$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9e39ac4-7283-30c0-a8a7-66d5e5955567.roa File: d9e39ac4-7283-30c0-a8a7-66d5e5955567.roa (raw, json) Hash identifier: 9OFZDsrST8/WyalG/lzEdM0SKpmds3FbunqTyvzlzYo= Subject key identifier: F0:4A:66:95:BD:95:9B:4D:CB:25:AC:B6:9A:9A:2C:BE:05:65:62:0C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F19FCF5AE62301709ACD8DE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9e39ac4-7283-30c0-a8a7-66d5e5955567.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 173.21.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f5:ae:62:30:17:09:ac:d8:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=8270c6b8-ef3c-44cc-857e-0086dcb45e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:62:a4:ff:97:42:a7:19:28:6e:92:0e:75:03: 35:43:a2:b6:68:29:a7:dd:f6:a1:a0:dd:1f:2d:a6: aa:8e:08:6e:8c:59:28:50:d1:29:ff:08:9c:59:1c: a8:cd:a2:dc:77:8c:8f:41:b8:2f:ac:06:12:07:16: 2e:31:2e:da:99:38:f3:3c:63:1a:95:38:5d:94:14: 15:ee:7b:b3:2d:57:96:f9:5d:8f:7d:72:e8:1a:24: 0b:a7:ec:e4:8c:09:e8:ef:67:50:0b:ae:8b:55:9d: 53:57:5e:2e:79:75:01:df:e7:9b:2d:f2:72:12:1c: 45:8b:7e:93:75:47:37:72:d7:44:9c:47:c6:99:7d: 2e:c3:ef:9a:99:be:92:f8:2d:b5:a2:ad:8f:8c:2e: 9d:d9:ff:75:a3:db:4e:f8:b4:46:a3:37:f3:c3:57: 93:05:0c:2b:75:28:05:52:d1:57:fd:1d:89:a7:52: cc:73:4a:03:47:db:21:16:f2:05:cd:e7:a8:b6:a2: 1a:0b:bb:13:46:20:38:76:37:01:7b:b3:f9:13:46: 12:05:69:0b:14:1e:64:42:a8:e8:58:e2:1a:5f:87: 62:3d:7a:e2:0d:35:cc:22:33:df:59:f3:a4:8f:ce: c7:34:23:cc:85:18:2c:77:9e:d4:89:9f:e6:4e:2a: a3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4A:66:95:BD:95:9B:4D:CB:25:AC:B6:9A:9A:2C:BE:05:65:62:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d9e39ac4-7283-30c0-a8a7-66d5e5955567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ec:67:64:fe:1d:da:a2:d9:ff:1d:94:ab:55:05:69:01:80: 69:44:e3:ec:3a:76:4e:7b:f4:3d:5f:cb:39:f3:28:87:be:0d: 64:34:95:4a:87:81:1f:c7:57:ec:77:e8:9a:95:70:d5:43:a9: c6:c7:86:a2:6f:69:39:dc:62:cc:c7:0f:3d:69:42:69:9e:81: 01:b8:9e:73:d2:6d:41:ad:c4:bd:9c:99:3c:68:dc:d2:78:56: 01:52:5b:99:b0:b6:d0:b3:ee:09:b1:69:01:ac:11:22:85:db: bb:82:90:dc:4c:97:01:32:cc:34:2b:29:65:32:80:1f:1d:f0: 77:d8:97:d8:2d:ca:f3:8c:8e:66:57:4c:84:ae:ba:43:9c:47: 75:ee:6a:bf:47:b4:07:55:8e:1c:e3:80:34:42:2d:3a:48:a6: 3d:7a:1a:7f:90:99:f9:df:66:49:81:9a:d6:78:6f:67:d5:98: 26:71:2c:5d:a1:16:b5:86:24:3b:27:a1:26:c9:11:f4:15:03: 8f:c0:89:6b:61:d9:55:16:72:62:19:00:e2:d4:cc:7a:59:bc: 36:b1:6e:cf:79:b1:18:68:0e:4c:3c:dd:36:2b:23:9d:b7:b4: 01:93:e9:73:50:2f:3a:f2:81:1f:5a:9e:1e:01:e9:3f:f1:81: ee:9e:46:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PWuYjAXCazY3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk ODI3MGM2YjgtZWYzYy00NGNjLTg1N2UtMDA4NmRjYjQ1ZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmKk/5dCpxkobpIOdQM1Q6K2aCmn3fahoN0f LaaqjghujFkoUNEp/wicWRyozaLcd4yPQbgvrAYSBxYuMS7amTjzPGMalThdlBQV 7nuzLVeW+V2PfXLoGiQLp+zkjAno72dQC66LVZ1TV14ueXUB3+ebLfJyEhxFi36T dUc3ctdEnEfGmX0uw++amb6S+C21oq2PjC6d2f91o9tO+LRGozfzw1eTBQwrdSgF UtFX/R2Jp1LMc0oDR9shFvIFzeeotqIaC7sTRiA4djcBe7P5E0YSBWkLFB5kQqjo WOIaX4diPXriDTXMIjPfWfOkj87HNCPMhRgsd57UiZ/mTiqjFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBKZpW9lZtNyyWstpqaLL4FZWIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDllMzlhYzQtNzI4My0z MGMwLWE4YTctNjZkNWU1OTU1NTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRUOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADsZ2T+Hdqi2f8dlKtVBWkBgGlE4+w6dk579D1fyznzKIe+DWQ0lUqH gR/HV+x36JqVcNVDqcbHhqJvaTncYszHDz1pQmmegQG4nnPSbUGtxL2cmTxo3NJ4 VgFSW5mwttCz7gmxaQGsESKF27uCkNxMlwEyzDQrKWUygB8d8HfYl9gtyvOMjmZX TISuukOcR3Xuar9HtAdVjhzjgDRCLTpIpj16Gn+QmfnfZkmBmtZ4b2fVmCZxLF2h FrWGJDsnoSbJEfQVA4/AiWth2VUWcmIZAOLUzHpZvDaxbs95sRhoDkw83TYrI523 tAGT6XNQLzrygR9anh4B6T/xge6eRlY= -----END CERTIFICATE-----Generated at Tue Sep 22 21:11:07 2026 by rpki-client