$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f6ce2724-8a41-32de-9c2e-3b559956b12d.roa File: f6ce2724-8a41-32de-9c2e-3b559956b12d.roa (raw, json) Hash identifier: lFVDEZzAN8dqyUpw+bIufynzG0Jvu5whcB1P630Vsf0= Subject key identifier: 87:C6:30:B7:75:B6:36:0C:96:CF:6C:77:57:DF:0A:87:EF:34:BF:5A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F480D63330711F3D9B7BA9D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f6ce2724-8a41-32de-9c2e-3b559956b12d.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 173.21.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:63:33:07:11:f3:d9:b7:ba:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=bc3289b9-947b-4099-bca1-9e197dec711a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9a:ae:25:01:e2:b1:d5:ed:f6:b5:25:20:19: ac:b0:0e:b2:5f:ce:e8:f8:01:2a:75:e9:13:b6:af: ef:1a:d9:de:5e:e3:2a:34:bc:d3:b8:98:2f:ae:11: 5e:bf:9d:4e:ef:a7:f5:07:f7:aa:86:a2:15:07:92: d2:26:22:8d:e4:ba:f6:a9:d3:ce:a3:66:24:e4:71: 03:c9:6e:a7:27:d1:34:92:f4:e2:be:6d:ad:a7:d9: 5a:07:26:1d:9d:4e:fa:0e:74:f8:56:ce:f6:14:d3: 2c:b6:dd:10:70:d5:85:a5:a6:ed:a8:36:c7:db:e0: 9e:29:cf:df:59:05:71:44:30:36:95:51:38:a0:a2: bd:34:dc:71:02:b3:92:2f:dd:0d:c2:1d:a7:fe:8e: b6:e4:58:46:99:18:87:6c:53:35:8c:60:5e:0f:d3: 0d:9f:4a:9a:54:7a:cd:62:62:58:62:d8:32:58:82: 84:e3:b9:df:5d:5d:a1:c0:b3:52:a2:04:9e:1c:1a: 27:ee:de:b6:cc:08:15:5a:17:be:da:38:50:85:8c: f7:da:1e:62:3d:40:b3:f5:c4:32:2b:ed:f0:be:b7: 97:59:89:a0:65:12:aa:d3:62:65:fb:c3:95:a5:f5: 95:06:1d:a5:ef:c2:ca:6a:21:23:4d:76:3c:f6:e2: 90:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C6:30:B7:75:B6:36:0C:96:CF:6C:77:57:DF:0A:87:EF:34:BF:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f6ce2724-8a41-32de-9c2e-3b559956b12d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:1c:e3:ec:b0:5e:00:d8:37:22:07:da:6d:dc:8c:09:7e:98: b6:de:c5:75:06:e6:38:4d:cf:95:fa:f0:e4:cc:fa:fd:a7:b8: 04:93:4e:05:9d:0b:5b:4c:ad:8c:39:28:7e:52:9f:0a:e6:21: 51:8e:64:ce:ec:40:33:2f:14:d1:a1:34:57:7d:4f:69:0a:5d: ed:72:f1:5c:b4:b9:29:1f:98:ea:bd:ee:8d:d6:44:24:4e:85: c5:ca:ac:29:ad:6c:12:b2:ce:fb:97:a7:aa:58:19:d2:ad:c8: 85:a3:68:3d:60:65:00:85:ed:ba:28:b2:68:87:ee:8a:f1:b5: f6:e4:4a:73:3a:40:29:34:86:44:3f:c0:cc:01:8a:a3:28:eb: ba:02:31:c7:0e:73:5a:1b:a2:21:f0:41:2d:7d:08:00:da:29: d2:da:04:24:67:76:85:f4:58:1d:6e:a9:ef:23:3c:7a:44:27: 08:37:80:9c:fd:be:20:b9:ba:cf:53:2a:94:9a:82:4b:da:82: 56:03:b4:97:82:92:2b:55:e5:67:08:ed:e4:58:fa:04:61:5b: 91:bb:aa:06:1d:51:ee:41:48:92:3b:30:c4:5c:ec:55:68:38: f0:11:2f:fa:59:84:50:8d:24:3b:16:5d:8a:e0:fd:28:e2:ae: 46:0b:df:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWMzBxHz2be6nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk YmMzMjg5YjktOTQ3Yi00MDk5LWJjYTEtOWUxOTdkZWM3MTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpquJQHisdXt9rUlIBmssA6yX87o+AEqdekT tq/vGtneXuMqNLzTuJgvrhFev51O76f1B/eqhqIVB5LSJiKN5Lr2qdPOo2Yk5HED yW6nJ9E0kvTivm2tp9laByYdnU76DnT4Vs72FNMstt0QcNWFpabtqDbH2+CeKc/f WQVxRDA2lVE4oKK9NNxxArOSL90Nwh2n/o625FhGmRiHbFM1jGBeD9MNn0qaVHrN YmJYYtgyWIKE47nfXV2hwLNSogSeHBon7t62zAgVWhe+2jhQhYz32h5iPUCz9cQy K+3wvreXWYmgZRKq02Jl+8OVpfWVBh2l78LKaiEjTXY89uKQOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfGMLd1tjYMls9sd1ffCofvNL9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjZjZTI3MjQtOGE0MS0z MmRlLTljMmUtM2I1NTk5NTZiMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0c4+ywXgDYNyIH2m3cjAl+mLbexXUG5jhNz5X68OTM+v2nuASTTgWd C1tMrYw5KH5SnwrmIVGOZM7sQDMvFNGhNFd9T2kKXe1y8Vy0uSkfmOq97o3WRCRO hcXKrCmtbBKyzvuXp6pYGdKtyIWjaD1gZQCF7boosmiH7orxtfbkSnM6QCk0hkQ/ wMwBiqMo67oCMccOc1oboiHwQS19CADaKdLaBCRndoX0WB1uqe8jPHpEJwg3gJz9 viC5us9TKpSagkvaglYDtJeCkitV5WcI7eRY+gRhW5G7qgYdUe5BSJI7MMRc7FVo OPARL/pZhFCNJDsWXYrg/SjirkYL3xY= -----END CERTIFICATE-----Generated at Mon Oct 5 01:41:51 2026 by rpki-client