$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ac383c5-3f0d-301d-b30e-8049c0390d7b.roa File: 7ac383c5-3f0d-301d-b30e-8049c0390d7b.roa (raw, json) Hash identifier: m+8iLb2ceckVAf/q/98v5Ey6/VGN/PZw32daX8UXvlw= Subject key identifier: 9A:12:B3:F4:30:D8:E4:B1:73:69:81:A3:ED:BA:6C:8F:C5:03:1B:C5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA7988A6E1F6C9F0AFEC17C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ac383c5-3f0d-301d-b30e-8049c0390d7b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 19905 IP address blocks: 173.21.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:8a:6e:1f:6c:9f:0a:fe:c1:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bcf7b1d3-8d9a-47b0-b2ad-fc1910302f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:7a:64:36:b1:19:72:d5:5d:fa:64:c3:bd: 71:07:46:b3:70:ea:93:44:c8:36:21:62:cb:38:7e: 77:90:5e:cf:0f:f6:16:8a:9b:4f:b3:5f:1c:7f:1b: 1b:70:c4:5e:e6:43:94:3a:fd:c0:99:48:ae:6e:34: 73:9a:13:8a:73:f7:5f:0f:04:4f:26:69:58:cd:99: 84:9e:ee:c1:41:e2:64:06:db:4e:75:3e:f5:58:61: e3:bc:9a:54:d2:1a:ea:75:33:9e:65:16:79:0d:c6: 11:fb:25:02:99:c3:31:6e:c5:f0:3d:ba:fa:40:eb: 3e:84:d9:37:f6:e5:37:f6:79:56:16:fc:b1:c9:f1: 2e:af:95:45:b4:05:a1:6d:40:de:56:98:55:ba:bb: 42:25:c8:8f:ba:b7:95:b1:91:69:18:ca:52:70:cd: 3f:36:6b:fd:2d:70:36:5b:53:08:f4:20:50:08:ed: ff:72:67:2e:4a:89:7c:a7:b6:08:f7:9c:cd:b9:b9: 1b:05:be:30:43:d3:52:02:0b:6d:96:7f:d2:1f:15: 73:14:3f:6f:f4:b0:14:1e:bc:78:81:e4:79:2e:96: a2:16:63:8e:31:6d:b4:31:eb:58:dd:be:a2:65:27: c9:2a:dd:71:81:a9:32:f4:f4:3a:b3:82:b5:6c:28: 2c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:12:B3:F4:30:D8:E4:B1:73:69:81:A3:ED:BA:6C:8F:C5:03:1B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7ac383c5-3f0d-301d-b30e-8049c0390d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:c1:16:2a:45:8b:45:83:b6:08:48:b1:36:c0:38:24:7b:1c: 61:2a:e2:00:45:0a:a8:f4:02:9f:f7:1b:65:a5:00:6e:37:fc: c4:54:9a:a7:36:56:25:e7:6a:0c:7a:33:58:15:d1:fd:e3:bd: eb:59:4c:9f:df:26:9e:73:35:cc:25:5d:99:23:06:f7:de:75: a3:62:77:96:d5:46:3b:7a:23:22:99:ff:99:ad:e6:d8:23:82: 46:04:3d:c9:d0:70:5c:fd:4f:38:d2:d0:a5:14:fc:70:7a:1c: f0:f0:ef:ad:56:80:40:84:98:f5:4d:a1:2c:4b:08:fd:8c:11: 26:f7:09:40:2a:76:89:cd:f9:81:db:27:81:bf:85:94:3c:12: e1:97:97:1f:fb:7c:54:8e:28:5f:9e:8c:09:50:a9:14:a8:0e: 85:b9:48:a3:33:dd:79:28:76:b1:00:ee:0a:21:1d:6d:a1:94: bd:5a:de:1b:43:d6:ab:48:29:c5:76:e9:37:24:c5:eb:34:5e: 6f:68:84:d0:1c:cc:70:91:3e:11:a0:d8:0b:b2:6a:f5:00:32: 6e:80:66:cc:f8:ec:98:84:c9:f5:05:7b:8b:cc:3a:ee:4a:77: 4e:58:79:eb:fd:a7:42:6b:95:7c:d0:d1:69:7d:b1:b3:74:7f: 56:da:1e:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmIpuH2yfCv7BfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmNmN2IxZDMtOGQ5YS00N2IwLWIyYWQtZmMxOTEwMzAyZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw656ZDaxGXLVXfpkw71xB0azcOqTRMg2IWLL OH53kF7PD/YWiptPs18cfxsbcMRe5kOUOv3AmUiubjRzmhOKc/dfDwRPJmlYzZmE nu7BQeJkBttOdT71WGHjvJpU0hrqdTOeZRZ5DcYR+yUCmcMxbsXwPbr6QOs+hNk3 9uU39nlWFvyxyfEur5VFtAWhbUDeVphVurtCJciPureVsZFpGMpScM0/Nmv9LXA2 W1MI9CBQCO3/cmcuSol8p7YI95zNubkbBb4wQ9NSAgttln/SHxVzFD9v9LAUHrx4 geR5LpaiFmOOMW20MetY3b6iZSfJKt1xgaky9PQ6s4K1bCgsRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJoSs/Qw2OSxc2mBo+26bI/FAxvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2FjMzgzYzUtM2YwZC0z MDFkLWIzMGUtODA0OWMwMzkwZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDBFipFi0WDtghIsTbAOCR7HGEq4gBFCqj0Ap/3G2WlAG43/MRUmqc2 ViXnagx6M1gV0f3jvetZTJ/fJp5zNcwlXZkjBvfedaNid5bVRjt6IyKZ/5mt5tgj gkYEPcnQcFz9TzjS0KUU/HB6HPDw761WgECEmPVNoSxLCP2MESb3CUAqdonN+YHb J4G/hZQ8EuGXlx/7fFSOKF+ejAlQqRSoDoW5SKMz3XkodrEA7gohHW2hlL1a3htD 1qtIKcV26Tckxes0Xm9ohNAczHCRPhGg2AuyavUAMm6AZsz47JiEyfUFe4vMOu5K d05Yeev9p0JrlXzQ0Wl9sbN0f1baHms= -----END CERTIFICATE-----Generated at Mon Sep 21 17:20:38 2026 by rpki-client