$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d429698-2bfc-3eae-8d85-55492090ea2a.roa File: 3d429698-2bfc-3eae-8d85-55492090ea2a.roa (raw, json) Hash identifier: LCXTvbD+3dgqpUA7ItSn0m09NtOPF0F8L24H//8QxQA= Subject key identifier: 83:58:5D:17:BD:B2:4A:C5:E2:0C:41:AE:36:59:DF:C0:D8:57:DB:64 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F35E7CB82CDC4E7F8BA92CF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d429698-2bfc-3eae-8d85-55492090ea2a.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.21.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:cb:82:cd:c4:e7:f8:ba:92:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=f31a119e-f5fa-4aea-a906-12e8e0dbafe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b7:22:4f:3b:5b:65:b6:11:fc:34:bf:d9:8d: 94:8d:57:24:9a:bc:cf:aa:44:dd:ea:e5:a9:4b:ed: 86:b9:07:1f:1d:0a:54:19:a5:ba:c7:6b:f8:58:8d: d0:bd:dc:0d:34:21:76:94:46:8c:89:c3:39:13:93: 51:ff:65:e2:29:43:f7:ee:b0:ef:65:ce:fe:4b:76: 40:89:3c:d1:d3:8e:6c:9b:1e:38:e9:21:89:71:1e: bb:c4:d2:98:ce:a2:49:61:0c:04:7e:6e:90:e3:8a: 93:2f:d5:2c:15:5e:57:89:3c:47:74:9c:e5:c5:60: 4e:ed:0a:d3:b0:c9:1b:67:b7:50:bc:5f:5b:75:8c: ac:8d:02:b1:30:30:c1:05:a4:df:9d:22:47:91:82: 98:b4:96:98:f6:5b:9b:3f:bb:64:bc:7e:78:de:46: f9:a1:98:d8:4c:33:07:ca:1a:eb:4e:39:95:8d:da: cf:a9:23:f1:5d:f4:58:47:4c:3f:b9:70:d9:1c:51: 17:f5:c6:40:30:5a:ee:d0:2e:90:49:17:4b:c0:0b: 2f:12:8e:89:60:43:4f:c4:45:03:24:ac:83:9b:a1: 8a:d5:7b:bb:46:a0:f3:17:40:9c:ec:07:f7:5e:b2: 10:e6:3e:8e:1b:e7:f2:de:f9:d4:99:53:c8:70:9c: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:58:5D:17:BD:B2:4A:C5:E2:0C:41:AE:36:59:DF:C0:D8:57:DB:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d429698-2bfc-3eae-8d85-55492090ea2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:26:6c:de:5d:b5:1b:a7:15:53:6a:b5:e2:01:59:08:9f:e0: 1e:28:3b:5f:60:49:8b:d2:51:98:0b:c3:7f:5f:ff:34:50:aa: 59:02:0c:bf:58:1d:7a:01:4f:7c:1e:e8:1c:72:5a:94:c6:26: 59:3d:fb:52:78:01:2e:76:f1:ff:9c:df:a9:39:90:8f:90:3f: 73:d3:e7:5b:e7:e1:d1:8c:be:ff:9a:60:9b:f2:69:ec:b4:15: bb:f3:b4:97:7a:89:c5:32:a6:55:41:b5:12:32:7e:22:bb:7b: 48:fd:04:9e:d4:59:49:25:e3:50:e7:a0:b0:bf:a1:84:76:c1: 7f:8a:96:3d:3e:e7:29:a3:3c:cc:5c:44:a0:87:4f:af:f7:56: 62:57:18:d2:1b:f6:0f:d7:52:85:30:c6:24:03:a8:1a:81:50: 47:6b:b7:c4:b4:15:82:aa:40:df:6a:e2:35:c5:74:80:87:11: 1a:2d:d7:80:9b:61:08:70:5a:23:3f:f0:f6:e2:b1:ae:70:ba: 8c:41:36:fb:d1:54:f1:c4:67:dc:57:0a:f3:bd:04:ff:39:f2: 78:c0:47:ab:7d:25:f7:dd:79:77:0e:80:64:24:a1:b1:69:7b: b7:aa:f0:f6:7f:72:c2:fd:22:f3:1f:c3:52:13:8a:1b:63:70: 0b:05:15:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158uCzcTn+LqSzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk ZjMxYTExOWUtZjVmYS00YWVhLWE5MDYtMTJlOGUwZGJhZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybciTztbZbYR/DS/2Y2UjVckmrzPqkTd6uWp S+2GuQcfHQpUGaW6x2v4WI3QvdwNNCF2lEaMicM5E5NR/2XiKUP37rDvZc7+S3ZA iTzR045smx446SGJcR67xNKYzqJJYQwEfm6Q44qTL9UsFV5XiTxHdJzlxWBO7QrT sMkbZ7dQvF9bdYysjQKxMDDBBaTfnSJHkYKYtJaY9lubP7tkvH543kb5oZjYTDMH yhrrTjmVjdrPqSPxXfRYR0w/uXDZHFEX9cZAMFru0C6QSRdLwAsvEo6JYENPxEUD JKyDm6GK1Xu7RqDzF0Cc7Af3XrIQ5j6OG+fy3vnUmVPIcJywkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINYXRe9skrF4gxBrjZZ38DYV9tkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Q0Mjk2OTgtMmJmYy0z ZWFlLThkODUtNTU0OTIwOTBlYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsmbN5dtRunFVNqteIBWQif4B4oO19gSYvSUZgLw39f/zRQqlkCDL9Y HXoBT3we6BxyWpTGJlk9+1J4AS528f+c36k5kI+QP3PT51vn4dGMvv+aYJvyaey0 FbvztJd6icUyplVBtRIyfiK7e0j9BJ7UWUkl41DnoLC/oYR2wX+Klj0+5ymjPMxc RKCHT6/3VmJXGNIb9g/XUoUwxiQDqBqBUEdrt8S0FYKqQN9q4jXFdICHERot14Cb YQhwWiM/8Pbisa5wuoxBNvvRVPHEZ9xXCvO9BP858njAR6t9JffdeXcOgGQkobFp e7eq8PZ/csL9IvMfw1ITihtjcAsFFV4= -----END CERTIFICATE-----Generated at Thu Sep 24 10:14:54 2026 by rpki-client