$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d06be2-2497-387b-b093-f9161a79abe6.roa File: b8d06be2-2497-387b-b093-f9161a79abe6.roa (raw, json) Hash identifier: HM4EkSAovdlYQYWvn2rsocrZsM+bf6s6cZ0XPBXQaDA= Subject key identifier: 2E:AA:FC:F5:10:42:E4:81:E8:C1:AB:D0:45:AD:A2:63:B5:DA:97:C8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49899E18ED9757382E768260 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d06be2-2497-387b-b093-f9161a79abe6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.21.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:9e:18:ed:97:57:38:2e:76:82:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a4800f8c-4380-448b-b378-e63e7785a8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8d:40:c7:c1:6a:2d:a5:fa:f6:f9:e0:6b:45: 96:e9:fe:bd:7d:83:77:52:52:87:97:c9:b4:dd:00: 92:b5:17:3e:ba:8e:1c:a4:c9:d2:c6:0c:4b:ae:5c: 6c:67:4c:46:79:54:6d:cc:52:fd:06:79:28:d6:0f: c0:21:b6:b6:3f:24:30:46:be:3d:80:90:7c:22:d5: c8:94:46:13:98:65:be:df:04:50:4a:52:50:04:d0: ac:88:ce:a5:c3:a6:3e:58:09:6f:c8:a7:ee:5e:00: 76:b0:99:6a:47:1d:a5:c9:f8:71:40:cf:76:34:be: 54:4e:29:26:d5:f1:a0:55:78:75:c5:3d:4d:ce:1a: 08:4b:ba:41:10:33:f1:ae:a3:09:89:44:60:e3:4e: 59:0a:b6:a3:0b:e6:1d:ac:14:d8:de:af:51:ed:68: 16:b7:5b:00:51:00:2c:ad:03:5f:fc:dd:73:c1:06: 62:48:90:b4:44:89:20:2a:87:d0:ef:13:21:52:89: 25:c9:df:59:99:f9:b5:00:1b:ea:5f:99:25:49:41: f7:06:1b:ad:ce:84:a3:09:0a:5c:54:fb:ce:6c:a1: 43:b2:b9:5b:21:36:69:ed:43:ca:3c:c5:6a:32:ea: a3:33:7d:06:c2:87:37:44:eb:78:81:9d:4a:59:b9: a9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AA:FC:F5:10:42:E4:81:E8:C1:AB:D0:45:AD:A2:63:B5:DA:97:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d06be2-2497-387b-b093-f9161a79abe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:77:25:bd:1c:0a:6b:48:aa:7e:1c:eb:a5:9e:27:24:72:47: ef:31:14:e2:c5:a7:c4:df:19:8d:a0:f5:49:cb:9f:a5:2d:7f: 29:c1:f7:9a:f1:0c:92:23:40:40:99:ae:89:a3:5a:35:f9:9d: cf:28:e0:94:f4:d8:58:1f:e6:e2:27:0c:b9:30:41:d5:4f:7a: 66:9a:5e:f5:37:62:73:64:d6:38:62:3f:af:f8:b7:f6:ee:19: 37:40:5e:af:53:a4:92:ba:2c:81:aa:9e:84:70:be:55:6e:ff: 69:87:4c:6e:b6:5d:a5:9d:64:32:c1:d9:7d:20:28:f9:2f:b6: 21:33:17:3d:bd:89:33:79:8e:0e:4b:c9:aa:32:c0:04:a0:6c: 91:08:7e:58:bc:40:e5:ea:45:9b:e2:31:da:68:b3:2b:77:dc: fd:2f:a4:09:57:10:66:a0:30:1f:68:18:88:23:a5:a3:2d:be: 4a:c5:24:f3:f0:00:b9:c4:0b:b9:7a:fd:cd:73:06:f0:f6:2a: 34:cc:d3:4a:0b:71:ae:3d:cf:37:97:aa:3d:e6:14:9a:e9:69: cd:b5:55:51:8d:1a:7a:f3:65:63:e6:cb:3f:40:0a:10:01:c7: 9e:9c:ca:1d:d1:c6:ea:fc:45:80:50:6c:2f:a0:b3:42:fb:f0: ed:8b:6f:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiZ4Y7ZdXOC52gmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTQ4MDBmOGMtNDM4MC00NDhiLWIzNzgtZTYzZTc3ODVhOGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp41Ax8FqLaX69vnga0WW6f69fYN3UlKHl8m0 3QCStRc+uo4cpMnSxgxLrlxsZ0xGeVRtzFL9Bnko1g/AIba2PyQwRr49gJB8ItXI lEYTmGW+3wRQSlJQBNCsiM6lw6Y+WAlvyKfuXgB2sJlqRx2lyfhxQM92NL5UTikm 1fGgVXh1xT1NzhoIS7pBEDPxrqMJiURg405ZCrajC+YdrBTY3q9R7WgWt1sAUQAs rQNf/N1zwQZiSJC0RIkgKofQ7xMhUoklyd9Zmfm1ABvqX5klSUH3BhutzoSjCQpc VPvObKFDsrlbITZp7UPKPMVqMuqjM30Gwoc3ROt4gZ1KWbmpiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6q/PUQQuSB6MGr0EWtomO12pfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjhkMDZiZTItMjQ5Ny0z ODdiLWIwOTMtZjkxNjFhNzlhYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC13Jb0cCmtIqn4c66WeJyRyR+8xFOLFp8TfGY2g9UnLn6UtfynB95rx DJIjQECZromjWjX5nc8o4JT02Fgf5uInDLkwQdVPemaaXvU3YnNk1jhiP6/4t/bu GTdAXq9TpJK6LIGqnoRwvlVu/2mHTG62XaWdZDLB2X0gKPkvtiEzFz29iTN5jg5L yaoywASgbJEIfli8QOXqRZviMdposyt33P0vpAlXEGagMB9oGIgjpaMtvkrFJPPw ALnEC7l6/c1zBvD2KjTM00oLca49zzeXqj3mFJrpac21VVGNGnrzZWPmyz9AChAB x56cyh3Rxur8RYBQbC+gs0L78O2LbxI= -----END CERTIFICATE-----Generated at Fri Oct 2 21:45:29 2026 by rpki-client