$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be285e9d-2586-3544-ab95-806f7a48af8e.roa File: be285e9d-2586-3544-ab95-806f7a48af8e.roa (raw, json) Hash identifier: UdJhLtJQyGnTaXvkA8i0dotQXlVBzG+BCKRTZh+pvNU= Subject key identifier: 5B:F8:6C:8A:2E:96:63:68:B7:CC:21:1F:86:EE:29:84:A0:89:CF:73 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F480D669913833B35A90F4760 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be285e9d-2586-3544-ab95-806f7a48af8e.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.21.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:66:99:13:83:3b:35:a9:0f:47:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=16391f86-182a-450b-9324-0f7f0b4b1377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:1d:38:51:b4:da:01:ff:a5:47:28:93:d2: a1:04:4e:e8:ac:ae:b3:9f:96:fe:36:35:94:a0:6d: 81:3f:f6:3f:7f:e3:d2:f5:a8:8f:de:97:af:5c:a7: d8:f7:a0:fb:44:a9:74:e0:12:41:a1:b0:92:7e:03: aa:80:0d:b1:69:14:a7:7c:83:39:97:53:58:1d:a1: dd:8f:aa:62:cc:b0:91:8b:ba:5e:1b:a2:f9:0d:79: 40:9b:ef:06:50:47:c7:43:a6:70:a2:e6:f0:8b:dd: 90:e0:26:a1:0b:48:e5:59:19:3c:98:e9:95:63:35: 96:25:36:ed:c7:98:95:21:f0:db:ba:7a:0d:a4:d3: ba:57:94:4c:96:5d:51:62:6a:b4:93:e2:ad:47:92: 12:41:de:8d:40:b8:13:b9:36:17:70:f7:76:84:cc: 3d:ab:43:40:d9:85:89:d2:f8:a4:e0:0a:ed:48:06: 02:91:80:f2:f7:dc:0b:4c:a4:e8:f1:0d:f5:7a:de: 7c:0c:2c:41:2e:5c:03:9f:51:9d:b6:82:45:fe:40: 9e:27:13:fb:91:32:61:7e:7c:70:45:ef:43:0d:cb: 1b:de:29:8d:41:1e:5b:50:ca:00:de:1f:f8:3e:21: ee:c1:f9:f0:25:04:a3:8f:e2:93:70:6f:f9:1d:fd: f5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F8:6C:8A:2E:96:63:68:B7:CC:21:1F:86:EE:29:84:A0:89:CF:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be285e9d-2586-3544-ab95-806f7a48af8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d7:81:7c:f0:0f:e2:77:b3:1c:47:43:0b:2b:11:11:9c:31: 7a:0e:fc:e9:4f:63:11:0a:77:49:79:02:ea:78:12:62:c4:9e: 28:4f:44:61:d9:fe:ff:8b:35:de:57:c3:ee:e1:43:be:f0:3f: ca:2f:0b:5f:ac:59:76:78:4c:77:cf:f0:2f:5e:5e:7d:67:25: d2:93:f4:f7:64:36:75:6e:6c:00:02:bb:1e:dd:84:f4:db:15: fd:03:23:dd:27:a7:e8:ed:12:30:27:64:ac:4b:8a:cf:dc:2b: 4d:81:d3:70:60:7d:ea:31:ae:ca:cb:66:7b:98:2a:91:bd:9e: 43:df:d7:85:31:10:6f:a3:d2:e1:88:5c:38:21:71:6c:69:ca: 07:d2:7b:c3:86:33:a8:df:ef:db:7c:a3:b3:69:9e:09:fe:fb: 2c:14:00:0a:55:ac:aa:f5:94:93:25:74:9a:15:a2:24:5d:95: 42:d6:52:71:3b:c1:d6:47:66:55:b7:7e:c3:0c:ec:5b:2e:bb: db:c4:9f:f8:fe:ea:02:79:7c:76:77:7e:75:a7:39:99:06:20: 3e:94:6b:4a:56:9d:30:78:29:c9:95:59:37:e3:75:39:42:95: 56:21:c2:74:53:f8:ab:d4:ed:dd:e6:a2:1a:e9:d3:96:9e:0c: 2d:6b:ca:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWaZE4M7NakPR2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk MTYzOTFmODYtMTgyYS00NTBiLTkzMjQtMGY3ZjBiNGIxMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn4dOFG02gH/pUcok9KhBE7orK6zn5b+NjWU oG2BP/Y/f+PS9aiP3pevXKfY96D7RKl04BJBobCSfgOqgA2xaRSnfIM5l1NYHaHd j6pizLCRi7peG6L5DXlAm+8GUEfHQ6Zwoubwi92Q4CahC0jlWRk8mOmVYzWWJTbt x5iVIfDbunoNpNO6V5RMll1RYmq0k+KtR5ISQd6NQLgTuTYXcPd2hMw9q0NA2YWJ 0vik4ArtSAYCkYDy99wLTKTo8Q31et58DCxBLlwDn1GdtoJF/kCeJxP7kTJhfnxw Re9DDcsb3imNQR5bUMoA3h/4PiHuwfnwJQSjj+KTcG/5Hf31gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFv4bIoulmNot8whH4buKYSgic9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmUyODVlOWQtMjU4Ni0z NTQ0LWFiOTUtODA2ZjdhNDhhZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzXgXzwD+J3sxxHQwsrERGcMXoO/OlPYxEKd0l5Aup4EmLEnihPRGHZ /v+LNd5Xw+7hQ77wP8ovC1+sWXZ4THfP8C9eXn1nJdKT9PdkNnVubAACux7dhPTb Ff0DI90np+jtEjAnZKxLis/cK02B03BgfeoxrsrLZnuYKpG9nkPf14UxEG+j0uGI XDghcWxpygfSe8OGM6jf79t8o7Npngn++ywUAApVrKr1lJMldJoVoiRdlULWUnE7 wdZHZlW3fsMM7Fsuu9vEn/j+6gJ5fHZ3fnWnOZkGID6Ua0pWnTB4KcmVWTfjdTlC lVYhwnRT+KvU7d3mohrp05aeDC1ryts= -----END CERTIFICATE-----Generated at Mon Sep 28 22:50:28 2026 by rpki-client