$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa File: 3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa (raw, json) Hash identifier: zFh5OeNeoHBlL6DLDTkZcWbEcbO5v41fowBuzJh2tC0= Subject key identifier: EF:CA:5E:84:E3:96:B0:80:80:FC:74:F6:AC:21:45:E0:93:87:D8:79 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584DF7A5D22ECCD02E4769B09960 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa Signing time: Wed 27 May 2026 01:00:14 +0000 ROA not before: Wed 27 May 2026 01:00:14 +0000 ROA not after: Tue 25 Aug 2026 01:00:14 +0000 asID: 30036 IP address blocks: 173.21.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f7:a5:d2:2e:cc:d0:2e:47:69:b0:99:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: May 27 01:00:14 2026 GMT Not After : Aug 25 01:00:14 2026 GMT Subject: CN=5ae898b6-b335-4a9b-ace8-185dff2d394f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:eb:0d:66:bf:23:f1:8c:4d:b0:90:1b:7d: cb:8c:b8:48:5f:81:4c:11:08:0d:5d:e7:35:a4:1b: d0:42:37:1b:05:9e:8f:3d:72:9b:53:ed:9b:5d:87: 0c:65:02:28:04:3f:47:b5:a4:f5:85:da:af:d9:6b: ef:32:36:9e:f0:a5:92:59:87:ea:83:00:7e:d7:09: 97:ae:84:0f:91:a9:73:72:8c:5f:0b:7e:92:bf:35: 31:11:c6:cd:fa:93:8a:2c:a2:7e:a7:38:38:c3:c6: 65:a2:ca:f8:8b:5f:d4:3c:b9:0e:10:c6:2b:80:73: df:bf:a5:7e:f1:c2:15:f2:7b:20:44:38:1c:db:72: b9:1a:ac:cc:8f:56:15:f1:05:4e:91:6c:14:26:ce: cc:b2:4b:c2:8a:97:a6:49:f7:a7:c4:82:d4:3b:df: 0c:5f:99:79:0c:38:e6:c0:44:c4:3f:92:e6:27:9a: bd:63:3e:4c:1f:6e:03:af:1e:7f:db:50:32:f7:9d: ec:28:0e:b2:36:ce:62:a3:43:19:4a:b9:29:9b:25: b1:a0:95:56:a7:b5:ac:a3:3b:48:1e:2c:50:35:57: 10:cd:dd:0b:02:64:0e:bd:6f:4b:f8:bf:4d:51:3e: 20:ff:ab:a5:b3:42:24:c6:ee:f9:b3:e4:0d:15:48: d9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CA:5E:84:E3:96:B0:80:80:FC:74:F6:AC:21:45:E0:93:87:D8:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3dc1f671-2883-3ca7-834d-ca4ad6a8c339.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:95:4d:b1:b8:9c:2c:3a:5a:6d:8b:d2:94:69:a5:12:12:c2: dc:13:79:35:2f:52:95:bc:3c:0c:9c:a3:44:64:05:23:10:de: 50:98:46:86:21:0e:0e:e0:47:35:ad:73:7b:8a:6a:e8:5e:29: da:b0:c7:72:1f:6f:89:48:d5:96:d2:76:56:4c:4d:3c:1d:12: b8:7d:1e:90:79:1c:aa:48:5e:ae:c6:be:05:f3:3e:cd:5f:9a: 4c:ee:87:f1:e5:e5:70:d7:39:ed:fc:ee:fd:b4:05:df:db:42: a5:70:2a:d5:a5:4f:b5:30:b3:4b:21:d6:78:5e:54:70:0b:f7: f7:1d:27:43:12:9c:fb:2d:c7:a0:02:b0:6f:ac:d5:e9:6c:69: 6e:b7:13:14:c9:f7:91:e6:90:74:38:61:14:15:52:38:8a:bc: f7:03:02:aa:21:e8:16:e7:43:39:9f:94:d8:8a:6b:ae:23:cb: 03:8e:48:5b:49:17:11:62:5f:8c:24:9e:1a:6b:cd:f9:95:8d: 53:06:d3:1a:cc:01:76:f5:90:5f:14:52:08:a4:57:46:a0:ac: f4:61:a8:bd:7d:a0:8d:96:61:76:df:9e:e7:aa:eb:77:10:0d: c8:50:3c:0a:23:5b:68:01:32:4f:e8:3a:37:4f:25:2c:b6:45: a1:e3:d8:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE33pdIuzNAuR2mwmWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDUyNzAxMDAxNFoXDTI2MDgyNTAxMDAxNFowLzEtMCsGA1UEAxMk NWFlODk4YjYtYjMzNS00YTliLWFjZTgtMTg1ZGZmMmQzOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPDrDWa/I/GMTbCQG33LjLhIX4FMEQgNXec1 pBvQQjcbBZ6PPXKbU+2bXYcMZQIoBD9HtaT1hdqv2WvvMjae8KWSWYfqgwB+1wmX roQPkalzcoxfC36SvzUxEcbN+pOKLKJ+pzg4w8Zlosr4i1/UPLkOEMYrgHPfv6V+ 8cIV8nsgRDgc23K5GqzMj1YV8QVOkWwUJs7MskvCipemSfenxILUO98MX5l5DDjm wETEP5LmJ5q9Yz5MH24Drx5/21Ay953sKA6yNs5io0MZSrkpmyWxoJVWp7WsoztI HixQNVcQzd0LAmQOvW9L+L9NUT4g/6uls0Ikxu75s+QNFUjZ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/KXoTjlrCAgPx09qwhReCTh9h5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2RjMWY2NzEtMjg4My0z Y2E3LTgzNGQtY2E0YWQ2YThjMzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOVTbG4nCw6Wm2L0pRppRISwtwTeTUvUpW8PAyco0RkBSMQ3lCYRoYh Dg7gRzWtc3uKauheKdqwx3Ifb4lI1ZbSdlZMTTwdErh9HpB5HKpIXq7GvgXzPs1f mkzuh/Hl5XDXOe387v20Bd/bQqVwKtWlT7Uws0sh1nheVHAL9/cdJ0MSnPstx6AC sG+s1elsaW63ExTJ95HmkHQ4YRQVUjiKvPcDAqoh6BbnQzmflNiKa64jywOOSFtJ FxFiX4wknhprzfmVjVMG0xrMAXb1kF8UUgikV0agrPRhqL19oI2WYXbfnueq63cQ DchQPAojW2gBMk/oOjdPJSy2RaHj2Hs= -----END CERTIFICATE-----Generated at Sat Jun 13 16:24:03 2026 by rpki-client