$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/973cd140-cab6-388f-8e11-26b2f8fc5390.roa File: 973cd140-cab6-388f-8e11-26b2f8fc5390.roa (raw, json) Hash identifier: umvaI5Q/KROplS7wUj6QzgRaJsreqUIGX5wy2OGy62g= Subject key identifier: 2D:EB:46:12:AD:10:D6:24:E7:15:11:A7:79:EA:C8:51:55:68:F2:ED Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E0865E546BA4A9B0B335F0680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/973cd140-cab6-388f-8e11-26b2f8fc5390.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.21.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:e5:46:ba:4a:9b:0b:33:5f:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=38b8acb7-9c4f-4522-a4f3-aa9226bc46ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c8:a8:9c:e5:a5:f5:e7:3e:dd:71:bf:49:a2: 18:fe:68:ab:5d:6f:c6:e1:5e:8e:a7:47:95:51:47: 74:1b:ff:12:f3:c7:c0:c5:05:e7:b2:6b:b8:68:77: 5f:b9:b3:96:e7:28:53:d3:f4:ae:bb:03:7c:c8:94: 51:67:5e:84:40:4e:2b:6d:c8:a9:66:bf:0e:16:94: 5c:ce:6e:d4:9f:64:4a:f7:12:df:f5:29:7e:31:0d: 8e:e3:fd:29:42:0d:77:87:b2:cb:c7:7e:d5:59:51: 76:ff:d6:16:d3:c8:7c:f1:af:ce:c7:36:a2:29:e9: 72:4c:a5:75:4a:ae:d0:fb:88:d6:2f:1e:bc:b2:d1: 78:de:ef:42:f9:f1:67:42:12:74:6a:39:b1:d0:b5: 0e:a1:f3:7a:17:26:77:57:c2:09:ab:f0:1a:9f:57: 81:e2:f2:da:c9:b2:ee:da:c3:e0:0c:74:81:27:09: 51:3e:10:99:44:c9:e7:3c:ae:84:75:0c:02:77:d1: c3:83:58:25:f6:a6:bb:a8:3b:11:4c:4c:fc:1b:bf: ea:d2:c5:8d:88:78:98:19:ac:4d:09:f3:a0:b8:d6: 56:03:cc:29:72:95:f5:7f:3f:8e:bd:6b:ca:b7:b2: 15:e3:6c:6e:01:96:b8:02:73:c4:10:57:d8:47:34: 66:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EB:46:12:AD:10:D6:24:E7:15:11:A7:79:EA:C8:51:55:68:F2:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/973cd140-cab6-388f-8e11-26b2f8fc5390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b6:b9:fb:7d:57:22:9a:12:01:a2:f9:27:8c:be:53:64:ce: 17:90:b2:9f:30:b6:da:fb:98:e8:78:99:de:7d:35:8f:4b:8f: d5:5d:0b:de:79:cf:a1:9b:f3:50:f0:72:54:8c:ca:ed:b6:52: 12:51:2c:ae:de:f3:1f:f0:0b:e0:d4:41:75:c0:3d:ad:ca:a6: 6a:4d:e7:a0:ca:c6:93:87:c7:cb:36:b1:d1:13:1b:c9:fa:aa: 1d:7f:79:2e:89:33:1d:85:53:3b:46:a2:54:82:3c:73:d2:de: 8e:26:33:23:23:4f:e2:53:13:32:be:e0:cb:b2:72:7f:04:dc: 6e:bd:8c:a9:cc:65:18:df:6e:d7:41:c3:05:71:95:8b:15:39: fd:5e:69:74:9f:7f:6a:ee:55:a2:6c:6e:a3:55:76:ea:93:3c: 1d:81:c0:ef:03:c2:ec:f4:f2:58:58:60:92:d3:20:ae:3c:28: e5:fb:d6:65:31:bf:ff:97:48:6b:1b:e7:36:51:16:78:a5:0e: cd:63:d1:6b:69:39:22:68:5d:d1:79:c3:00:19:21:81:66:8f: d3:c8:fc:94:56:c3:ad:74:1c:86:f0:7f:78:06:f9:2a:8f:f0: d1:0c:17:4e:20:fe:92:20:42:25:70:44:14:a0:ad:7f:d3:19: 98:86:83:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZeVGukqbCzNfBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MzhiOGFjYjctOWM0Zi00NTIyLWE0ZjMtYWE5MjI2YmM0NmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsionOWl9ec+3XG/SaIY/mirXW/G4V6Op0eV UUd0G/8S88fAxQXnsmu4aHdfubOW5yhT0/SuuwN8yJRRZ16EQE4rbcipZr8OFpRc zm7Un2RK9xLf9Sl+MQ2O4/0pQg13h7LLx37VWVF2/9YW08h88a/OxzaiKelyTKV1 Sq7Q+4jWLx68stF43u9C+fFnQhJ0ajmx0LUOofN6FyZ3V8IJq/Aan1eB4vLaybLu 2sPgDHSBJwlRPhCZRMnnPK6EdQwCd9HDg1gl9qa7qDsRTEz8G7/q0sWNiHiYGaxN CfOguNZWA8wpcpX1fz+OvWvKt7IV42xuAZa4AnPEEFfYRzRmPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3rRhKtENYk5xURp3nqyFFVaPLtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTczY2QxNDAtY2FiNi0z ODhmLThlMTEtMjZiMmY4ZmM1MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu2uft9VyKaEgGi+SeMvlNkzheQsp8wttr7mOh4md59NY9Lj9VdC955 z6Gb81DwclSMyu22UhJRLK7e8x/wC+DUQXXAPa3KpmpN56DKxpOHx8s2sdETG8n6 qh1/eS6JMx2FUztGolSCPHPS3o4mMyMjT+JTEzK+4Muycn8E3G69jKnMZRjfbtdB wwVxlYsVOf1eaXSff2ruVaJsbqNVduqTPB2BwO8Dwuz08lhYYJLTIK48KOX71mUx v/+XSGsb5zZRFnilDs1j0WtpOSJoXdF5wwAZIYFmj9PI/JRWw610HIbwf3gG+SqP 8NEMF04g/pIgQiVwRBSgrX/TGZiGgww= -----END CERTIFICATE-----Generated at Sat Jun 13 17:50:20 2026 by rpki-client