$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa File: c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa (raw, json) Hash identifier: cIbk1qnxkJDeGRiazpJ1jte1xFJ08rrq65AiFxx1CSo= Subject key identifier: 82:E8:AA:00:A4:9D:68:C1:0B:CC:AF:8A:C2:A0:F3:84:A9:53:D5:63 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E086653051AD54369DFDEF500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 30036 IP address blocks: 173.21.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:66:53:05:1a:d5:43:69:df:de:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=2e8abd7e-536e-4005-8f67-98afa6ece022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c1:99:b9:9b:54:b7:fa:cf:55:3f:48:06:97: 80:2f:bc:c1:38:22:b1:33:60:9d:2a:76:72:5d:21: 24:92:54:bc:b8:d3:67:c7:06:f2:4a:8b:40:51:25: f4:ad:1d:c6:b4:db:86:51:19:9a:d4:62:9a:05:e0: 53:45:99:55:13:f5:89:30:43:dd:3d:d9:d5:f8:74: 75:51:16:1c:4f:2e:8c:fd:08:b4:49:7e:b0:a0:f4: b1:82:f6:2f:8b:95:93:07:8e:e4:fc:b9:59:33:12: af:77:9d:4d:41:52:70:f3:52:f0:08:01:11:87:2f: df:38:ba:23:40:75:04:87:8a:8d:0e:e3:f1:e5:77: 42:1b:46:44:7e:4b:4c:19:75:f8:2f:8f:17:a8:05: 3e:04:73:26:d3:f1:cc:37:aa:10:2c:4d:d1:6b:45: 99:17:9e:37:5b:7d:9a:63:8a:4c:01:10:8b:8f:fe: 5d:89:31:91:39:9a:34:9f:4b:c3:96:2b:1e:f1:03: 0d:08:d1:d8:64:51:98:1c:56:68:62:85:03:85:00: 66:c9:13:41:fd:99:ea:cf:ae:f0:6b:8f:3d:42:46: 16:f5:df:f4:5c:be:2a:d4:5d:d9:93:f0:f8:75:a2: 24:59:e2:71:b3:34:e8:47:e5:77:e2:12:28:80:c1: 6d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E8:AA:00:A4:9D:68:C1:0B:CC:AF:8A:C2:A0:F3:84:A9:53:D5:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:7e:ce:8b:b1:0a:88:2f:fc:5e:04:1c:0c:da:35:29:00:67: 3a:9e:16:ff:6f:b3:2e:99:c3:a2:af:a5:dd:12:58:54:ff:8a: 49:44:34:ec:d3:d9:25:e7:ca:c8:ac:c9:b7:82:53:37:0f:46: 9c:b7:ca:97:7d:77:ca:3d:bc:e5:94:c3:e3:0d:13:87:4d:b0: 99:c8:33:c5:eb:21:28:81:f3:25:8c:96:50:43:19:53:c5:f3: c6:c7:95:64:a2:77:08:32:85:5a:c2:35:f8:9b:16:ec:44:b1: 0b:2f:a5:6b:a7:13:e8:39:4e:09:81:0d:e1:b4:55:c7:18:ea: c7:b6:dd:0f:75:54:5a:e5:ee:ab:25:59:fd:d3:a3:5e:7a:8f: 16:3c:f9:27:fd:30:c8:40:d4:74:58:a1:84:65:10:89:07:8d: 13:da:af:19:c6:e6:88:d4:3f:05:a3:8f:58:93:94:b2:d9:b3: 1f:a5:9f:d5:d4:62:c6:37:c4:73:0e:58:f4:48:53:83:99:40: fa:16:3d:e0:e9:0c:99:f0:56:e8:66:25:2a:c3:95:0f:5b:ad: fa:e2:6c:78:00:19:42:f3:f7:03:5b:07:88:14:fc:92:f3:ff: 63:f0:e0:ec:5f:af:97:46:f4:cf:06:bf:16:81:0b:35:d5:10: 83:99:fe:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZlMFGtVDad/e9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk MmU4YWJkN2UtNTM2ZS00MDA1LThmNjctOThhZmE2ZWNlMDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMGZuZtUt/rPVT9IBpeAL7zBOCKxM2CdKnZy XSEkklS8uNNnxwbySotAUSX0rR3GtNuGURma1GKaBeBTRZlVE/WJMEPdPdnV+HR1 URYcTy6M/Qi0SX6woPSxgvYvi5WTB47k/LlZMxKvd51NQVJw81LwCAERhy/fOLoj QHUEh4qNDuPx5XdCG0ZEfktMGXX4L48XqAU+BHMm0/HMN6oQLE3Ra0WZF543W32a Y4pMARCLj/5diTGROZo0n0vDlise8QMNCNHYZFGYHFZoYoUDhQBmyRNB/Znqz67w a489QkYW9d/0XL4q1F3Zk/D4daIkWeJxszToR+V34hIogMFtNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILoqgCknWjBC8yvisKg84SpU9VjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzMzZjNhMmUtNmIxYS0z NmNjLWE4NzktN2ViZTA4NTY4YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF+zouxCogv/F4EHAzaNSkAZzqeFv9vsy6Zw6Kvpd0SWFT/iklENOzT 2SXnysisybeCUzcPRpy3ypd9d8o9vOWUw+MNE4dNsJnIM8XrISiB8yWMllBDGVPF 88bHlWSidwgyhVrCNfibFuxEsQsvpWunE+g5TgmBDeG0VccY6se23Q91VFrl7qsl Wf3To156jxY8+Sf9MMhA1HRYoYRlEIkHjRParxnG5ojUPwWjj1iTlLLZsx+ln9XU YsY3xHMOWPRIU4OZQPoWPeDpDJnwVuhmJSrDlQ9brfribHgAGULz9wNbB4gU/JLz /2Pw4Oxfr5dG9M8GvxaBCzXVEIOZ/mE= -----END CERTIFICATE-----Generated at Sat Jun 13 17:11:25 2026 by rpki-client