$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec33ee18-f1f9-3573-9d81-b5d8738daf26.roa File: ec33ee18-f1f9-3573-9d81-b5d8738daf26.roa (raw, json) Hash identifier: 29hzwrLY546A6eGuVOTsin8L82Q4t/k9l+cWNTN7UNs= Subject key identifier: B4:85:1A:B7:7E:A7:27:39:7D:43:C4:7D:FD:D8:8D:5C:42:BD:EA:73 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4972A20DC70F417F7ABB5F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec33ee18-f1f9-3573-9d81-b5d8738daf26.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.21.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a2:0d:c7:0f:41:7f:7a:bb:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ad83450d-5264-4532-a631-e604ae76d48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:3c:5e:40:04:8b:00:b4:2a:ff:24:10:09: 2c:4d:a2:17:78:2e:db:e5:c6:ef:b6:bd:84:d8:67: c9:b7:ac:fc:a1:78:41:c0:a6:4d:11:9e:8f:1d:11: 30:81:6a:11:2c:7c:c5:68:2a:46:e5:78:dd:a2:0a: ac:76:fc:97:fc:c2:5e:0b:c9:7b:bf:6c:69:90:4c: da:09:3d:77:eb:68:bf:e0:97:68:46:04:3f:32:04: cc:2d:a4:56:ed:c5:73:df:a2:ab:ba:e0:79:bd:88: d8:ab:26:55:e2:6b:23:08:cf:e8:d8:c0:c3:45:d9: 36:93:08:db:b5:49:61:4c:a9:e2:12:11:06:e6:c8: 2c:db:41:bb:ad:14:f8:dd:75:9f:5c:6f:c0:16:ef: 25:1b:65:d8:05:e5:53:42:02:de:0a:77:1b:18:42: 7d:ab:7d:3f:94:cf:b4:a8:65:30:25:1d:4a:48:6e: 0f:a7:82:41:23:e5:21:d4:d1:ff:fc:3e:73:a7:a7: 6f:51:56:c1:98:83:ff:bd:1d:e6:ac:fd:86:6e:ab: 1e:e0:c3:1e:ae:0f:05:d3:00:52:95:56:fb:57:c8: 10:d2:62:49:68:65:10:58:96:a3:73:eb:07:d2:13: af:56:13:31:67:52:9b:76:82:1e:81:0d:18:30:52: ab:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:85:1A:B7:7E:A7:27:39:7D:43:C4:7D:FD:D8:8D:5C:42:BD:EA:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ec33ee18-f1f9-3573-9d81-b5d8738daf26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:78:a7:99:06:85:f1:ce:b7:c9:a4:40:26:4c:58:45:e0:ad: f7:e1:c4:10:9f:f5:ba:fc:9f:fd:04:f2:25:bc:b5:35:87:f3: 30:78:6a:a2:a1:0c:3b:87:78:63:05:81:bc:65:11:7d:a2:10: d8:92:85:c1:fa:c3:c1:b0:89:06:44:37:9b:0b:e4:0a:9d:7d: be:7e:97:c7:30:a6:f3:14:ec:89:e7:1c:c7:ad:25:24:d2:f0: 52:e8:12:32:80:8c:f1:56:6d:62:96:0f:28:fd:2e:3c:45:9b: 4d:86:f3:45:c3:ef:1b:52:77:5d:c5:66:bc:ba:92:2f:3e:d8: 3f:b0:f9:8e:bb:00:91:db:79:ca:61:77:0b:9d:6c:11:3d:e7: 18:bc:9c:40:df:3e:51:23:8c:57:46:47:48:2c:34:85:d6:ce: de:af:a5:28:32:f8:0c:58:ed:fa:ca:83:cf:f0:95:54:5a:98: 22:d9:94:f2:ef:0e:d4:4e:b8:98:39:90:55:c9:02:5a:26:e5: 4f:5a:af:1a:92:48:77:cb:b1:78:f6:40:d2:16:2c:9b:97:54: 05:39:52:78:31:7d:51:96:6d:05:7f:49:a8:5f:76:1e:86:33: 8e:c9:25:84:03:85:09:64:89:63:4a:41:39:bc:df:de:97:42: f4:ca:94:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqINxw9Bf3q7XwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWQ4MzQ1MGQtNTI2NC00NTMyLWE2MzEtZTYwNGFlNzZkNDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYY8XkAEiwC0Kv8kEAksTaIXeC7b5cbvtr2E 2GfJt6z8oXhBwKZNEZ6PHREwgWoRLHzFaCpG5XjdogqsdvyX/MJeC8l7v2xpkEza CT1362i/4JdoRgQ/MgTMLaRW7cVz36KruuB5vYjYqyZV4msjCM/o2MDDRdk2kwjb tUlhTKniEhEG5sgs20G7rRT43XWfXG/AFu8lG2XYBeVTQgLeCncbGEJ9q30/lM+0 qGUwJR1KSG4Pp4JBI+Uh1NH//D5zp6dvUVbBmIP/vR3mrP2Gbqse4MMerg8F0wBS lVb7V8gQ0mJJaGUQWJajc+sH0hOvVhMxZ1KbdoIegQ0YMFKrUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSFGrd+pyc5fUPEff3YjVxCvepzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWMzM2VlMTgtZjFmOS0z NTczLTlkODEtYjVkODczOGRhZjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp4p5kGhfHOt8mkQCZMWEXgrffhxBCf9br8n/0E8iW8tTWH8zB4aqKh DDuHeGMFgbxlEX2iENiShcH6w8GwiQZEN5sL5Aqdfb5+l8cwpvMU7InnHMetJSTS 8FLoEjKAjPFWbWKWDyj9LjxFm02G80XD7xtSd13FZry6ki8+2D+w+Y67AJHbecph dwudbBE95xi8nEDfPlEjjFdGR0gsNIXWzt6vpSgy+AxY7frKg8/wlVRamCLZlPLv DtROuJg5kFXJAlom5U9arxqSSHfLsXj2QNIWLJuXVAU5UngxfVGWbQV/Sahfdh6G M47JJYQDhQlkiWNKQTm8396XQvTKlK8= -----END CERTIFICATE-----Generated at Sun Oct 4 11:32:40 2026 by rpki-client