$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e21c34b0-a72b-3c22-a864-16887548d10e.roa File: e21c34b0-a72b-3c22-a864-16887548d10e.roa (raw, json) Hash identifier: lI1R+dOWbEP2VGDrM5bDKXAiDHUTsm1azdqlg1yWAJY= Subject key identifier: 60:86:BF:EE:2F:CD:14:4A:E9:F6:86:BC:55:8A:C8:94:D9:C1:A7:E0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EC63C72432F4EBB04598D5900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e21c34b0-a72b-3c22-a864-16887548d10e.roa Signing time: Sun 09 Aug 2026 01:00:12 +0000 ROA not before: Sun 09 Aug 2026 01:00:12 +0000 ROA not after: Sat 07 Nov 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.23.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c6:3c:72:43:2f:4e:bb:04:59:8d:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 9 01:00:12 2026 GMT Not After : Nov 7 02:00:12 2026 GMT Subject: CN=6ac6eb9a-f5d0-4fba-886a-5e793028efcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:6c:bf:b1:39:83:74:ec:ce:a5:37:cd:de: ba:e2:76:40:ce:f9:8a:6c:3d:02:5a:b4:be:a2:78: 91:06:94:0d:b0:2f:f4:c5:b7:03:0d:54:9b:46:9b: 19:b8:c4:7c:2b:90:85:f1:ce:d7:1c:99:36:02:93: 9d:92:2c:3d:96:9f:27:d3:67:37:79:15:44:69:84: dd:03:26:17:14:59:f4:81:c4:15:f1:9c:6d:ee:20: 0c:a2:dd:25:79:13:83:12:b4:e1:e5:6d:ad:b2:34: 68:11:fc:2a:1b:67:08:86:45:e6:f3:fe:45:20:e2: 2f:5b:04:59:1e:ff:d6:63:6f:64:c6:5a:60:41:c0: 4a:d6:12:0a:1e:46:e3:44:3b:5a:bd:e0:de:30:88: ec:91:f0:f9:b7:37:6f:dd:4a:f8:8d:9d:c4:f8:f3: 67:2d:a6:a9:c3:f7:25:dd:98:f5:3f:42:ab:3d:0f: f5:40:fd:d0:ec:71:dc:83:12:36:08:14:1c:fa:b7: 93:5e:e5:e1:d3:f4:2c:a2:30:41:30:b8:ba:22:5e: ee:ec:12:c2:9c:c3:cc:00:34:b1:83:22:b8:04:34: 24:ba:95:12:73:a0:ba:e3:05:b0:6c:32:23:60:42: 1d:34:36:00:56:e7:4e:ed:73:dd:db:7c:00:66:19: 7c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:86:BF:EE:2F:CD:14:4A:E9:F6:86:BC:55:8A:C8:94:D9:C1:A7:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e21c34b0-a72b-3c22-a864-16887548d10e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c3:a3:ed:9e:1b:d1:6e:7f:70:98:b3:18:99:54:a9:c6:13: 5a:58:02:18:bb:52:a3:4d:fe:8c:fe:ac:e5:e2:c0:fc:92:b2: de:6c:00:b8:14:a4:83:58:08:71:2d:a9:cd:2b:59:89:51:8f: df:18:d7:41:b8:1d:14:f3:04:cc:44:ef:85:00:ed:0c:df:24: 07:8c:d2:f7:38:29:8d:8a:33:34:73:0e:77:2c:fa:9f:50:59: 96:56:a3:ac:f4:21:bd:df:e1:0e:6a:7a:7f:8f:e9:49:08:9e: d4:6a:0a:99:df:8b:f5:f4:db:47:51:0a:58:dd:80:7e:41:df: 25:7e:1d:e5:44:9f:95:8c:49:63:6e:51:1c:dd:61:da:cf:2f: 16:a7:a2:fb:15:f4:fb:cc:9a:da:62:b9:9d:1a:0b:b7:96:4f: 36:4f:cc:b7:9a:6b:72:cf:50:ed:2e:df:ea:1a:17:ef:62:7e: f6:e7:bd:b4:0e:70:1b:b0:bd:e6:0c:4b:d2:81:0d:c7:63:df: 02:23:02:e4:73:31:66:93:f6:40:1b:1d:fa:44:fb:6e:f6:6b: 4f:45:5b:d4:a3:2d:78:fd:7c:5e:3e:07:9e:6c:e8:4e:95:7e: 28:48:2c:a6:7e:04:f6:8b:d8:b8:0d:14:d7:f7:22:b9:44:13: 18:dc:a1:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7GPHJDL067BFmNWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgwOTAxMDAxMloXDTI2MTEwNzAyMDAxMlowLzEtMCsGA1UEAxMk NmFjNmViOWEtZjVkMC00ZmJhLTg4NmEtNWU3OTMwMjhlZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVhsv7E5g3TszqU3zd664nZAzvmKbD0CWrS+ oniRBpQNsC/0xbcDDVSbRpsZuMR8K5CF8c7XHJk2ApOdkiw9lp8n02c3eRVEaYTd AyYXFFn0gcQV8Zxt7iAMot0leRODErTh5W2tsjRoEfwqG2cIhkXm8/5FIOIvWwRZ Hv/WY29kxlpgQcBK1hIKHkbjRDtaveDeMIjskfD5tzdv3Ur4jZ3E+PNnLaapw/cl 3Zj1P0KrPQ/1QP3Q7HHcgxI2CBQc+reTXuXh0/QsojBBMLi6Il7u7BLCnMPMADSx gyK4BDQkupUSc6C64wWwbDIjYEIdNDYAVudO7XPd23wAZhl80QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCGv+4vzRRK6faGvFWKyJTZwafgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTIxYzM0YjAtYTcyYi0z YzIyLWE4NjQtMTY4ODc1NDhkMTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArReJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfDo+2eG9Fuf3CYsxiZVKnGE1pYAhi7UqNN/oz+rOXiwPySst5sALgU pINYCHEtqc0rWYlRj98Y10G4HRTzBMxE74UA7QzfJAeM0vc4KY2KMzRzDncs+p9Q WZZWo6z0Ib3f4Q5qen+P6UkIntRqCpnfi/X020dRCljdgH5B3yV+HeVEn5WMSWNu URzdYdrPLxanovsV9PvMmtpiuZ0aC7eWTzZPzLeaa3LPUO0u3+oaF+9ifvbnvbQO cBuwveYMS9KBDcdj3wIjAuRzMWaT9kAbHfpE+272a09FW9SjLXj9fF4+B55s6E6V fihILKZ+BPaL2LgNFNf3IrlEExjcoTs= -----END CERTIFICATE-----Generated at Sun Sep 27 07:59:48 2026 by rpki-client