$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d86ab6d-8da8-33df-aa15-d718cf1afd39.roa File: 2d86ab6d-8da8-33df-aa15-d718cf1afd39.roa (raw, json) Hash identifier: ZWw8W33ev6D2tQmnSGHA3cHIZ5BjDBQIpyga1aslpGc= Subject key identifier: EA:85:96:41:F8:4A:F9:32:04:79:D9:E4:4C:D1:8D:66:5E:D8:56:3C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA78843E003453343901F3480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d86ab6d-8da8-33df-aa15-d718cf1afd39.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 173.21.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:43:e0:03:45:33:43:90:1f:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=504fb1ae-e6d7-4d6f-b62c-b4da59b3342e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1f:04:fa:23:32:b8:ac:9e:e8:bc:0f:38:ac: f1:34:a8:ff:f2:ae:63:22:f3:9f:91:9d:43:15:ae: 8a:08:43:2d:be:c4:04:86:c1:06:6e:5a:8e:45:28: bf:44:fe:33:54:2c:21:0c:b8:6c:3a:08:98:27:cc: f0:d6:9e:ad:51:67:c1:80:4f:3f:d4:bb:f4:de:cc: 10:3a:0c:58:56:3d:d0:55:3e:df:d9:95:ab:1e:3f: cd:b9:3a:54:fc:17:02:e2:e8:db:db:4f:e9:4d:05: 6a:c2:50:1e:e8:10:be:7b:d9:de:e5:09:83:16:a8: bf:ca:00:c1:c9:99:9c:4d:cf:4e:77:87:fd:9f:e0: 21:e1:0e:27:e6:1c:dd:2b:1b:df:53:b6:b8:f3:81: 78:44:c6:46:32:43:c9:dc:8a:03:cd:95:63:83:fa: c8:91:6b:f3:70:37:db:b9:36:f4:de:bb:a1:22:54: d7:9e:48:20:6f:20:b1:00:26:8d:7f:25:96:3e:6b: 6d:f2:e5:a0:77:84:f5:3a:72:96:2a:e5:35:e2:75: 8c:19:fd:4d:c3:8e:13:24:2d:ae:82:44:c4:62:14: 24:1b:98:8c:66:d6:17:b5:c8:fb:3a:ee:4e:01:9c: 21:90:5c:73:8b:c2:f4:8d:8d:89:31:f3:f1:ee:08: 22:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:85:96:41:F8:4A:F9:32:04:79:D9:E4:4C:D1:8D:66:5E:D8:56:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d86ab6d-8da8-33df-aa15-d718cf1afd39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5f:25:18:cc:89:ee:1e:fa:c3:4c:8a:7d:65:12:0a:21:50: 0d:b3:2d:67:c6:1f:0d:27:0a:28:65:43:c7:2f:e1:32:0e:a9: fe:fa:84:a4:87:a5:72:ae:02:48:ec:5a:27:60:5c:78:bf:d0: 2f:1b:46:84:9d:b9:26:1e:5a:4a:e2:9a:a1:32:3f:ce:6f:bd: ec:7e:75:fa:7c:3c:8e:9d:df:a1:a5:93:1c:cd:7a:e8:e0:10: 31:fc:de:1d:35:f4:62:9b:f4:15:42:5a:c0:22:d7:4e:17:be: 81:cf:ff:c6:33:92:22:01:46:10:2e:a3:f3:36:0d:02:44:d3: 5d:d3:83:e6:68:76:e5:4e:94:b4:26:69:b5:cb:34:1f:77:3e: 63:ad:61:8f:fd:b3:54:12:63:ed:08:fd:37:97:da:29:ae:a5: 2d:40:0e:0e:39:3f:d9:3c:1f:31:59:b7:4f:09:53:b3:2f:de: d6:2b:eb:81:96:8b:33:21:ba:7b:26:a5:34:b3:be:b9:0e:73: 08:91:96:cf:86:40:22:90:db:70:b7:05:10:72:82:5a:0c:8a: 46:46:09:62:01:a6:b6:05:17:f1:c6:06:1f:df:c7:7f:c3:4a: 36:59:42:68:d0:4d:76:d5:0e:38:1d:77:ce:89:30:f7:ba:ea: ef:b2:8d:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niEPgA0UzQ5AfNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTA0ZmIxYWUtZTZkNy00ZDZmLWI2MmMtYjRkYTU5YjMzNDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh8E+iMyuKye6LwPOKzxNKj/8q5jIvOfkZ1D Fa6KCEMtvsQEhsEGblqORSi/RP4zVCwhDLhsOgiYJ8zw1p6tUWfBgE8/1Lv03swQ OgxYVj3QVT7f2ZWrHj/NuTpU/BcC4ujb20/pTQVqwlAe6BC+e9ne5QmDFqi/ygDB yZmcTc9Od4f9n+Ah4Q4n5hzdKxvfU7a484F4RMZGMkPJ3IoDzZVjg/rIkWvzcDfb uTb03ruhIlTXnkggbyCxACaNfyWWPmtt8uWgd4T1OnKWKuU14nWMGf1Nw44TJC2u gkTEYhQkG5iMZtYXtcj7Ou5OAZwhkFxzi8L0jY2JMfPx7ggiLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqFlkH4SvkyBHnZ5EzRjWZe2FY8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmQ4NmFiNmQtOGRhOC0z M2RmLWFhMTUtZDcxOGNmMWFmZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJfJRjMie4e+sNMin1lEgohUA2zLWfGHw0nCihlQ8cv4TIOqf76hKSH pXKuAkjsWidgXHi/0C8bRoSduSYeWkrimqEyP85vvex+dfp8PI6d36GlkxzNeujg EDH83h019GKb9BVCWsAi104XvoHP/8YzkiIBRhAuo/M2DQJE013Tg+ZoduVOlLQm abXLNB93PmOtYY/9s1QSY+0I/TeX2imupS1ADg45P9k8HzFZt08JU7Mv3tYr64GW izMhunsmpTSzvrkOcwiRls+GQCKQ23C3BRBygloMikZGCWIBprYFF/HGBh/fx3/D SjZZQmjQTXbVDjgdd86JMPe66u+yjRE= -----END CERTIFICATE-----Generated at Sun Sep 20 23:19:13 2026 by rpki-client