ec:ca:cf:4e:11:29: e8:de:98:6c:d5:f8:86:fe:46:16:00:70:dc:b3:37:d8:8d:6d: 27:fc:d9:18:82:94:fe:ba:77:a5:c6:94:05:de:13:2f:2a:59: df:06:87:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh72ewyCC4gbrzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTE3NTM1YzItMTJlMS00YWE1LWFjNjgtODUyNTMwYzNjMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/396LHFy7akGcQdPO6QQy1g9mjwarT0339A a80c3WsozsLU/84ODCT5vcPIWIjREp52tyP2GAA2qge34U285UBUI+xQ8pgMG5q6 xCxgHaQE4Gt0tX/9jJzEkOvXDiNIpHYPMWmTD9iRZXnxQSMibpvJDRRSqLaJvVCo OeCiKknro/Uh3sXKpeABUC8aEdnJB0idADHVzU8Mr52/1NP0j07EwwXZFcHHZz7k wlt2CEuT3xyxOQ9KEoSPAmbvk36YDJxzXlw2MHe6DKAta5H4ynFAw2eHCV6w/alG 2X5PMk3GPUxZlfbRsBOgiqLQ6vF+ups2dvK0bmeETeL6OKSMrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKTOxUeaX2L2wFX99+MSZ6zlJ9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWQzNWYyODItNDM1OC0z OWNmLWE1MzAtZTUxMmE3YjJlZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmw6r+JS7n8yLu9dII6elAQDewiJPZasmYhEwRv+AN2X0X5TB8mIYtH wQ2CN/2DQ+Zh/FfYb9E/fp5zDDKTZL/M7+Qse62RzDJZnb1s4iVNzuqqBF8RYux6 qvE7sTSS+EwTHrqjHDj6KCK1uw0UKmyr9okPctnZPS5KywSBE8OAcNpn9GJ/LJtQ C7Oe/bijsmEBPwNxxkEOSx6Rc4nHBA2QfV0fB+IW7eyO5O0CTVgo2g5ojhuABJkC LJCOOfu/909i3UMJToZmyLx3xwfSqtgX7ezKz04RKejemGzV+Ib+RhYAcNyzN9iN bSf82RiClP66d6XGlAXeEy8qWd8Gh1s= -----END CERTIFICATE-----Generated at Sun Sep 27 02:52:39 2026 by rpki-client