$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d06be2-2497-387b-b093-f9161a79abe6.roa File: b8d06be2-2497-387b-b093-f9161a79abe6.roa (raw, json) Hash identifier: jqrfwgLjtjpgx/Hicb9s+alEJpbRQ2n5HB3GLGsI1lo= Subject key identifier: E4:81:2F:86:82:67:92:31:8B:61:D8:CB:D6:02:DB:86:F8:6C:FC:58 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EA7A0C8BA62FEA0297C0D7200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d06be2-2497-387b-b093-f9161a79abe6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30036 IP address blocks: 173.21.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:c8:ba:62:fe:a0:29:7c:0d:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=82acb328-fa3a-4a02-b9cd-8c18f7dd4de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:3a:e1:5f:49:73:17:eb:4d:33:f2:b8:ba: 9c:51:35:80:47:93:31:67:4c:fa:e2:c6:4b:9c:42: 97:a6:3f:0c:45:71:4e:9f:27:3b:27:67:fa:ff:c6: 0e:b2:b3:73:f4:6f:62:f5:ed:0c:dc:16:bd:15:6b: 34:65:4d:18:40:20:ec:5c:e8:8f:af:81:39:60:5f: b8:1c:4e:93:0c:bd:85:28:e0:14:65:21:cb:38:3e: b3:e6:43:af:8c:14:9f:e0:8a:a9:3b:e0:9a:36:af: 44:26:f2:2b:d2:93:a4:76:91:72:e5:02:26:76:87: 4a:36:43:34:37:e1:48:6b:77:70:47:78:b8:39:f8: 21:df:46:8c:5f:17:28:4f:ff:ce:d2:e1:e1:58:13: 9c:5f:65:fe:19:eb:64:33:42:25:db:a7:4a:cd:bd: 03:a2:89:50:d3:54:1e:cf:18:10:4a:7c:4e:6a:59: 41:ae:71:2a:ff:22:80:ec:05:ec:cf:4d:69:5e:64: 7d:09:bc:ac:76:fc:01:a8:30:00:ef:4a:84:2d:a4: 4d:e9:59:c2:6f:65:9b:a0:36:e8:5a:5b:68:74:64: 85:ba:fd:11:aa:8b:b9:05:18:04:86:37:e2:4f:cf: 3d:19:27:87:8c:b9:7a:d3:0a:da:35:d8:f1:96:e1: a3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:81:2F:86:82:67:92:31:8B:61:D8:CB:D6:02:DB:86:F8:6C:FC:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8d06be2-2497-387b-b093-f9161a79abe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:76:c7:38:48:39:72:ab:50:ef:e5:75:4c:6c:aa:9e:5f:22: 4a:cd:81:97:c3:04:49:2c:80:87:02:3f:2a:c4:db:f7:a5:54: 48:13:e1:20:fe:1d:d6:02:55:20:da:47:ae:84:00:c3:02:5d: e3:09:53:63:da:e4:5d:61:50:db:62:68:69:3d:d5:71:40:a1: 91:52:22:cf:27:d3:91:04:dc:d3:26:12:38:9c:49:6a:d2:21: f7:ae:76:de:d5:9b:7e:30:06:34:14:91:54:a1:f8:a8:3b:b1: bf:5c:a5:44:a9:a5:7f:a2:e2:eb:a6:fe:c9:a9:5a:7b:ea:6a: e5:49:1d:6b:96:f4:a3:a8:03:1f:27:91:91:a5:ca:91:e1:3b: c4:d0:6c:03:10:38:87:d2:50:d1:27:e6:ed:b9:25:23:5c:be: 04:cc:90:77:39:80:6f:b9:43:2e:e4:63:c4:bd:5f:dc:cc:db: 3d:75:5b:1a:64:d5:b1:08:d8:79:78:9e:de:6b:5e:d8:3f:bb: 67:02:80:7a:cf:45:c7:1f:84:d1:f8:34:d9:09:55:2a:ff:45: a7:d1:6f:1b:fc:56:47:31:5d:e9:fb:a7:9e:67:9f:35:ac:74: 2c:73:18:97:9f:c3:14:18:7a:fe:40:d6:49:d8:39:ae:d4:a2: c2:f6:12:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noMi6Yv6gKXwNcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODJhY2IzMjgtZmEzYS00YTAyLWI5Y2QtOGMxOGY3ZGQ0ZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJY64V9JcxfrTTPyuLqcUTWAR5MxZ0z64sZL nEKXpj8MRXFOnyc7J2f6/8YOsrNz9G9i9e0M3Ba9FWs0ZU0YQCDsXOiPr4E5YF+4 HE6TDL2FKOAUZSHLOD6z5kOvjBSf4IqpO+CaNq9EJvIr0pOkdpFy5QImdodKNkM0 N+FIa3dwR3i4Ofgh30aMXxcoT//O0uHhWBOcX2X+GetkM0Il26dKzb0DoolQ01Qe zxgQSnxOallBrnEq/yKA7AXsz01pXmR9CbysdvwBqDAA70qELaRN6VnCb2WboDbo WltodGSFuv0Rqou5BRgEhjfiT889GSeHjLl60wraNdjxluGjUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSBL4aCZ5Ixi2HYy9YC24b4bPxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjhkMDZiZTItMjQ5Ny0z ODdiLWIwOTMtZjkxNjFhNzlhYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF52xzhIOXKrUO/ldUxsqp5fIkrNgZfDBEksgIcCPyrE2/elVEgT4SD+ HdYCVSDaR66EAMMCXeMJU2Pa5F1hUNtiaGk91XFAoZFSIs8n05EE3NMmEjicSWrS Ifeudt7Vm34wBjQUkVSh+Kg7sb9cpUSppX+i4uum/smpWnvqauVJHWuW9KOoAx8n kZGlypHhO8TQbAMQOIfSUNEn5u25JSNcvgTMkHc5gG+5Qy7kY8S9X9zM2z11Wxpk 1bEI2Hl4nt5rXtg/u2cCgHrPRccfhNH4NNkJVSr/RafRbxv8VkcxXen7p55nnzWs dCxzGJefwxQYev5A1knYOa7UosL2Etk= -----END CERTIFICATE-----Generated at Wed Jul 29 03:42:35 2026 by rpki-client