$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db92a908-6801-3164-911b-959f6161a9b9.roa File: db92a908-6801-3164-911b-959f6161a9b9.roa (raw, json) Hash identifier: /IpG7M3iCbSiTIj9ElnmKDcG00SuJfkrHR6oVU7mMo4= Subject key identifier: 46:B7:88:65:E9:44:58:4F:55:65:17:16:A2:04:52:30:68:26:58:CA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49733ABCED2C4D315F5C9E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db92a908-6801-3164-911b-959f6161a9b9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.21.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:3a:bc:ed:2c:4d:31:5f:5c:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=239d700d-0543-47f0-a27d-eae8f6c9cf48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:48:3a:af:7f:ec:6e:63:03:3f:b9:32:6c:57: 19:b9:f4:99:ab:b2:09:ef:de:75:ce:4c:ad:47:71: fb:85:bb:5c:54:81:ca:71:59:85:0d:a8:e2:5b:df: 69:28:89:83:39:58:ec:15:d0:13:10:23:0e:14:31: 78:f3:90:2f:96:57:02:60:b0:1b:53:32:2a:b5:61: 35:aa:37:df:19:3a:de:5f:16:a9:66:d2:1c:a1:cf: 69:58:2e:6c:c9:df:00:9d:d8:96:df:0a:1c:46:da: 01:26:7a:cb:33:96:a1:9f:2a:2d:8b:c7:f5:f3:05: 2e:76:79:e3:69:a2:25:17:b3:a2:ce:25:a2:c7:30: b2:85:4c:73:57:19:dd:da:4c:09:cd:2f:c3:91:3a: c9:8f:bc:d5:df:b1:d3:ad:a0:ed:af:97:41:ae:a9: 44:38:77:0a:d3:42:66:ba:b1:14:8f:b0:32:f5:5d: 47:36:1c:20:49:3c:d8:bc:78:46:ac:40:2a:01:6c: 29:cd:ca:40:30:2e:6c:80:63:58:ff:5b:ec:06:b5: 25:66:03:7d:59:31:ce:0a:32:59:7e:eb:47:1b:80: 61:b3:f5:16:1f:5b:b2:2d:79:2d:39:cf:90:50:e5: 00:8d:c9:62:0f:2d:9e:42:77:cd:76:c6:aa:d0:a6: b5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B7:88:65:E9:44:58:4F:55:65:17:16:A2:04:52:30:68:26:58:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db92a908-6801-3164-911b-959f6161a9b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:02:68:b1:e3:c6:7a:8b:37:e1:c6:09:4e:fc:b7:12:b4:f0: 68:a3:d9:0a:f3:d9:ad:9f:d0:c2:86:86:de:c9:bb:4f:bb:12: 0b:21:f9:60:68:c1:bc:cd:c1:e5:d9:a7:7f:f5:90:04:83:a8: 51:24:ef:46:d9:1e:76:e3:a7:9f:29:4e:de:16:ca:03:6e:20: 61:c4:e5:8a:dc:65:40:3f:d5:be:0e:12:d5:7d:96:ea:8f:b4: 4a:ef:df:89:81:78:8f:63:d2:0d:23:fb:ca:af:3b:2c:cb:fe: 79:57:78:26:4a:c3:02:3e:14:36:da:a1:a1:c1:1e:0d:2f:cf: 64:eb:c1:1e:60:eb:c4:72:e8:a6:dd:46:68:39:ea:48:1e:a6: 26:5c:01:8b:e4:65:2c:64:20:96:02:7b:11:21:8d:87:7f:68: da:95:3c:d8:7e:d1:a9:19:f1:3e:ac:fc:7e:99:90:a3:62:c5: 87:60:9b:9e:c6:5e:07:99:6a:03:86:92:bf:0a:1e:6d:3c:e3: 7c:a9:66:45:a9:83:35:a4:dc:55:93:b5:aa:c3:8f:86:70:fa: e8:7c:e5:4a:22:a0:c6:fa:59:27:f0:59:7c:19:00:9d:d6:c8: 86:fb:af:8e:f5:67:c9:54:9b:29:a9:6b:1d:06:18:7a:f9:a4: a5:68:96:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jczq87SxNMV9cnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjM5ZDcwMGQtMDU0My00N2YwLWEyN2QtZWFlOGY2YzljZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikg6r3/sbmMDP7kybFcZufSZq7IJ7951zkyt R3H7hbtcVIHKcVmFDajiW99pKImDOVjsFdATECMOFDF485AvllcCYLAbUzIqtWE1 qjffGTreXxapZtIcoc9pWC5syd8AndiW3wocRtoBJnrLM5ahnyoti8f18wUudnnj aaIlF7OiziWixzCyhUxzVxnd2kwJzS/DkTrJj7zV37HTraDtr5dBrqlEOHcK00Jm urEUj7Ay9V1HNhwgSTzYvHhGrEAqAWwpzcpAMC5sgGNY/1vsBrUlZgN9WTHOCjJZ futHG4Bhs/UWH1uyLXktOc+QUOUAjcliDy2eQnfNdsaq0Ka1AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEa3iGXpRFhPVWUXFqIEUjBoJljKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGI5MmE5MDgtNjgwMS0z MTY0LTkxMWItOTU5ZjYxNjFhOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoCaLHjxnqLN+HGCU78txK08Gij2Qrz2a2f0MKGht7Ju0+7Egsh+WBo wbzNweXZp3/1kASDqFEk70bZHnbjp58pTt4WygNuIGHE5YrcZUA/1b4OEtV9luqP tErv34mBeI9j0g0j+8qvOyzL/nlXeCZKwwI+FDbaoaHBHg0vz2TrwR5g68Ry6Kbd Rmg56kgepiZcAYvkZSxkIJYCexEhjYd/aNqVPNh+0akZ8T6s/H6ZkKNixYdgm57G XgeZagOGkr8KHm0843ypZkWpgzWk3FWTtarDj4Zw+uh85UoioMb6WSfwWXwZAJ3W yIb7r471Z8lUmympax0GGHr5pKVoluY= -----END CERTIFICATE-----Generated at Sun Oct 4 22:08:12 2026 by rpki-client