$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9e39ac4-7283-30c0-a8a7-66d5e5955567.roa File: d9e39ac4-7283-30c0-a8a7-66d5e5955567.roa (raw, json) Hash identifier: D9myZRla7E8dtWrY+TJ1eNMfuAgptAHF9nWEX5mDXCk= Subject key identifier: F8:28:CF:D9:E4:48:1D:77:81:DB:11:02:88:48:CC:95:62:80:26:99 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E779A347ABCB22873F6FDD370 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9e39ac4-7283-30c0-a8a7-66d5e5955567.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 19905 IP address blocks: 173.21.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:34:7a:bc:b2:28:73:f6:fd:d3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=98cc3ca3-86e0-45a3-94dc-c5fbb9cba7b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:f8:dc:af:13:29:d4:de:c0:59:df:48:83: de:d0:d4:d8:c0:32:11:08:97:61:7d:6f:f1:3d:19: c4:71:70:f5:21:e4:5a:f4:7b:41:d7:33:24:49:0e: f1:c8:ff:18:4c:97:0c:cd:f4:b1:6b:e9:6d:4a:72: 47:a4:72:7d:39:77:2d:61:79:05:e9:6b:a5:a3:53: 2f:78:80:c5:84:fa:64:59:61:05:36:79:dd:68:c0: 91:1a:7f:5e:42:af:b1:94:6b:de:04:45:28:5e:9b: 79:ff:ef:40:3f:44:90:db:c3:a1:9c:13:32:33:f2: a5:64:1c:11:94:ed:1f:e5:ef:6b:3f:8a:8f:b4:3b: 76:24:53:a6:47:06:28:29:d7:04:e1:a2:e2:8a:31: 3e:1b:57:ec:42:c9:f4:01:7d:b5:4d:79:b5:ec:07: 84:eb:94:5c:e6:1d:b1:fc:a2:7b:fb:ab:17:46:78: 70:54:30:c5:43:b8:de:43:18:f3:bf:00:de:58:85: 16:db:cf:3e:d6:87:31:c2:a3:ab:03:6d:ae:8c:1f: 43:dd:6f:05:25:a0:0d:28:40:83:29:20:f9:6c:cc: b0:86:ea:4b:8e:4a:46:c1:e2:c6:40:6c:2d:0a:0b: 4c:51:1a:ce:4e:90:b8:cc:9d:c5:7b:d9:2b:16:a4: b5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:28:CF:D9:E4:48:1D:77:81:DB:11:02:88:48:CC:95:62:80:26:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9e39ac4-7283-30c0-a8a7-66d5e5955567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:4d:3c:82:af:b9:54:3f:93:d9:54:fd:da:a6:0d:34:6e:7c: 76:a8:54:62:2d:0f:f3:ec:9e:89:c7:9e:c6:fa:86:60:56:1a: a3:ae:20:25:57:46:be:a1:59:46:75:bb:d1:af:ec:ac:03:ab: f2:9f:27:ba:e4:95:6b:2f:25:29:a3:90:4b:68:b2:ad:71:8f: 46:df:e4:e5:16:cb:d1:9d:88:a6:cd:50:31:e1:eb:34:d8:80: 40:68:e9:98:49:6b:d1:0a:d5:23:33:3e:83:01:c7:9c:2c:04: 6e:a5:2d:48:11:45:10:f2:00:5d:de:3d:99:94:7d:28:7e:00: a5:f1:e2:3e:81:c8:aa:38:d6:b9:00:ae:46:c7:e4:b5:67:d9: 37:04:c3:56:f3:4a:55:61:6b:5e:88:f2:54:87:d6:b6:37:4c: 2d:2d:34:a9:c8:58:fa:6a:03:46:28:ed:55:5c:1e:71:4e:2c: cb:f6:38:ef:a2:7f:ca:13:4e:07:db:59:b2:8e:ff:b1:b3:2d: 82:b3:f1:0e:24:b3:b5:ac:61:52:a5:bc:bd:27:e4:bd:79:fd: 07:29:78:0b:fe:91:75:b0:66:9b:44:7d:2a:c4:68:8a:d7:02: 5a:c5:f4:e8:1d:57:06:e6:8e:9c:c0:20:5b:03:67:f9:ff:4a: 97:fa:d5:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53mjR6vLIoc/b903AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk OThjYzNjYTMtODZlMC00NWEzLTk0ZGMtYzVmYmI5Y2JhN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQX43K8TKdTewFnfSIPe0NTYwDIRCJdhfW/x PRnEcXD1IeRa9HtB1zMkSQ7xyP8YTJcMzfSxa+ltSnJHpHJ9OXctYXkF6Wulo1Mv eIDFhPpkWWEFNnndaMCRGn9eQq+xlGveBEUoXpt5/+9AP0SQ28OhnBMyM/KlZBwR lO0f5e9rP4qPtDt2JFOmRwYoKdcE4aLiijE+G1fsQsn0AX21TXm17AeE65Rc5h2x /KJ7+6sXRnhwVDDFQ7jeQxjzvwDeWIUW288+1ocxwqOrA22ujB9D3W8FJaANKECD KSD5bMywhupLjkpGweLGQGwtCgtMURrOTpC4zJ3Fe9krFqS1tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgoz9nkSB13gdsRAohIzJVigCaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDllMzlhYzQtNzI4My0z MGMwLWE4YTctNjZkNWU1OTU1NTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABNPIKvuVQ/k9lU/dqmDTRufHaoVGItD/PsnonHnsb6hmBWGqOuICVX Rr6hWUZ1u9Gv7KwDq/KfJ7rklWsvJSmjkEtosq1xj0bf5OUWy9GdiKbNUDHh6zTY gEBo6ZhJa9EK1SMzPoMBx5wsBG6lLUgRRRDyAF3ePZmUfSh+AKXx4j6ByKo41rkA rkbH5LVn2TcEw1bzSlVha16I8lSH1rY3TC0tNKnIWPpqA0Yo7VVcHnFOLMv2OO+i f8oTTgfbWbKO/7GzLYKz8Q4ks7WsYVKlvL0n5L15/QcpeAv+kXWwZptEfSrEaIrX AlrF9OgdVwbmjpzAIFsDZ/n/Spf61SA= -----END CERTIFICATE-----Generated at Fri Jul 24 02:12:07 2026 by rpki-client