$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/240efba0-c32c-370d-9a15-b7fe3d671314.roa File: 240efba0-c32c-370d-9a15-b7fe3d671314.roa (raw, json) Hash identifier: f/uht3U+a8vSOnF6x6WYHa+vS6AkbIiYW2I5NcCbkYE= Subject key identifier: BB:7C:13:DD:21:46:CE:A5:3E:D5:F4:33:FF:81:12:E1:AE:98:D8:6E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA6E6756BB4FD613E31EA1780 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/240efba0-c32c-370d-9a15-b7fe3d671314.roa Signing time: Tue 28 Jul 2026 19:37:03 +0000 ROA not before: Tue 28 Jul 2026 19:37:03 +0000 ROA not after: Mon 26 Oct 2026 19:37:03 +0000 asID: 30036 IP address blocks: 173.21.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a6:e6:75:6b:b4:fd:61:3e:31:ea:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 28 19:37:03 2026 GMT Not After : Oct 26 19:37:03 2026 GMT Subject: CN=237ae78e-eaac-40de-84ae-ab052f2535ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f2:b4:74:62:70:25:7e:75:13:98:9e:ef:19: 6f:92:e6:20:b7:59:ac:ae:3c:e8:b0:71:68:0d:d7: 8f:be:1a:2c:82:08:25:69:af:09:77:54:57:30:68: ae:f9:e3:b4:36:12:ac:9e:11:b8:a7:2f:ba:9e:8d: 02:82:b4:d8:8e:88:eb:29:03:d3:a2:8a:6d:53:f7: c6:fe:7b:4f:e5:2e:18:16:1c:d5:13:cd:77:dd:df: 2c:4a:06:47:63:15:62:31:4d:de:c9:c6:26:0d:95: d4:26:cd:0f:3f:11:a4:af:48:40:17:46:b6:6d:a3: 8a:33:a6:40:cc:3d:38:62:b9:26:3d:90:10:54:ab: 3c:b4:dd:8d:b6:15:9f:99:b0:ad:b3:1c:eb:ba:d2: 3e:07:69:84:95:05:b7:e0:14:0b:d2:42:96:ff:6f: ce:92:12:94:e5:ce:c5:6a:2f:4d:19:f6:42:fb:b7: 43:10:a6:7b:06:52:af:0f:85:af:83:bb:b4:38:52: f8:1b:6d:a4:5f:3a:d2:59:0a:5f:02:5c:b5:5b:5e: 26:ed:08:cf:60:9e:7e:16:67:76:58:02:6b:86:92: ae:9c:3c:f4:24:49:b9:49:56:3d:52:29:90:47:dd: ef:b7:20:c7:a0:42:cf:5c:b2:cf:01:fc:98:d7:80: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7C:13:DD:21:46:CE:A5:3E:D5:F4:33:FF:81:12:E1:AE:98:D8:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/240efba0-c32c-370d-9a15-b7fe3d671314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:50:f1:c4:a5:bf:fe:c4:ed:f0:86:c7:46:9d:69:94:9c:59: 74:f1:03:c7:e4:1f:46:da:c4:48:dd:cc:c2:1a:83:41:7d:d3: 08:0f:aa:64:7a:f5:72:55:ad:f2:3b:1a:9e:38:d1:fb:37:df: 3f:b9:bb:e7:68:b2:ea:67:84:74:15:ab:63:e9:08:d3:d4:ca: 88:fa:71:48:26:ba:9a:9a:5b:da:52:2d:27:7d:f3:87:1f:ed: 3e:a8:4e:ff:76:59:5b:a0:8c:eb:20:05:88:c9:ca:a5:c0:b0: ad:8b:3f:4b:a4:f1:71:12:09:eb:9d:9b:ab:e4:14:68:b1:2a: ea:fb:0d:5f:d1:11:b1:fa:26:10:df:8b:cf:bf:61:65:21:61: e7:8c:35:f6:2c:76:9a:95:4c:a1:1a:7b:ac:0c:7e:72:af:54: 24:0c:81:b9:8e:db:1f:84:11:69:b2:a3:d9:b2:ff:cc:aa:45: 42:01:f6:c5:43:d5:9d:ad:b2:56:15:91:cf:3e:de:2c:fa:39: 74:25:02:66:18:bf:6e:89:4f:90:30:e6:70:3f:05:46:e8:34: a8:1d:e2:e9:08:d4:a4:72:a5:9b:ab:7d:15:4b:51:08:af:e7: 9b:bb:9c:f4:e9:ab:3b:31:23:f5:3f:bb:34:c8:14:da:1b:68: 4a:b5:33:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6m5nVrtP1hPjHqF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyODE5MzcwM1oXDTI2MTAyNjE5MzcwM1owLzEtMCsGA1UEAxMk MjM3YWU3OGUtZWFhYy00MGRlLTg0YWUtYWIwNTJmMjUzNWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvK0dGJwJX51E5ie7xlvkuYgt1msrjzosHFo DdePvhosggglaa8Jd1RXMGiu+eO0NhKsnhG4py+6no0CgrTYjojrKQPTooptU/fG /ntP5S4YFhzVE8133d8sSgZHYxViMU3eycYmDZXUJs0PPxGkr0hAF0a2baOKM6ZA zD04YrkmPZAQVKs8tN2NthWfmbCtsxzrutI+B2mElQW34BQL0kKW/2/OkhKU5c7F ai9NGfZC+7dDEKZ7BlKvD4Wvg7u0OFL4G22kXzrSWQpfAly1W14m7QjPYJ5+Fmd2 WAJrhpKunDz0JEm5SVY9UimQR93vtyDHoELPXLLPAfyY14AaQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLt8E90hRs6lPtX0M/+BEuGumNhuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjQwZWZiYTAtYzMyYy0z NzBkLTlhMTUtYjdmZTNkNjcxMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtQ8cSlv/7E7fCGx0adaZScWXTxA8fkH0baxEjdzMIag0F90wgPqmR6 9XJVrfI7Gp440fs33z+5u+dosupnhHQVq2PpCNPUyoj6cUgmupqaW9pSLSd984cf 7T6oTv92WVugjOsgBYjJyqXAsK2LP0uk8XESCeudm6vkFGixKur7DV/REbH6JhDf i8+/YWUhYeeMNfYsdpqVTKEae6wMfnKvVCQMgbmO2x+EEWmyo9my/8yqRUIB9sVD 1Z2tslYVkc8+3iz6OXQlAmYYv26JT5Aw5nA/BUboNKgd4ukI1KRypZurfRVLUQiv 55u7nPTpqzsxI/U/uzTIFNobaEq1M7k= -----END CERTIFICATE-----Generated at Tue Jul 28 22:36:31 2026 by rpki-client